{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:YLCXYTE3DDYJ7G5U35AYAUTGBX","short_pith_number":"pith:YLCXYTE3","canonical_record":{"source":{"id":"2311.11261","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-19T07:47:43Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"09f76deb9a01dc1c08d1c4c4da446d5a524a7738a083d393135d44cb48aa11ec","abstract_canon_sha256":"9756a3d8729c17b8c022a6d2da24ec4fa4f241a843c75b7dc9638d2dbf258ce8"},"schema_version":"1.0"},"canonical_sha256":"c2c57c4c9b18f09f9bb4df418052660dfeae9394666c925be161b7519339abd9","source":{"kind":"arxiv","id":"2311.11261","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.11261","created_at":"2026-07-05T08:56:15Z"},{"alias_kind":"arxiv_version","alias_value":"2311.11261v3","created_at":"2026-07-05T08:56:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.11261","created_at":"2026-07-05T08:56:15Z"},{"alias_kind":"pith_short_12","alias_value":"YLCXYTE3DDYJ","created_at":"2026-07-05T08:56:15Z"},{"alias_kind":"pith_short_16","alias_value":"YLCXYTE3DDYJ7G5U","created_at":"2026-07-05T08:56:15Z"},{"alias_kind":"pith_short_8","alias_value":"YLCXYTE3","created_at":"2026-07-05T08:56:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:YLCXYTE3DDYJ7G5U35AYAUTGBX","target":"record","payload":{"canonical_record":{"source":{"id":"2311.11261","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-19T07:47:43Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"09f76deb9a01dc1c08d1c4c4da446d5a524a7738a083d393135d44cb48aa11ec","abstract_canon_sha256":"9756a3d8729c17b8c022a6d2da24ec4fa4f241a843c75b7dc9638d2dbf258ce8"},"schema_version":"1.0"},"canonical_sha256":"c2c57c4c9b18f09f9bb4df418052660dfeae9394666c925be161b7519339abd9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:56:15.148922Z","signature_b64":"J7E5XEVX90B/UW2pvjVNlwSe0kdOd+hjl6hza+GtrumrEOwH3djnlZ4nZFdirReu397Ce/CRGA/sYTqtq1hgDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c2c57c4c9b18f09f9bb4df418052660dfeae9394666c925be161b7519339abd9","last_reissued_at":"2026-07-05T08:56:15.148486Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:56:15.148486Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.11261","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:56:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SmXiGKlyNCeNY3JO9sQ4O/4hCVo/E+RoWABio04chzM+5CP6M1F18SbonZn7GHnR4fqcIeNQbS+o/EcydwVGDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T07:45:33.167875Z"},"content_sha256":"656a79a8b49621a5743666c965d8de07de3b09c4b79b4eb62d9cfa1b54bebf09","schema_version":"1.0","event_id":"sha256:656a79a8b49621a5743666c965d8de07de3b09c4b79b4eb62d9cfa1b54bebf09"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:YLCXYTE3DDYJ7G5U35AYAUTGBX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Prompt Tuning for Vision-Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Jiaming Zhang, Jiaqi Wang, Jitao Sang, Lingyu Qiu, Xingjun Ma, Xin Wang, Yu-Gang Jiang","submitted_at":"2023-11-19T07:47:43Z","abstract_excerpt":"With the rapid advancement of multimodal learning, pre-trained Vision-Language Models (VLMs) such as CLIP have demonstrated remarkable capacities in bridging the gap between visual and language modalities. However, these models remain vulnerable to adversarial attacks, particularly in the image modality, presenting considerable security risks. This paper introduces Adversarial Prompt Tuning (AdvPT), a novel technique to enhance the adversarial robustness of image encoders in VLMs. AdvPT innovatively leverages learnable text prompts and aligns them with adversarial image embeddings, to address "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.11261","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.11261/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:56:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EcvUckqWcP70RrEsCyYFQXTp+A+iCdUJ+htuUL/vHz1lUe76P5cyw3gjBclzHAc+JxX6qDhSEY0HLVUCxBprAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T07:45:33.168815Z"},"content_sha256":"9522961642741de88da0482a5c6e5bb97de2135a4d9bfa49e7b04c5bf2d0ae5b","schema_version":"1.0","event_id":"sha256:9522961642741de88da0482a5c6e5bb97de2135a4d9bfa49e7b04c5bf2d0ae5b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YLCXYTE3DDYJ7G5U35AYAUTGBX/bundle.json","state_url":"https://pith.science/pith/YLCXYTE3DDYJ7G5U35AYAUTGBX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YLCXYTE3DDYJ7G5U35AYAUTGBX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T07:45:33Z","links":{"resolver":"https://pith.science/pith/YLCXYTE3DDYJ7G5U35AYAUTGBX","bundle":"https://pith.science/pith/YLCXYTE3DDYJ7G5U35AYAUTGBX/bundle.json","state":"https://pith.science/pith/YLCXYTE3DDYJ7G5U35AYAUTGBX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YLCXYTE3DDYJ7G5U35AYAUTGBX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:YLCXYTE3DDYJ7G5U35AYAUTGBX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9756a3d8729c17b8c022a6d2da24ec4fa4f241a843c75b7dc9638d2dbf258ce8","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-19T07:47:43Z","title_canon_sha256":"09f76deb9a01dc1c08d1c4c4da446d5a524a7738a083d393135d44cb48aa11ec"},"schema_version":"1.0","source":{"id":"2311.11261","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.11261","created_at":"2026-07-05T08:56:15Z"},{"alias_kind":"arxiv_version","alias_value":"2311.11261v3","created_at":"2026-07-05T08:56:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.11261","created_at":"2026-07-05T08:56:15Z"},{"alias_kind":"pith_short_12","alias_value":"YLCXYTE3DDYJ","created_at":"2026-07-05T08:56:15Z"},{"alias_kind":"pith_short_16","alias_value":"YLCXYTE3DDYJ7G5U","created_at":"2026-07-05T08:56:15Z"},{"alias_kind":"pith_short_8","alias_value":"YLCXYTE3","created_at":"2026-07-05T08:56:15Z"}],"graph_snapshots":[{"event_id":"sha256:9522961642741de88da0482a5c6e5bb97de2135a4d9bfa49e7b04c5bf2d0ae5b","target":"graph","created_at":"2026-07-05T08:56:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.11261/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the rapid advancement of multimodal learning, pre-trained Vision-Language Models (VLMs) such as CLIP have demonstrated remarkable capacities in bridging the gap between visual and language modalities. However, these models remain vulnerable to adversarial attacks, particularly in the image modality, presenting considerable security risks. This paper introduces Adversarial Prompt Tuning (AdvPT), a novel technique to enhance the adversarial robustness of image encoders in VLMs. AdvPT innovatively leverages learnable text prompts and aligns them with adversarial image embeddings, to address ","authors_text":"Jiaming Zhang, Jiaqi Wang, Jitao Sang, Lingyu Qiu, Xingjun Ma, Xin Wang, Yu-Gang Jiang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-19T07:47:43Z","title":"Adversarial Prompt Tuning for Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.11261","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:656a79a8b49621a5743666c965d8de07de3b09c4b79b4eb62d9cfa1b54bebf09","target":"record","created_at":"2026-07-05T08:56:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9756a3d8729c17b8c022a6d2da24ec4fa4f241a843c75b7dc9638d2dbf258ce8","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-19T07:47:43Z","title_canon_sha256":"09f76deb9a01dc1c08d1c4c4da446d5a524a7738a083d393135d44cb48aa11ec"},"schema_version":"1.0","source":{"id":"2311.11261","kind":"arxiv","version":3}},"canonical_sha256":"c2c57c4c9b18f09f9bb4df418052660dfeae9394666c925be161b7519339abd9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c2c57c4c9b18f09f9bb4df418052660dfeae9394666c925be161b7519339abd9","first_computed_at":"2026-07-05T08:56:15.148486Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:56:15.148486Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"J7E5XEVX90B/UW2pvjVNlwSe0kdOd+hjl6hza+GtrumrEOwH3djnlZ4nZFdirReu397Ce/CRGA/sYTqtq1hgDw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:56:15.148922Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.11261","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:656a79a8b49621a5743666c965d8de07de3b09c4b79b4eb62d9cfa1b54bebf09","sha256:9522961642741de88da0482a5c6e5bb97de2135a4d9bfa49e7b04c5bf2d0ae5b"],"state_sha256":"66276f8f6bbf43147a3558f66c4b953576f8fe2ff0ee61205104181a6bc97b6e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pqk4smvuknzFNemF4dQ9m63TH82CsGPMtTaleNjB4+lwyD2EerbnnSNM8VpKBAWluhZwIN0yh9rP8d6KUjVeCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T07:45:33.175620Z","bundle_sha256":"5a01165c4f3cfb47b2b5d808e5dc84cc5182ba372679b9d1579c6c36384197b0"}}