{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:2EKCKONKKWS74MTGKX2PEFK5R7","short_pith_number":"pith:2EKCKONK","canonical_record":{"source":{"id":"2509.03985","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-04T08:12:06Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"dba85a81bece743c939ff01bdcd9d1fb840f33cfe39c6f1d440158327d6738f2","abstract_canon_sha256":"7e2b41bfb2a5f114dc1e9c2d70ad5014d2588ef1644f4e041a951ae324859f92"},"schema_version":"1.0"},"canonical_sha256":"d1142539aa55a5fe326655f4f2155d8fdd38da440b2922f7e3faad045121e8da","source":{"kind":"arxiv","id":"2509.03985","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.03985","created_at":"2026-07-05T12:04:51Z"},{"alias_kind":"arxiv_version","alias_value":"2509.03985v1","created_at":"2026-07-05T12:04:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.03985","created_at":"2026-07-05T12:04:51Z"},{"alias_kind":"pith_short_12","alias_value":"2EKCKONKKWS7","created_at":"2026-07-05T12:04:51Z"},{"alias_kind":"pith_short_16","alias_value":"2EKCKONKKWS74MTG","created_at":"2026-07-05T12:04:51Z"},{"alias_kind":"pith_short_8","alias_value":"2EKCKONK","created_at":"2026-07-05T12:04:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:2EKCKONKKWS74MTGKX2PEFK5R7","target":"record","payload":{"canonical_record":{"source":{"id":"2509.03985","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-04T08:12:06Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"dba85a81bece743c939ff01bdcd9d1fb840f33cfe39c6f1d440158327d6738f2","abstract_canon_sha256":"7e2b41bfb2a5f114dc1e9c2d70ad5014d2588ef1644f4e041a951ae324859f92"},"schema_version":"1.0"},"canonical_sha256":"d1142539aa55a5fe326655f4f2155d8fdd38da440b2922f7e3faad045121e8da","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:04:51.172570Z","signature_b64":"xk51SuiZZO2T48caZM7P6fOgUAstz7wYq9oKrolv/ZPito1+SpwsWV3iRHNZQILNBVbYOawSUVhtaXGBu69MDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d1142539aa55a5fe326655f4f2155d8fdd38da440b2922f7e3faad045121e8da","last_reissued_at":"2026-07-05T12:04:51.172049Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:04:51.172049Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.03985","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:04:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lMKDVC7S3E5RzVcsz6Jp47qrbirxLwbPQ9o0YaiUTMuiRxZ8QINyLVRdMZNZHkXr82SJqjVakFSO7wdE/JbZCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T22:15:47.136675Z"},"content_sha256":"1a82da7d1b28adb1df50d3e3d848b7c606b8f5ef108d5596dc5a6223ec71652d","schema_version":"1.0","event_id":"sha256:1a82da7d1b28adb1df50d3e3d848b7c606b8f5ef108d5596dc5a6223ec71652d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:2EKCKONKKWS74MTGKX2PEFK5R7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"NeuroBreak: Unveil Internal Jailbreak Mechanisms in Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Bowen Shi, Chuhan Zhang, Dazhan Deng, Shouling Ji, Tianyu Du, Ye Zhang, Yingcai Wu, Yuyou Gan","submitted_at":"2025-09-04T08:12:06Z","abstract_excerpt":"In deployment and application, large language models (LLMs) typically undergo safety alignment to prevent illegal and unethical outputs. However, the continuous advancement of jailbreak attack techniques, designed to bypass safety mechanisms with adversarial prompts, has placed increasing pressure on the security defenses of LLMs. Strengthening resistance to jailbreak attacks requires an in-depth understanding of the security mechanisms and vulnerabilities of LLMs. However, the vast number of parameters and complex structure of LLMs make analyzing security weaknesses from an internal perspecti"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.03985","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.03985/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:04:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BiO8IoVnBbAk95y5KEtgKw13mZyMFjjQThjFxrLSZNAup7/M8pWTYfjiQqnBAc8HMqUASUgMcpH4qLz78QfJDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T22:15:47.137168Z"},"content_sha256":"1da9f8d0a8248b6656162816adb57c533b2f8ae3c022c61798a58a238d7fbae0","schema_version":"1.0","event_id":"sha256:1da9f8d0a8248b6656162816adb57c533b2f8ae3c022c61798a58a238d7fbae0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2EKCKONKKWS74MTGKX2PEFK5R7/bundle.json","state_url":"https://pith.science/pith/2EKCKONKKWS74MTGKX2PEFK5R7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2EKCKONKKWS74MTGKX2PEFK5R7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T22:15:47Z","links":{"resolver":"https://pith.science/pith/2EKCKONKKWS74MTGKX2PEFK5R7","bundle":"https://pith.science/pith/2EKCKONKKWS74MTGKX2PEFK5R7/bundle.json","state":"https://pith.science/pith/2EKCKONKKWS74MTGKX2PEFK5R7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2EKCKONKKWS74MTGKX2PEFK5R7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:2EKCKONKKWS74MTGKX2PEFK5R7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7e2b41bfb2a5f114dc1e9c2d70ad5014d2588ef1644f4e041a951ae324859f92","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-04T08:12:06Z","title_canon_sha256":"dba85a81bece743c939ff01bdcd9d1fb840f33cfe39c6f1d440158327d6738f2"},"schema_version":"1.0","source":{"id":"2509.03985","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.03985","created_at":"2026-07-05T12:04:51Z"},{"alias_kind":"arxiv_version","alias_value":"2509.03985v1","created_at":"2026-07-05T12:04:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.03985","created_at":"2026-07-05T12:04:51Z"},{"alias_kind":"pith_short_12","alias_value":"2EKCKONKKWS7","created_at":"2026-07-05T12:04:51Z"},{"alias_kind":"pith_short_16","alias_value":"2EKCKONKKWS74MTG","created_at":"2026-07-05T12:04:51Z"},{"alias_kind":"pith_short_8","alias_value":"2EKCKONK","created_at":"2026-07-05T12:04:51Z"}],"graph_snapshots":[{"event_id":"sha256:1da9f8d0a8248b6656162816adb57c533b2f8ae3c022c61798a58a238d7fbae0","target":"graph","created_at":"2026-07-05T12:04:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.03985/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In deployment and application, large language models (LLMs) typically undergo safety alignment to prevent illegal and unethical outputs. However, the continuous advancement of jailbreak attack techniques, designed to bypass safety mechanisms with adversarial prompts, has placed increasing pressure on the security defenses of LLMs. Strengthening resistance to jailbreak attacks requires an in-depth understanding of the security mechanisms and vulnerabilities of LLMs. However, the vast number of parameters and complex structure of LLMs make analyzing security weaknesses from an internal perspecti","authors_text":"Bowen Shi, Chuhan Zhang, Dazhan Deng, Shouling Ji, Tianyu Du, Ye Zhang, Yingcai Wu, Yuyou Gan","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-04T08:12:06Z","title":"NeuroBreak: Unveil Internal Jailbreak Mechanisms in Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.03985","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1a82da7d1b28adb1df50d3e3d848b7c606b8f5ef108d5596dc5a6223ec71652d","target":"record","created_at":"2026-07-05T12:04:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7e2b41bfb2a5f114dc1e9c2d70ad5014d2588ef1644f4e041a951ae324859f92","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-04T08:12:06Z","title_canon_sha256":"dba85a81bece743c939ff01bdcd9d1fb840f33cfe39c6f1d440158327d6738f2"},"schema_version":"1.0","source":{"id":"2509.03985","kind":"arxiv","version":1}},"canonical_sha256":"d1142539aa55a5fe326655f4f2155d8fdd38da440b2922f7e3faad045121e8da","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d1142539aa55a5fe326655f4f2155d8fdd38da440b2922f7e3faad045121e8da","first_computed_at":"2026-07-05T12:04:51.172049Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:04:51.172049Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xk51SuiZZO2T48caZM7P6fOgUAstz7wYq9oKrolv/ZPito1+SpwsWV3iRHNZQILNBVbYOawSUVhtaXGBu69MDw==","signature_status":"signed_v1","signed_at":"2026-07-05T12:04:51.172570Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.03985","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1a82da7d1b28adb1df50d3e3d848b7c606b8f5ef108d5596dc5a6223ec71652d","sha256:1da9f8d0a8248b6656162816adb57c533b2f8ae3c022c61798a58a238d7fbae0"],"state_sha256":"241ae509fab7523914946ed0c5c2c8552294423506705d9e97091922b80ebda4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ix6SSgXyxm1Z3ZhtrZ6cEeK6dbXiGpT1O/X+tuI6lQtOKc3EBhUUWUNLqmt8BMFVewNLewqXGCq91VJb6wpvAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T22:15:47.142083Z","bundle_sha256":"1baeca8d7b3391ee355cfe1b7832fec6de84706c7cee7eb9269578c7ca88a40f"}}