{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:XQ5OBC7KVZUB4TI4LLFL5Y3OBN","short_pith_number":"pith:XQ5OBC7K","canonical_record":{"source":{"id":"2505.16166","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-22T03:11:35Z","cross_cats_sorted":[],"title_canon_sha256":"c598107433412babea8db8c05164d6d007794f36a5383833e08c18a5ddc08db8","abstract_canon_sha256":"0cae3b3f4207c9c612738e02a09b27215c67c88e3eae61619decea5959121650"},"schema_version":"1.0"},"canonical_sha256":"bc3ae08beaae681e4d1c5acabee36e0b4df4d324999e2df777781f49b11b87a7","source":{"kind":"arxiv","id":"2505.16166","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.16166","created_at":"2026-07-05T11:07:31Z"},{"alias_kind":"arxiv_version","alias_value":"2505.16166v1","created_at":"2026-07-05T11:07:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.16166","created_at":"2026-07-05T11:07:31Z"},{"alias_kind":"pith_short_12","alias_value":"XQ5OBC7KVZUB","created_at":"2026-07-05T11:07:31Z"},{"alias_kind":"pith_short_16","alias_value":"XQ5OBC7KVZUB4TI4","created_at":"2026-07-05T11:07:31Z"},{"alias_kind":"pith_short_8","alias_value":"XQ5OBC7K","created_at":"2026-07-05T11:07:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:XQ5OBC7KVZUB4TI4LLFL5Y3OBN","target":"record","payload":{"canonical_record":{"source":{"id":"2505.16166","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-22T03:11:35Z","cross_cats_sorted":[],"title_canon_sha256":"c598107433412babea8db8c05164d6d007794f36a5383833e08c18a5ddc08db8","abstract_canon_sha256":"0cae3b3f4207c9c612738e02a09b27215c67c88e3eae61619decea5959121650"},"schema_version":"1.0"},"canonical_sha256":"bc3ae08beaae681e4d1c5acabee36e0b4df4d324999e2df777781f49b11b87a7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:07:31.063536Z","signature_b64":"v9YeUEkV6Mb02gJ+roTJW7miOClkvzgtOIt4dIfhVwiT7xeAGXn5Xmxc3i1AGKP5quPZ4z6UMu9KvFJRU+GuCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bc3ae08beaae681e4d1c5acabee36e0b4df4d324999e2df777781f49b11b87a7","last_reissued_at":"2026-07-05T11:07:31.062974Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:07:31.062974Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.16166","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:07:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jC7J9o0qBwjdHYmeDPGWskiXjmsEgysNfrCAgxUfisythMl/6QX2rz7UK/Y0PPia4rMqXi5PN1Ei8kpnVvo5BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T16:42:32.858883Z"},"content_sha256":"a18c559f3867ef89896f9086c90b74944e346f91564eefa2ad9c6ee331c411f8","schema_version":"1.0","event_id":"sha256:a18c559f3867ef89896f9086c90b74944e346f91564eefa2ad9c6ee331c411f8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:XQ5OBC7KVZUB4TI4LLFL5Y3OBN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Cairong Zhao, Jiale Zhao, Junyao Gao, Miaojing Shi, Wentao Gu, Xinyang Jiang, Yifei Shen, Yuhao Xue, Zhifei Zhang","submitted_at":"2025-05-22T03:11:35Z","abstract_excerpt":"Adversarial attacks exploiting unrestricted natural perturbations present severe security risks to deep learning systems, yet their transferability across models remains limited due to distribution mismatches between generated adversarial features and real-world data. While recent works utilize pre-trained diffusion models as adversarial priors, they still encounter challenges due to the distribution shift between the distribution of ideal adversarial samples and the natural image distribution learned by the diffusion model. To address the challenge, we propose Transferable Robust Adversarial "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.16166","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.16166/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:07:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s18Vwlj4kdL2COQ3uxI71wqfW/+bemXO0kuZx6ZJdVdMqICAh/n6ZEYNZeZimnqz4W9dhdTQ0imPDXPQZNcfCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T16:42:32.859388Z"},"content_sha256":"fce648f15aa60d37213473dfacb9d7fb7bfe4a8edaeda2e04c1389bb5949a758","schema_version":"1.0","event_id":"sha256:fce648f15aa60d37213473dfacb9d7fb7bfe4a8edaeda2e04c1389bb5949a758"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XQ5OBC7KVZUB4TI4LLFL5Y3OBN/bundle.json","state_url":"https://pith.science/pith/XQ5OBC7KVZUB4TI4LLFL5Y3OBN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XQ5OBC7KVZUB4TI4LLFL5Y3OBN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T16:42:32Z","links":{"resolver":"https://pith.science/pith/XQ5OBC7KVZUB4TI4LLFL5Y3OBN","bundle":"https://pith.science/pith/XQ5OBC7KVZUB4TI4LLFL5Y3OBN/bundle.json","state":"https://pith.science/pith/XQ5OBC7KVZUB4TI4LLFL5Y3OBN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XQ5OBC7KVZUB4TI4LLFL5Y3OBN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:XQ5OBC7KVZUB4TI4LLFL5Y3OBN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0cae3b3f4207c9c612738e02a09b27215c67c88e3eae61619decea5959121650","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-22T03:11:35Z","title_canon_sha256":"c598107433412babea8db8c05164d6d007794f36a5383833e08c18a5ddc08db8"},"schema_version":"1.0","source":{"id":"2505.16166","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.16166","created_at":"2026-07-05T11:07:31Z"},{"alias_kind":"arxiv_version","alias_value":"2505.16166v1","created_at":"2026-07-05T11:07:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.16166","created_at":"2026-07-05T11:07:31Z"},{"alias_kind":"pith_short_12","alias_value":"XQ5OBC7KVZUB","created_at":"2026-07-05T11:07:31Z"},{"alias_kind":"pith_short_16","alias_value":"XQ5OBC7KVZUB4TI4","created_at":"2026-07-05T11:07:31Z"},{"alias_kind":"pith_short_8","alias_value":"XQ5OBC7K","created_at":"2026-07-05T11:07:31Z"}],"graph_snapshots":[{"event_id":"sha256:fce648f15aa60d37213473dfacb9d7fb7bfe4a8edaeda2e04c1389bb5949a758","target":"graph","created_at":"2026-07-05T11:07:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.16166/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attacks exploiting unrestricted natural perturbations present severe security risks to deep learning systems, yet their transferability across models remains limited due to distribution mismatches between generated adversarial features and real-world data. While recent works utilize pre-trained diffusion models as adversarial priors, they still encounter challenges due to the distribution shift between the distribution of ideal adversarial samples and the natural image distribution learned by the diffusion model. To address the challenge, we propose Transferable Robust Adversarial ","authors_text":"Cairong Zhao, Jiale Zhao, Junyao Gao, Miaojing Shi, Wentao Gu, Xinyang Jiang, Yifei Shen, Yuhao Xue, Zhifei Zhang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.16166","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a18c559f3867ef89896f9086c90b74944e346f91564eefa2ad9c6ee331c411f8","target":"record","created_at":"2026-07-05T11:07:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0cae3b3f4207c9c612738e02a09b27215c67c88e3eae61619decea5959121650","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-05-22T03:11:35Z","title_canon_sha256":"c598107433412babea8db8c05164d6d007794f36a5383833e08c18a5ddc08db8"},"schema_version":"1.0","source":{"id":"2505.16166","kind":"arxiv","version":1}},"canonical_sha256":"bc3ae08beaae681e4d1c5acabee36e0b4df4d324999e2df777781f49b11b87a7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bc3ae08beaae681e4d1c5acabee36e0b4df4d324999e2df777781f49b11b87a7","first_computed_at":"2026-07-05T11:07:31.062974Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:07:31.062974Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"v9YeUEkV6Mb02gJ+roTJW7miOClkvzgtOIt4dIfhVwiT7xeAGXn5Xmxc3i1AGKP5quPZ4z6UMu9KvFJRU+GuCA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:07:31.063536Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.16166","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a18c559f3867ef89896f9086c90b74944e346f91564eefa2ad9c6ee331c411f8","sha256:fce648f15aa60d37213473dfacb9d7fb7bfe4a8edaeda2e04c1389bb5949a758"],"state_sha256":"1216fb95b6a3b5402ddc331d1aeaed9b3431153ff42d96152c0197fa67864afa"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9ZBMv1huJze3wi5zsaIe2XKPh6nI4a2+u2SyMrs7aJ+jm3V9SqtHRIocUrOddzFS+FgUcl0OgdUTHu9/RwEnBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T16:42:32.864713Z","bundle_sha256":"a36a905c1f4f6650a1e7c7990fcc82dcf9376445bdaa31d5f9873470eb012ea7"}}