{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:ZDDSKG564JP5ULS3NNSGHQQMF4","short_pith_number":"pith:ZDDSKG56","canonical_record":{"source":{"id":"2311.15551","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-11-27T05:35:49Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","eess.IV"],"title_canon_sha256":"bdf84933533a43e69b8ee480928f16c2b167320ef1a6e350a4bfb962574e8898","abstract_canon_sha256":"f6e6981033b9639fbfcc0ac55e27993c9c02eab4ee25da81da58f3c215d27aa4"},"schema_version":"1.0"},"canonical_sha256":"c8c7251bbee25fda2e5b6b6463c20c2f1e744614526996cb8c2926b4db5e7f29","source":{"kind":"arxiv","id":"2311.15551","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.15551","created_at":"2026-07-05T07:17:05Z"},{"alias_kind":"arxiv_version","alias_value":"2311.15551v1","created_at":"2026-07-05T07:17:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.15551","created_at":"2026-07-05T07:17:05Z"},{"alias_kind":"pith_short_12","alias_value":"ZDDSKG564JP5","created_at":"2026-07-05T07:17:05Z"},{"alias_kind":"pith_short_16","alias_value":"ZDDSKG564JP5ULS3","created_at":"2026-07-05T07:17:05Z"},{"alias_kind":"pith_short_8","alias_value":"ZDDSKG56","created_at":"2026-07-05T07:17:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:ZDDSKG564JP5ULS3NNSGHQQMF4","target":"record","payload":{"canonical_record":{"source":{"id":"2311.15551","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-11-27T05:35:49Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","eess.IV"],"title_canon_sha256":"bdf84933533a43e69b8ee480928f16c2b167320ef1a6e350a4bfb962574e8898","abstract_canon_sha256":"f6e6981033b9639fbfcc0ac55e27993c9c02eab4ee25da81da58f3c215d27aa4"},"schema_version":"1.0"},"canonical_sha256":"c8c7251bbee25fda2e5b6b6463c20c2f1e744614526996cb8c2926b4db5e7f29","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:17:05.780357Z","signature_b64":"p1RrMizx5tBbAsQFkgAm92kFKBqTagPA+yZEh7SzLMRYTggrjolNztR6vU2dAaLMbH6BhUNxYQ/61CjMJrNPAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c8c7251bbee25fda2e5b6b6463c20c2f1e744614526996cb8c2926b4db5e7f29","last_reissued_at":"2026-07-05T07:17:05.779851Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:17:05.779851Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.15551","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:17:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"X5AnL67nOXfq3rTqxjapBnOuJD1Pu2YMICEF6P1xtFmzLq4XjgedGiLzKJ6h8Q7TuAGDMQirTOIxiWv7Yaw8BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T09:35:39.523384Z"},"content_sha256":"736532d9b914bc5fca936165057acd1b2e465e07f19a31c7df074c262d656f26","schema_version":"1.0","event_id":"sha256:736532d9b914bc5fca936165057acd1b2e465e07f19a31c7df074c262d656f26"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:ZDDSKG564JP5ULS3NNSGHQQMF4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG","eess.IV"],"primary_cat":"cs.CV","authors_text":"Alan Yuille, Chen Wei, Chun Pong Lau, Heng Yu, Jiang Liu, Rama Chellappa, Soheil Feizi, Yuxiang Guo","submitted_at":"2023-11-27T05:35:49Z","abstract_excerpt":"We propose Instruct2Attack (I2A), a language-guided semantic attack that generates semantically meaningful perturbations according to free-form language instructions. We make use of state-of-the-art latent diffusion models, where we adversarially guide the reverse diffusion process to search for an adversarial latent code conditioned on the input image and text instruction. Compared to existing noise-based and semantic attacks, I2A generates more natural and diverse adversarial examples while providing better controllability and interpretability. We further automate the attack process with GPT"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.15551","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.15551/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:17:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"R+n00L6kV5dsJ4zb7vHFYv+ixl+BHC7qpY/TKMA/oCPnYXrxQbt97C+GEDOW7XNTSJ2OMdEGBnQQ6uSubfUGBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T09:35:39.524368Z"},"content_sha256":"5b7f8ded3b37ee44866ef7d55f0fdcbbaece82458bb49e6af495f7baf9da7813","schema_version":"1.0","event_id":"sha256:5b7f8ded3b37ee44866ef7d55f0fdcbbaece82458bb49e6af495f7baf9da7813"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZDDSKG564JP5ULS3NNSGHQQMF4/bundle.json","state_url":"https://pith.science/pith/ZDDSKG564JP5ULS3NNSGHQQMF4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZDDSKG564JP5ULS3NNSGHQQMF4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T09:35:39Z","links":{"resolver":"https://pith.science/pith/ZDDSKG564JP5ULS3NNSGHQQMF4","bundle":"https://pith.science/pith/ZDDSKG564JP5ULS3NNSGHQQMF4/bundle.json","state":"https://pith.science/pith/ZDDSKG564JP5ULS3NNSGHQQMF4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZDDSKG564JP5ULS3NNSGHQQMF4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:ZDDSKG564JP5ULS3NNSGHQQMF4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f6e6981033b9639fbfcc0ac55e27993c9c02eab4ee25da81da58f3c215d27aa4","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","eess.IV"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-11-27T05:35:49Z","title_canon_sha256":"bdf84933533a43e69b8ee480928f16c2b167320ef1a6e350a4bfb962574e8898"},"schema_version":"1.0","source":{"id":"2311.15551","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.15551","created_at":"2026-07-05T07:17:05Z"},{"alias_kind":"arxiv_version","alias_value":"2311.15551v1","created_at":"2026-07-05T07:17:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.15551","created_at":"2026-07-05T07:17:05Z"},{"alias_kind":"pith_short_12","alias_value":"ZDDSKG564JP5","created_at":"2026-07-05T07:17:05Z"},{"alias_kind":"pith_short_16","alias_value":"ZDDSKG564JP5ULS3","created_at":"2026-07-05T07:17:05Z"},{"alias_kind":"pith_short_8","alias_value":"ZDDSKG56","created_at":"2026-07-05T07:17:05Z"}],"graph_snapshots":[{"event_id":"sha256:5b7f8ded3b37ee44866ef7d55f0fdcbbaece82458bb49e6af495f7baf9da7813","target":"graph","created_at":"2026-07-05T07:17:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.15551/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We propose Instruct2Attack (I2A), a language-guided semantic attack that generates semantically meaningful perturbations according to free-form language instructions. We make use of state-of-the-art latent diffusion models, where we adversarially guide the reverse diffusion process to search for an adversarial latent code conditioned on the input image and text instruction. Compared to existing noise-based and semantic attacks, I2A generates more natural and diverse adversarial examples while providing better controllability and interpretability. We further automate the attack process with GPT","authors_text":"Alan Yuille, Chen Wei, Chun Pong Lau, Heng Yu, Jiang Liu, Rama Chellappa, Soheil Feizi, Yuxiang Guo","cross_cats":["cs.AI","cs.CR","cs.LG","eess.IV"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-11-27T05:35:49Z","title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.15551","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:736532d9b914bc5fca936165057acd1b2e465e07f19a31c7df074c262d656f26","target":"record","created_at":"2026-07-05T07:17:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f6e6981033b9639fbfcc0ac55e27993c9c02eab4ee25da81da58f3c215d27aa4","cross_cats_sorted":["cs.AI","cs.CR","cs.LG","eess.IV"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-11-27T05:35:49Z","title_canon_sha256":"bdf84933533a43e69b8ee480928f16c2b167320ef1a6e350a4bfb962574e8898"},"schema_version":"1.0","source":{"id":"2311.15551","kind":"arxiv","version":1}},"canonical_sha256":"c8c7251bbee25fda2e5b6b6463c20c2f1e744614526996cb8c2926b4db5e7f29","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c8c7251bbee25fda2e5b6b6463c20c2f1e744614526996cb8c2926b4db5e7f29","first_computed_at":"2026-07-05T07:17:05.779851Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:17:05.779851Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"p1RrMizx5tBbAsQFkgAm92kFKBqTagPA+yZEh7SzLMRYTggrjolNztR6vU2dAaLMbH6BhUNxYQ/61CjMJrNPAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:17:05.780357Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.15551","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:736532d9b914bc5fca936165057acd1b2e465e07f19a31c7df074c262d656f26","sha256:5b7f8ded3b37ee44866ef7d55f0fdcbbaece82458bb49e6af495f7baf9da7813"],"state_sha256":"2b1676383d6e2220152c25c0ac919d08ba647255f252ae1f0eca6e15c355d67d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XG8tVfXS1q88uHr8ypfGwsNdMiXjXrfhqnl2Aka51lcqBmvuiaprlAqosc7Ew9GSfn9hDUTV/ulOBUzLNhW3Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T09:35:39.530118Z","bundle_sha256":"5f91cb1385f333034bf7317af1457391f4d41aea15e806d8ceac09af65476941"}}