{"_canonicalization":{"envelope_id":"axm_ + sha256(envelope minus {signature, axiom_id, anchors})","envelope_signature":"ed25519(envelope minus {signature, axiom_id})","json":"sort_keys=True, separators=(',',':'), ensure_ascii=False, allow_nan=False, utf-8","leaf_hash":"sha256(0x00 || canonical_json(envelope_full))","seal_signature":"ed25519(seal minus {signature, sig_algorithm})"},"axiom_id":"axm_3f898e8de3f73d576275969f72d57f832d58b484816d47e81069449977d5bd7a","bitcoin_anchor":{"bitcoin_attestations":["bitcoin_block_949451"],"calendar_attestations":["https://finney.calendar.eternitywall.com","https://btc.calendar.catallaxy.com","https://alice.btc.calendar.opentimestamps.org","https://bob.btc.calendar.opentimestamps.org"],"ots_url":"/registry/data/substrate/anchors/77fc9c28fae777b81da5b495b3115474df6592dfac590333213d3bdf8b94a9b3.ots","stamped_at":"2026-05-15T03:00:03Z","status":"bitcoin"},"envelope":{"anchors":[{"chain":"crovia.axiom_graph","height":0,"merkle_proof":"spider_vendor_press_v1","root_at_anchor":"spider_vendor_press_v1"}],"axiom_id":"axm_3f898e8de3f73d576275969f72d57f832d58b484816d47e81069449977d5bd7a","axiom_type":"AX.OBS","body":{"axiom_subtype":"news.vendor_press.v1","category":"news","fingerprint":"c4f90937281a63a6f74306c1e061d7f36ecf19a617a8bbb04f35d44dc6bacaf0","published":"Tue, 05 May 2026 00:00:00 -0400","receipt_hash":"c4f90937281a63a6f74306c1e061d7f36ecf19a617a8bbb04f35d44dc6bacaf0","schema":"spider.news.vendor_press.v1","spider":"vendor_press","spider_record":{"axiom_subtype":"news.vendor_press.v1","category":"news","decision_hint":"POSITIVE","envelope_target":"AX.OBS","fingerprint":"c4f90937281a63a6f74306c1e061d7f36ecf19a617a8bbb04f35d44dc6bacaf0","observed_at":"2026-05-05T04:43:28.458286Z","parent_run_hash":"84f40dd8e6af9caa9f2a7fd632024f0e0192177c4532d9af5caf61b409324d7a","published":"Tue, 05 May 2026 00:00:00 -0400","runtime_version":"0.1.0","schema":"spider.news.vendor_press.v1","source_status":200,"source_url":"https://export.arxiv.org/rss/cs.AI","spider":"vendor_press","summary_excerpt":"arXiv:2605.00583v1 Announce Type: cross \nAbstract: The visual modality of vision-language models (VLMs) is an underexplored attack surface for bypassing safety alignment. We introduce four jailbreak attacks exploiting the vision component: (1) encoding harmful instructions as visual symbol sequences with a decoding legend, (2) replacing harmful objects with benign substitutes (e.g., bomb -> banana) then prompting for harmful actions using the substitute term, (3) replacing harmful text in images (e.g., on book covers) with benign words while visual context preserves the original meaning, and (4) visual analogy puzzles whose solution requires inferring a prohibited concept. Evaluating across six frontier VLMs, our visual attacks bypass safety alignment and expose a cross-modality alignment gap: text-based safety training does not automatically generalize to harmful intent conveyed visually. For example, our visual cipher achieves 40.9% attack success on Claude-Haiku-4.5 versus 10.7% for","title":"Jailbreaking Vision-Language Models Through the Visual Modality","url":"https://arxiv.org/abs/2605.00583","vendor":"arxiv_cs_ai"},"summary":"arXiv:2605.00583v1 Announce Type: cross \nAbstract: The visual modality of vision-language models (VLMs) is an underexplored attack surface for bypassing safety alignment. We introduce four jailbreak attacks exploiting the vision component: (1) encoding harmful instructions as visual symbol sequences with a decoding legend, (2) replacing harmful objects with benign substitutes (e.g., bomb -> banana) then prompting for harmful actions using the substitute term, (3) replacing harmful text in images (e.g., on book covers) with benign words while visual context preserves the original meaning, and (4) visual analogy puzzles whose solution requires inferring a prohibited concept. Evaluating across six frontier VLMs, our visual attacks bypass safety alignment and expose a cross-modality alignment gap: text-based safety training does not automatically generalize to harmful intent conveyed visually. For example, our visual cipher achieves 40.9% attack success on Claude-Haiku-4.5 versus 10.7% for","title":"Jailbreaking Vision-Language Models Through the Visual Modality","vendor":"arxiv_cs_ai"},"confidence":{"method":"deterministic"},"decision":"POSITIVE","issued_at":"2026-05-05T04:43:28Z","notes":"Spider vendor_press (news) news.vendor_press.v1","object":{"captured_by":"crovia.spider.vendor_press","primary_source_url":"https://arxiv.org/abs/2605.00583"},"predecessors":[],"schema":"crovia.axiom.v1","signature":"ed25519:adba35abdac88cb1ac84ee3dff6d2e4bb0abff71e3086178c3cc974108669995e87f42d41a9354be7c97955a27430f6b4eb45985c44434109e81519e2bf8ab0a","signer":"crovia.substrate","subject":{"observed_at":"2026-05-05T04:43:28Z","source_collector":"spider:vendor_press","target_id":"https://arxiv.org/abs/2605.00583"},"tsa":{"authority":"crovia.substrate.bootstrap","rfc3161_token":"{\"kind\":\"crovia.bootstrap.tsa\",\"source_jsonl\":\"/opt/crovia/spider/data/news/vendor_press_v1.jsonl\",\"source_seal_merkle_root\":\"spider_vendor_press_v1\",\"upgrade_path\":\"Sessione H \\u2014 OpenTimestamps weekly anchor\"}"},"zk_mode":"clear","zk_proof":null},"ledger":{"leaf_hash":"eae1dda1b279bea79f17d11f670f7b7f7112d94b7a5337fea0471277e074ab2d","leaf_index":114324,"ledger_path":"/opt/crovia/substrate/axiom_ledger.jsonl"},"merkle_proof":{"hash_alg":"sha256","leaf_prefix":"0x00","node_prefix":"0x01","odd_leaf_rule":"duplicate_last","path":[{"sibling":"cb1b5c5d0ccb31b798fa6308df97d60484f00a1cf21f191943ab4b33b5728ed0","side":"right"},{"sibling":"607e5ad619bbe3bc1df99b0bdece10bd16692a53b9f9ab9a9df34be680741af4","side":"right"},{"sibling":"2416eac1736fc29a626667385faa568e3bf5e72df59464bb6497a301710c2273","side":"left"},{"sibling":"ffae24197272f4995d6e2b135930a2c0084b39cab6190baf4f7d20c1898aeb17","side":"right"},{"sibling":"6b2091a994e0a69bd3afe4bba8a85024d6d3490428c5be459413de2fe6f0e18d","side":"left"},{"sibling":"6f9157b001fd7cf24893e921262c7f413e24fda3c05b1f0a50f6f0487e3c27f3","side":"right"},{"sibling":"8d93413b71ef416d945411f76ceb942da4715d54accb63f2761b83bb6b41ddef","side":"right"},{"sibling":"cbcf8d239488334c83b4e4700b65758e992d56d579302bc08e5c2df1fa69ea5a","side":"left"},{"sibling":"17e21f83c86c2a86dddad911d22393ee81f41d8e0b79ef8c0c48668ea846f2ca","side":"right"},{"sibling":"8df6c69f776fbba620634f6baf125eeaa6fdf9426e461e649028010d9a703f42","side":"left"},{"sibling":"ea40d1bd0432ad4dd90f023c692aaab8c8f54e27ce652e82f2ec8e16cacfb632","side":"left"},{"sibling":"673cd6d27b696232f7f65e7a0733c7df6bc9fac3bcb569907ebb0de1c72c4bb2","side":"left"},{"sibling":"76d7c4385d71ae8104107105be66eddb792e01ed6e493db5a9b4eec5441abb76","side":"left"},{"sibling":"b03f005860bf95148ea89c703a32ca19ab7a2ca71b58bb628ff94a9edb8703b0","side":"left"},{"sibling":"21d1e30b556f553dc939fddc23e6367f0a7755ebe3dd489dc0001cef017beb7f","side":"right"},{"sibling":"f2817ab288b5324fe49770372c7a10f33f7cd11005f8d4c0a730316f5229dc98","side":"left"},{"sibling":"725fac972e772ca0dc598810ea1abc70df472f72d2d6ab8a0baee2b80e5d2f4c","side":"left"},{"sibling":"98fc57dfef8873b512edc8340f7181df57302bb96777625e072235c62d7c5895","side":"right"}]},"schema":"crovia.axiom_proof.v1","seal":{"first_collector_run_id":"","first_receipt_hash":"","jsonl_path":"/opt/crovia/substrate/axiom_ledger.jsonl","key_id":"430895f101d38164","last_collector_run_id":"","last_receipt_hash":"","leaf_count":134292,"merkle_root":"77fc9c28fae777b81da5b495b3115474df6592dfac590333213d3bdf8b94a9b3","public_key_hex":"cf742e26f75669dc673cb5c0786a1ae23ae8ca19c347317192ce40c28a7ff25c","run_id":"hourly_json_retrofit_20260515T023701Z","schema":"crovia.seal.v1","seal_family_version":"crovia-seal-family/1","seal_kind":"substrate_batch","sealed_at":"2026-05-15T02:37:25Z","sig_algorithm":"ed25519","signature":"68107a834b00b24f5d4501e5ec727445311f132a486567ecc4c72a4e6dff24c8c21f2de3105293353ba5fdbe370d032819af6aa70f694e2e39b6af6737507009","signer_version":"1.1.0"},"trust_root":{"key_id":"430895f101d38164","public_key_hex":"cf742e26f75669dc673cb5c0786a1ae23ae8ca19c347317192ce40c28a7ff25c","signature_algorithm":"ed25519","url":"/registry/canon/TRUST_ROOT.md"},"verifier":{"spec":"/registry/canon/AXIOM_RECEIPT_v1.md","url":"/v/axm_3f898e8de3f73d576275969f72d57f832d58b484816d47e81069449977d5bd7a"}}