{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:2L6D4PUTDPPYLVNGFOXB3DQXXZ","short_pith_number":"pith:2L6D4PUT","canonical_record":{"source":{"id":"2406.09289","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-06-13T16:26:47Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"d1e93467150738dbb517b95ec865ea9f2c0ece51de0a944260af73ec002d9cb2","abstract_canon_sha256":"019680e740999f5005f7d8991d6c0be92b7dc432ce82ffed027545de3c047d2d"},"schema_version":"1.0"},"canonical_sha256":"d2fc3e3e931bdf85d5a62bae1d8e17be5356420abd3ee75cdc62814b7eace0c9","source":{"kind":"arxiv","id":"2406.09289","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.09289","created_at":"2026-07-05T09:16:17Z"},{"alias_kind":"arxiv_version","alias_value":"2406.09289v2","created_at":"2026-07-05T09:16:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.09289","created_at":"2026-07-05T09:16:17Z"},{"alias_kind":"pith_short_12","alias_value":"2L6D4PUTDPPY","created_at":"2026-07-05T09:16:17Z"},{"alias_kind":"pith_short_16","alias_value":"2L6D4PUTDPPYLVNG","created_at":"2026-07-05T09:16:17Z"},{"alias_kind":"pith_short_8","alias_value":"2L6D4PUT","created_at":"2026-07-05T09:16:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:2L6D4PUTDPPYLVNGFOXB3DQXXZ","target":"record","payload":{"canonical_record":{"source":{"id":"2406.09289","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-06-13T16:26:47Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"d1e93467150738dbb517b95ec865ea9f2c0ece51de0a944260af73ec002d9cb2","abstract_canon_sha256":"019680e740999f5005f7d8991d6c0be92b7dc432ce82ffed027545de3c047d2d"},"schema_version":"1.0"},"canonical_sha256":"d2fc3e3e931bdf85d5a62bae1d8e17be5356420abd3ee75cdc62814b7eace0c9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:16:17.989094Z","signature_b64":"B89s+kPEztuwUORB21n0ofU/KQoeFGWPnrhzQTJHbHDo0mWvRKSSB8QpYO0jNFC9QDm5xCDSv8bLV/P2VLWzAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d2fc3e3e931bdf85d5a62bae1d8e17be5356420abd3ee75cdc62814b7eace0c9","last_reissued_at":"2026-07-05T09:16:17.988524Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:16:17.988524Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.09289","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:16:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iG5EH7QzjIGX21eSSc0YkGrTPdTwivwOtyjMlkE9wywGSOa17WD0jEvJiCux6Z67ffD9Ayo1YSvYWH/topx3Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-26T14:57:43.921621Z"},"content_sha256":"0293f023a75dc87e8f702a5d2c2d10d374311eb37ec5c3d1797a09d25662f9fd","schema_version":"1.0","event_id":"sha256:0293f023a75dc87e8f702a5d2c2d10d374311eb37ec5c3d1797a09d25662f9fd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:2L6D4PUTDPPYLVNGFOXB3DQXXZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Understanding Jailbreak Success: A Study of Latent Space Dynamics in Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CL","authors_text":"Frauke Kreuter, Nina Panickssery, Sarah Ball","submitted_at":"2024-06-13T16:26:47Z","abstract_excerpt":"Conversational large language models are trained to refuse to answer harmful questions. However, emergent jailbreaking techniques can still elicit unsafe outputs, presenting an ongoing challenge for model alignment. To better understand how different jailbreak types circumvent safeguards, this paper analyses model activations on different jailbreak inputs. We find that it is possible to extract a jailbreak vector from a single class of jailbreaks that works to mitigate jailbreak effectiveness from other semantically-dissimilar classes. This may indicate that different kinds of effective jailbr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.09289","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.09289/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:16:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B4cwnyuIGBsRxlrPxSvSsC7rWrSHGcHr8hdeyq54PdCbFJfDFyLgnAGnLWZ0WwMKYKlpTB6TLnMgQKenmE1eCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-26T14:57:43.922006Z"},"content_sha256":"61bf9eaed173a5745eab899c28cdbd9b59022e34eb53dbb54efc51d4c4a62c21","schema_version":"1.0","event_id":"sha256:61bf9eaed173a5745eab899c28cdbd9b59022e34eb53dbb54efc51d4c4a62c21"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2L6D4PUTDPPYLVNGFOXB3DQXXZ/bundle.json","state_url":"https://pith.science/pith/2L6D4PUTDPPYLVNGFOXB3DQXXZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2L6D4PUTDPPYLVNGFOXB3DQXXZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-26T14:57:43Z","links":{"resolver":"https://pith.science/pith/2L6D4PUTDPPYLVNGFOXB3DQXXZ","bundle":"https://pith.science/pith/2L6D4PUTDPPYLVNGFOXB3DQXXZ/bundle.json","state":"https://pith.science/pith/2L6D4PUTDPPYLVNGFOXB3DQXXZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2L6D4PUTDPPYLVNGFOXB3DQXXZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:2L6D4PUTDPPYLVNGFOXB3DQXXZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"019680e740999f5005f7d8991d6c0be92b7dc432ce82ffed027545de3c047d2d","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-06-13T16:26:47Z","title_canon_sha256":"d1e93467150738dbb517b95ec865ea9f2c0ece51de0a944260af73ec002d9cb2"},"schema_version":"1.0","source":{"id":"2406.09289","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.09289","created_at":"2026-07-05T09:16:17Z"},{"alias_kind":"arxiv_version","alias_value":"2406.09289v2","created_at":"2026-07-05T09:16:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.09289","created_at":"2026-07-05T09:16:17Z"},{"alias_kind":"pith_short_12","alias_value":"2L6D4PUTDPPY","created_at":"2026-07-05T09:16:17Z"},{"alias_kind":"pith_short_16","alias_value":"2L6D4PUTDPPYLVNG","created_at":"2026-07-05T09:16:17Z"},{"alias_kind":"pith_short_8","alias_value":"2L6D4PUT","created_at":"2026-07-05T09:16:17Z"}],"graph_snapshots":[{"event_id":"sha256:61bf9eaed173a5745eab899c28cdbd9b59022e34eb53dbb54efc51d4c4a62c21","target":"graph","created_at":"2026-07-05T09:16:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.09289/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Conversational large language models are trained to refuse to answer harmful questions. However, emergent jailbreaking techniques can still elicit unsafe outputs, presenting an ongoing challenge for model alignment. To better understand how different jailbreak types circumvent safeguards, this paper analyses model activations on different jailbreak inputs. We find that it is possible to extract a jailbreak vector from a single class of jailbreaks that works to mitigate jailbreak effectiveness from other semantically-dissimilar classes. This may indicate that different kinds of effective jailbr","authors_text":"Frauke Kreuter, Nina Panickssery, Sarah Ball","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-06-13T16:26:47Z","title":"Understanding Jailbreak Success: A Study of Latent Space Dynamics in Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.09289","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0293f023a75dc87e8f702a5d2c2d10d374311eb37ec5c3d1797a09d25662f9fd","target":"record","created_at":"2026-07-05T09:16:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"019680e740999f5005f7d8991d6c0be92b7dc432ce82ffed027545de3c047d2d","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-06-13T16:26:47Z","title_canon_sha256":"d1e93467150738dbb517b95ec865ea9f2c0ece51de0a944260af73ec002d9cb2"},"schema_version":"1.0","source":{"id":"2406.09289","kind":"arxiv","version":2}},"canonical_sha256":"d2fc3e3e931bdf85d5a62bae1d8e17be5356420abd3ee75cdc62814b7eace0c9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d2fc3e3e931bdf85d5a62bae1d8e17be5356420abd3ee75cdc62814b7eace0c9","first_computed_at":"2026-07-05T09:16:17.988524Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:16:17.988524Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"B89s+kPEztuwUORB21n0ofU/KQoeFGWPnrhzQTJHbHDo0mWvRKSSB8QpYO0jNFC9QDm5xCDSv8bLV/P2VLWzAw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:16:17.989094Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.09289","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0293f023a75dc87e8f702a5d2c2d10d374311eb37ec5c3d1797a09d25662f9fd","sha256:61bf9eaed173a5745eab899c28cdbd9b59022e34eb53dbb54efc51d4c4a62c21"],"state_sha256":"053e16ae67faf0c799b775457e50b210a1226ca18c7663b870b7e2ae518e3a7d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uhyOUk721lcyu3Mt1qL0d9JU4lgBk2UwAy+am+dX/ZbzmrZg3s6No/KOxJD+nZUgOtuH2DVRuFsvf1MXEO6OCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-26T14:57:43.924482Z","bundle_sha256":"67123501441ec76296c0a2cae22f0f0fd3e6a0f5712b99be34da7f80f81e7bdb"}}