{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:YCD4G43NG4MTRQGGRRYSBFWYTD","short_pith_number":"pith:YCD4G43N","canonical_record":{"source":{"id":"2409.19149","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-09-27T21:23:46Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"7320a83ea82a2ef58eb81e04a1af653165dcdfa6bc55d2eb7ca55b7532da14c7","abstract_canon_sha256":"d4e92420def1f17f015e804b5dc75224375b44ccfca26cc47dea0716b1ae949f"},"schema_version":"1.0"},"canonical_sha256":"c087c3736d371938c0c68c712096d898fb76c1cc5c3f1babe80a8a1094b1e18e","source":{"kind":"arxiv","id":"2409.19149","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.19149","created_at":"2026-07-05T11:19:21Z"},{"alias_kind":"arxiv_version","alias_value":"2409.19149v2","created_at":"2026-07-05T11:19:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.19149","created_at":"2026-07-05T11:19:21Z"},{"alias_kind":"pith_short_12","alias_value":"YCD4G43NG4MT","created_at":"2026-07-05T11:19:21Z"},{"alias_kind":"pith_short_16","alias_value":"YCD4G43NG4MTRQGG","created_at":"2026-07-05T11:19:21Z"},{"alias_kind":"pith_short_8","alias_value":"YCD4G43N","created_at":"2026-07-05T11:19:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:YCD4G43NG4MTRQGGRRYSBFWYTD","target":"record","payload":{"canonical_record":{"source":{"id":"2409.19149","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-09-27T21:23:46Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"7320a83ea82a2ef58eb81e04a1af653165dcdfa6bc55d2eb7ca55b7532da14c7","abstract_canon_sha256":"d4e92420def1f17f015e804b5dc75224375b44ccfca26cc47dea0716b1ae949f"},"schema_version":"1.0"},"canonical_sha256":"c087c3736d371938c0c68c712096d898fb76c1cc5c3f1babe80a8a1094b1e18e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:19:21.404502Z","signature_b64":"L8znGsLfSAWPTf1NhAehMB7aMi7iufDpJ9KWIagQ16xTBDUyrNXwelSxLuAuifF9sU355PLjsoTVS8QTNQPVDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c087c3736d371938c0c68c712096d898fb76c1cc5c3f1babe80a8a1094b1e18e","last_reissued_at":"2026-07-05T11:19:21.403976Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:19:21.403976Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.19149","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:19:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yaMW8VxvCgnCxPn+3h+8R277oeCkCbI/wWosPx7c3pmmULX4h9e8G7B0IPF+2ADOztbOR7DEnu3e/JErwYcDDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T18:29:47.719269Z"},"content_sha256":"0db4b01911882f02b600c4e31c18c2005806750f9044297d383b2a1aa95791a5","schema_version":"1.0","event_id":"sha256:0db4b01911882f02b600c4e31c18c2005806750f9044297d383b2a1aa95791a5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:YCD4G43NG4MTRQGGRRYSBFWYTD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Multimodal Pragmatic Jailbreak on Text-to-image Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Gengyuan Zhang, Jiawen Wang, Jindong Gu, Philip Torr, Shuo Chen, Tong Liu, Vera Demberg, Volker Tresp, Zhixin Lai","submitted_at":"2024-09-27T21:23:46Z","abstract_excerpt":"Diffusion models have recently achieved remarkable advancements in terms of image quality and fidelity to textual prompts. Concurrently, the safety of such generative models has become an area of growing concern. This work introduces a novel type of jailbreak, which triggers T2I models to generate the image with visual text, where the image and the text, although considered to be safe in isolation, combine to form unsafe content. To systematically explore this phenomenon, we propose a dataset to evaluate the current diffusion-based text-to-image (T2I) models under such jailbreak. We benchmark "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.19149","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.19149/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:19:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"093Hq/kd95fLdY0HUcnzdCmA/Mx0gUuZZvl/dK+9uxptefCPKAcndNrL1/iIozaJN21fhWMHYa+8mEDzHE59Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T18:29:47.719805Z"},"content_sha256":"6abea6d7db4ef97f10f146504d33cce6b2f5c853c5f14498c545e2bcc57b7810","schema_version":"1.0","event_id":"sha256:6abea6d7db4ef97f10f146504d33cce6b2f5c853c5f14498c545e2bcc57b7810"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YCD4G43NG4MTRQGGRRYSBFWYTD/bundle.json","state_url":"https://pith.science/pith/YCD4G43NG4MTRQGGRRYSBFWYTD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YCD4G43NG4MTRQGGRRYSBFWYTD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T18:29:47Z","links":{"resolver":"https://pith.science/pith/YCD4G43NG4MTRQGGRRYSBFWYTD","bundle":"https://pith.science/pith/YCD4G43NG4MTRQGGRRYSBFWYTD/bundle.json","state":"https://pith.science/pith/YCD4G43NG4MTRQGGRRYSBFWYTD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YCD4G43NG4MTRQGGRRYSBFWYTD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:YCD4G43NG4MTRQGGRRYSBFWYTD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d4e92420def1f17f015e804b5dc75224375b44ccfca26cc47dea0716b1ae949f","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-09-27T21:23:46Z","title_canon_sha256":"7320a83ea82a2ef58eb81e04a1af653165dcdfa6bc55d2eb7ca55b7532da14c7"},"schema_version":"1.0","source":{"id":"2409.19149","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.19149","created_at":"2026-07-05T11:19:21Z"},{"alias_kind":"arxiv_version","alias_value":"2409.19149v2","created_at":"2026-07-05T11:19:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.19149","created_at":"2026-07-05T11:19:21Z"},{"alias_kind":"pith_short_12","alias_value":"YCD4G43NG4MT","created_at":"2026-07-05T11:19:21Z"},{"alias_kind":"pith_short_16","alias_value":"YCD4G43NG4MTRQGG","created_at":"2026-07-05T11:19:21Z"},{"alias_kind":"pith_short_8","alias_value":"YCD4G43N","created_at":"2026-07-05T11:19:21Z"}],"graph_snapshots":[{"event_id":"sha256:6abea6d7db4ef97f10f146504d33cce6b2f5c853c5f14498c545e2bcc57b7810","target":"graph","created_at":"2026-07-05T11:19:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.19149/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Diffusion models have recently achieved remarkable advancements in terms of image quality and fidelity to textual prompts. Concurrently, the safety of such generative models has become an area of growing concern. This work introduces a novel type of jailbreak, which triggers T2I models to generate the image with visual text, where the image and the text, although considered to be safe in isolation, combine to form unsafe content. To systematically explore this phenomenon, we propose a dataset to evaluate the current diffusion-based text-to-image (T2I) models under such jailbreak. We benchmark ","authors_text":"Gengyuan Zhang, Jiawen Wang, Jindong Gu, Philip Torr, Shuo Chen, Tong Liu, Vera Demberg, Volker Tresp, Zhixin Lai","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-09-27T21:23:46Z","title":"Multimodal Pragmatic Jailbreak on Text-to-image Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.19149","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0db4b01911882f02b600c4e31c18c2005806750f9044297d383b2a1aa95791a5","target":"record","created_at":"2026-07-05T11:19:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d4e92420def1f17f015e804b5dc75224375b44ccfca26cc47dea0716b1ae949f","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-09-27T21:23:46Z","title_canon_sha256":"7320a83ea82a2ef58eb81e04a1af653165dcdfa6bc55d2eb7ca55b7532da14c7"},"schema_version":"1.0","source":{"id":"2409.19149","kind":"arxiv","version":2}},"canonical_sha256":"c087c3736d371938c0c68c712096d898fb76c1cc5c3f1babe80a8a1094b1e18e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c087c3736d371938c0c68c712096d898fb76c1cc5c3f1babe80a8a1094b1e18e","first_computed_at":"2026-07-05T11:19:21.403976Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:19:21.403976Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"L8znGsLfSAWPTf1NhAehMB7aMi7iufDpJ9KWIagQ16xTBDUyrNXwelSxLuAuifF9sU355PLjsoTVS8QTNQPVDg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:19:21.404502Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.19149","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0db4b01911882f02b600c4e31c18c2005806750f9044297d383b2a1aa95791a5","sha256:6abea6d7db4ef97f10f146504d33cce6b2f5c853c5f14498c545e2bcc57b7810"],"state_sha256":"4101f7c9ffc8dcfaee64f82d58d690aedeb07099404315081ed2d89fcd48a35f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"raBCU3+rGp8og5rrFnEVhsRLkAmXc4f4LeuhXAeJUG1j3gQysQfxuRhXnQUf0DN0hdRyWvtGe3MpD87tb96GBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T18:29:47.728703Z","bundle_sha256":"ac5a28cdbbb213c2e53073edb0f78f9dfa6ba372d0ae0258f4d3fd5b40b8c7a8"}}