{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:XTXCRYJRC4BEUZAR34WXAG76KA","short_pith_number":"pith:XTXCRYJR","canonical_record":{"source":{"id":"2608.04052","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T10:20:41Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"64011d0c53b87f7584b074af06194ce1a94c166c8234a6a421efe9f6c3307142","abstract_canon_sha256":"fe076a4c286880cce1095e13ca710be398703b0b1661098109f304d01d9eeae1"},"schema_version":"1.0"},"canonical_sha256":"bcee28e13117024a6411df2d701bfe5024d9a2fc2621c10e50396f21e0699713","source":{"kind":"arxiv","id":"2608.04052","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.04052","created_at":"2026-08-06T01:28:04Z"},{"alias_kind":"arxiv_version","alias_value":"2608.04052v1","created_at":"2026-08-06T01:28:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.04052","created_at":"2026-08-06T01:28:04Z"},{"alias_kind":"pith_short_12","alias_value":"XTXCRYJRC4BE","created_at":"2026-08-06T01:28:04Z"},{"alias_kind":"pith_short_16","alias_value":"XTXCRYJRC4BEUZAR","created_at":"2026-08-06T01:28:04Z"},{"alias_kind":"pith_short_8","alias_value":"XTXCRYJR","created_at":"2026-08-06T01:28:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:XTXCRYJRC4BEUZAR34WXAG76KA","target":"record","payload":{"canonical_record":{"source":{"id":"2608.04052","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T10:20:41Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"64011d0c53b87f7584b074af06194ce1a94c166c8234a6a421efe9f6c3307142","abstract_canon_sha256":"fe076a4c286880cce1095e13ca710be398703b0b1661098109f304d01d9eeae1"},"schema_version":"1.0"},"canonical_sha256":"bcee28e13117024a6411df2d701bfe5024d9a2fc2621c10e50396f21e0699713","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-06T01:28:04.859089Z","signature_b64":"vqyWLjrq0kUuYdYu6do8sROwId811VWItdNS1IRZgMKMfHVxL5hMhDPx7mdGEBha4Vfz19JozenEG1qazxCVDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bcee28e13117024a6411df2d701bfe5024d9a2fc2621c10e50396f21e0699713","last_reissued_at":"2026-08-06T01:28:04.857580Z","signature_status":"signed_v1","first_computed_at":"2026-08-06T01:28:04.857580Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.04052","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-06T01:28:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4DMDTGW8G/a8TZzApNGOBc2G+5BrzuyPzMjd9aErTRW0Vf1doT7NmN4rsd2mXTXhnTpTYqi6c8ASOWQ2r8+CCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T20:45:11.237182Z"},"content_sha256":"9b2393b34bd1a15699d92633950fdf441d821af1b9fab8ffe7c718b2e7666eb5","schema_version":"1.0","event_id":"sha256:9b2393b34bd1a15699d92633950fdf441d821af1b9fab8ffe7c718b2e7666eb5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:XTXCRYJRC4BEUZAR34WXAG76KA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"When Modalities Fail to Tango: Conformal Backdoor Detection in Multimodal Contrastive Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Haiwei Wu, Jiantao Zhou, Kemou Li, Yiming Chen","submitted_at":"2026-08-04T10:20:41Z","abstract_excerpt":"Backdoor attacks in multimodal contrastive learning (MCL) have garnered growing attention in recent years, as many downstream tasks critically depend on pre-trained MCL models. Existing detection-based defenses predominantly rely on the CLIPScore metric, under the assumption that poisoned pairs exhibit lower semantic similarity between the image and the caption. However, we identify two critical flaws remaining in existing methods: (1) the substantial overlap between CLIPScore distributions of benign and poisoned pairs undermines the reliability of this metric, and (2) fixed-threshold detectio"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.04052","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.04052/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-06T01:28:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f7KNX8BavRWX7hNkFAPXqxPv4zZgQC6UxJHrGN3TvC9esA9UoeDZCw4UDMI75PWVjpEjnxi++X5ryMebNGhPDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T20:45:11.237719Z"},"content_sha256":"b9ec8a7aa8bfb73f0ddd162529f8e145390ea78b78e012b588e32d51cdfdcc3c","schema_version":"1.0","event_id":"sha256:b9ec8a7aa8bfb73f0ddd162529f8e145390ea78b78e012b588e32d51cdfdcc3c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XTXCRYJRC4BEUZAR34WXAG76KA/bundle.json","state_url":"https://pith.science/pith/XTXCRYJRC4BEUZAR34WXAG76KA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XTXCRYJRC4BEUZAR34WXAG76KA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T20:45:11Z","links":{"resolver":"https://pith.science/pith/XTXCRYJRC4BEUZAR34WXAG76KA","bundle":"https://pith.science/pith/XTXCRYJRC4BEUZAR34WXAG76KA/bundle.json","state":"https://pith.science/pith/XTXCRYJRC4BEUZAR34WXAG76KA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XTXCRYJRC4BEUZAR34WXAG76KA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:XTXCRYJRC4BEUZAR34WXAG76KA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fe076a4c286880cce1095e13ca710be398703b0b1661098109f304d01d9eeae1","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T10:20:41Z","title_canon_sha256":"64011d0c53b87f7584b074af06194ce1a94c166c8234a6a421efe9f6c3307142"},"schema_version":"1.0","source":{"id":"2608.04052","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.04052","created_at":"2026-08-06T01:28:04Z"},{"alias_kind":"arxiv_version","alias_value":"2608.04052v1","created_at":"2026-08-06T01:28:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.04052","created_at":"2026-08-06T01:28:04Z"},{"alias_kind":"pith_short_12","alias_value":"XTXCRYJRC4BE","created_at":"2026-08-06T01:28:04Z"},{"alias_kind":"pith_short_16","alias_value":"XTXCRYJRC4BEUZAR","created_at":"2026-08-06T01:28:04Z"},{"alias_kind":"pith_short_8","alias_value":"XTXCRYJR","created_at":"2026-08-06T01:28:04Z"}],"graph_snapshots":[{"event_id":"sha256:b9ec8a7aa8bfb73f0ddd162529f8e145390ea78b78e012b588e32d51cdfdcc3c","target":"graph","created_at":"2026-08-06T01:28:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.04052/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks in multimodal contrastive learning (MCL) have garnered growing attention in recent years, as many downstream tasks critically depend on pre-trained MCL models. Existing detection-based defenses predominantly rely on the CLIPScore metric, under the assumption that poisoned pairs exhibit lower semantic similarity between the image and the caption. However, we identify two critical flaws remaining in existing methods: (1) the substantial overlap between CLIPScore distributions of benign and poisoned pairs undermines the reliability of this metric, and (2) fixed-threshold detectio","authors_text":"Haiwei Wu, Jiantao Zhou, Kemou Li, Yiming Chen","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T10:20:41Z","title":"When Modalities Fail to Tango: Conformal Backdoor Detection in Multimodal Contrastive Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.04052","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9b2393b34bd1a15699d92633950fdf441d821af1b9fab8ffe7c718b2e7666eb5","target":"record","created_at":"2026-08-06T01:28:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fe076a4c286880cce1095e13ca710be398703b0b1661098109f304d01d9eeae1","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T10:20:41Z","title_canon_sha256":"64011d0c53b87f7584b074af06194ce1a94c166c8234a6a421efe9f6c3307142"},"schema_version":"1.0","source":{"id":"2608.04052","kind":"arxiv","version":1}},"canonical_sha256":"bcee28e13117024a6411df2d701bfe5024d9a2fc2621c10e50396f21e0699713","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bcee28e13117024a6411df2d701bfe5024d9a2fc2621c10e50396f21e0699713","first_computed_at":"2026-08-06T01:28:04.857580Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-06T01:28:04.857580Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vqyWLjrq0kUuYdYu6do8sROwId811VWItdNS1IRZgMKMfHVxL5hMhDPx7mdGEBha4Vfz19JozenEG1qazxCVDw==","signature_status":"signed_v1","signed_at":"2026-08-06T01:28:04.859089Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.04052","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9b2393b34bd1a15699d92633950fdf441d821af1b9fab8ffe7c718b2e7666eb5","sha256:b9ec8a7aa8bfb73f0ddd162529f8e145390ea78b78e012b588e32d51cdfdcc3c"],"state_sha256":"5782872e5907f210dd44bea1d9a477a722444495833034db66b6e522b49ad355"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gYe169g6wMfd42EgkMSp6cmjR/LOTZ9v2gyJ2ddK1WtzX6wIi5z+KmIGpewVkTwVjlw6cKEUYNvvAnLqH1HSCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T20:45:11.242569Z","bundle_sha256":"449d87a10514bfb43974dba9f6ff504679a15b8ad495266e21a03df5c54bc72d"}}