{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:QNOWR2TRYKRYA2GMQ4HMFSCFNA","short_pith_number":"pith:QNOWR2TR","canonical_record":{"source":{"id":"2505.08809","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-12T06:40:23Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"9d2b10f6986dca57705505757158461adb98a625dfb5781390d508af3172ac52","abstract_canon_sha256":"85d852047e21cc77cde01e2f651cef3a69758a875520ab485e4aa8592b896d7b"},"schema_version":"1.0"},"canonical_sha256":"835d68ea71c2a38068cc870ec2c845681d3ceeb895dd6526b4b3795f6eb27010","source":{"kind":"arxiv","id":"2505.08809","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.08809","created_at":"2026-07-05T11:09:13Z"},{"alias_kind":"arxiv_version","alias_value":"2505.08809v2","created_at":"2026-07-05T11:09:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.08809","created_at":"2026-07-05T11:09:13Z"},{"alias_kind":"pith_short_12","alias_value":"QNOWR2TRYKRY","created_at":"2026-07-05T11:09:13Z"},{"alias_kind":"pith_short_16","alias_value":"QNOWR2TRYKRYA2GM","created_at":"2026-07-05T11:09:13Z"},{"alias_kind":"pith_short_8","alias_value":"QNOWR2TR","created_at":"2026-07-05T11:09:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:QNOWR2TRYKRYA2GMQ4HMFSCFNA","target":"record","payload":{"canonical_record":{"source":{"id":"2505.08809","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-12T06:40:23Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"9d2b10f6986dca57705505757158461adb98a625dfb5781390d508af3172ac52","abstract_canon_sha256":"85d852047e21cc77cde01e2f651cef3a69758a875520ab485e4aa8592b896d7b"},"schema_version":"1.0"},"canonical_sha256":"835d68ea71c2a38068cc870ec2c845681d3ceeb895dd6526b4b3795f6eb27010","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:09:13.365043Z","signature_b64":"qPdOMBNDjma7jGK73wpg39UR4nBQtXM/6ayGT66pjTJQ0gCJbFJvT9hzRFaEdgC6unMNKNxsdpKFqq1HH75gCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"835d68ea71c2a38068cc870ec2c845681d3ceeb895dd6526b4b3795f6eb27010","last_reissued_at":"2026-07-05T11:09:13.364565Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:09:13.364565Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.08809","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"J1jNrSnS3K92Ibp8ogsIfSLQOCVBnPhPoSipLZth+aMk5KFGl0ezobNYbEjqUdBIVlOUB4mejLewodDLAxE5AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T06:10:39.849347Z"},"content_sha256":"768c5c916888d991b2828a629268587dfbe0593697a08227ff933c677e44a179","schema_version":"1.0","event_id":"sha256:768c5c916888d991b2828a629268587dfbe0593697a08227ff933c677e44a179"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:QNOWR2TRYKRYA2GMQ4HMFSCFNA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MixBridge: Heterogeneous Image-to-Image Backdoor Attack through Mixture of Schr\\\"odinger Bridges","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Qianqian Xu, Qingming Huang, Shilong Bao, Shi Wang, Shixi Qin, Zhiyong Yang","submitted_at":"2025-05-12T06:40:23Z","abstract_excerpt":"This paper focuses on implanting multiple heterogeneous backdoor triggers in bridge-based diffusion models designed for complex and arbitrary input distributions. Existing backdoor formulations mainly address single-attack scenarios and are limited to Gaussian noise input models. To fill this gap, we propose MixBridge, a novel diffusion Schr\\\"odinger bridge (DSB) framework to cater to arbitrary input distributions (taking I2I tasks as special cases). Beyond this trait, we demonstrate that backdoor triggers can be injected into MixBridge by directly training with poisoned image pairs. This elim"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.08809","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.08809/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O76YHKTaswXwGwyla5LrP0t8buL3NGtfD5/PXKvoL/70/MhP4QQCMUcfkZRdOVvMwUw2xuvz948plFTw5xfhBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T06:10:39.849850Z"},"content_sha256":"7e1ea92b7f3b848f78e7839c84b6060fce770bc78618b1a79b54a59700500dc0","schema_version":"1.0","event_id":"sha256:7e1ea92b7f3b848f78e7839c84b6060fce770bc78618b1a79b54a59700500dc0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QNOWR2TRYKRYA2GMQ4HMFSCFNA/bundle.json","state_url":"https://pith.science/pith/QNOWR2TRYKRYA2GMQ4HMFSCFNA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QNOWR2TRYKRYA2GMQ4HMFSCFNA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T06:10:39Z","links":{"resolver":"https://pith.science/pith/QNOWR2TRYKRYA2GMQ4HMFSCFNA","bundle":"https://pith.science/pith/QNOWR2TRYKRYA2GMQ4HMFSCFNA/bundle.json","state":"https://pith.science/pith/QNOWR2TRYKRYA2GMQ4HMFSCFNA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QNOWR2TRYKRYA2GMQ4HMFSCFNA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QNOWR2TRYKRYA2GMQ4HMFSCFNA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"85d852047e21cc77cde01e2f651cef3a69758a875520ab485e4aa8592b896d7b","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-12T06:40:23Z","title_canon_sha256":"9d2b10f6986dca57705505757158461adb98a625dfb5781390d508af3172ac52"},"schema_version":"1.0","source":{"id":"2505.08809","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.08809","created_at":"2026-07-05T11:09:13Z"},{"alias_kind":"arxiv_version","alias_value":"2505.08809v2","created_at":"2026-07-05T11:09:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.08809","created_at":"2026-07-05T11:09:13Z"},{"alias_kind":"pith_short_12","alias_value":"QNOWR2TRYKRY","created_at":"2026-07-05T11:09:13Z"},{"alias_kind":"pith_short_16","alias_value":"QNOWR2TRYKRYA2GM","created_at":"2026-07-05T11:09:13Z"},{"alias_kind":"pith_short_8","alias_value":"QNOWR2TR","created_at":"2026-07-05T11:09:13Z"}],"graph_snapshots":[{"event_id":"sha256:7e1ea92b7f3b848f78e7839c84b6060fce770bc78618b1a79b54a59700500dc0","target":"graph","created_at":"2026-07-05T11:09:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.08809/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper focuses on implanting multiple heterogeneous backdoor triggers in bridge-based diffusion models designed for complex and arbitrary input distributions. Existing backdoor formulations mainly address single-attack scenarios and are limited to Gaussian noise input models. To fill this gap, we propose MixBridge, a novel diffusion Schr\\\"odinger bridge (DSB) framework to cater to arbitrary input distributions (taking I2I tasks as special cases). Beyond this trait, we demonstrate that backdoor triggers can be injected into MixBridge by directly training with poisoned image pairs. This elim","authors_text":"Qianqian Xu, Qingming Huang, Shilong Bao, Shi Wang, Shixi Qin, Zhiyong Yang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-12T06:40:23Z","title":"MixBridge: Heterogeneous Image-to-Image Backdoor Attack through Mixture of Schr\\\"odinger Bridges"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.08809","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:768c5c916888d991b2828a629268587dfbe0593697a08227ff933c677e44a179","target":"record","created_at":"2026-07-05T11:09:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"85d852047e21cc77cde01e2f651cef3a69758a875520ab485e4aa8592b896d7b","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-12T06:40:23Z","title_canon_sha256":"9d2b10f6986dca57705505757158461adb98a625dfb5781390d508af3172ac52"},"schema_version":"1.0","source":{"id":"2505.08809","kind":"arxiv","version":2}},"canonical_sha256":"835d68ea71c2a38068cc870ec2c845681d3ceeb895dd6526b4b3795f6eb27010","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"835d68ea71c2a38068cc870ec2c845681d3ceeb895dd6526b4b3795f6eb27010","first_computed_at":"2026-07-05T11:09:13.364565Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:09:13.364565Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qPdOMBNDjma7jGK73wpg39UR4nBQtXM/6ayGT66pjTJQ0gCJbFJvT9hzRFaEdgC6unMNKNxsdpKFqq1HH75gCg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:09:13.365043Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.08809","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:768c5c916888d991b2828a629268587dfbe0593697a08227ff933c677e44a179","sha256:7e1ea92b7f3b848f78e7839c84b6060fce770bc78618b1a79b54a59700500dc0"],"state_sha256":"6fa233e811ee7d41ae25fe3f37fab51c9a3e06146fa3a7895bfb92c691195877"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L6RAJOYzOeLif0YOdc31TSyzpRfFNXlyp53CJdLrmozM5hgeShyY+hspsN63TjZbRY1bk9WJr8/OEz4/bDZsDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T06:10:39.854161Z","bundle_sha256":"1f67df0ea88b12641be1e4eb01548cef0ce1fb5343d829d440df262e443a63e0"}}