{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:3TI5NMUOEHETPQAEQA5TV62CMK","short_pith_number":"pith:3TI5NMUO","canonical_record":{"source":{"id":"2505.09820","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-14T21:50:46Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"8e4c8abde394ed73cec3ce4cae949fcdd0c1135cb4a9c1a26cf6c75b16942a23","abstract_canon_sha256":"0d1f4c6c0dc8b542c0a9f9e9d122cf2bfa10958401b29068ee730d5df418d356"},"schema_version":"1.0"},"canonical_sha256":"dcd1d6b28e21c937c004803b3afb42629afd5c0083ea8ec8eef9f3e8ac7e3b9f","source":{"kind":"arxiv","id":"2505.09820","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.09820","created_at":"2026-07-05T11:03:44Z"},{"alias_kind":"arxiv_version","alias_value":"2505.09820v1","created_at":"2026-07-05T11:03:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.09820","created_at":"2026-07-05T11:03:44Z"},{"alias_kind":"pith_short_12","alias_value":"3TI5NMUOEHET","created_at":"2026-07-05T11:03:44Z"},{"alias_kind":"pith_short_16","alias_value":"3TI5NMUOEHETPQAE","created_at":"2026-07-05T11:03:44Z"},{"alias_kind":"pith_short_8","alias_value":"3TI5NMUO","created_at":"2026-07-05T11:03:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:3TI5NMUOEHETPQAEQA5TV62CMK","target":"record","payload":{"canonical_record":{"source":{"id":"2505.09820","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-14T21:50:46Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"8e4c8abde394ed73cec3ce4cae949fcdd0c1135cb4a9c1a26cf6c75b16942a23","abstract_canon_sha256":"0d1f4c6c0dc8b542c0a9f9e9d122cf2bfa10958401b29068ee730d5df418d356"},"schema_version":"1.0"},"canonical_sha256":"dcd1d6b28e21c937c004803b3afb42629afd5c0083ea8ec8eef9f3e8ac7e3b9f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:03:44.916974Z","signature_b64":"lV7MI841pBJaPnzJ64ogwrPcBELi7NnU/BHLvLDVDiInIZmsZKtWSmxbK5ijnHcDqPkZPoXhdia2vVBLml+FAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dcd1d6b28e21c937c004803b3afb42629afd5c0083ea8ec8eef9f3e8ac7e3b9f","last_reissued_at":"2026-07-05T11:03:44.916499Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:03:44.916499Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.09820","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:03:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GJ9VYQ9SoB2J5eajdEqWstcJMUC7g2H2lnOkAP7nJ0YJ34KDUYze8bELK/0qZqBWRqGRi0Ni9/dsCtBkRJNMAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T01:40:18.083750Z"},"content_sha256":"66183c853f9a7ac9f45840adbf4e6cf08556165657903743022dc8177aef2c5d","schema_version":"1.0","event_id":"sha256:66183c853f9a7ac9f45840adbf4e6cf08556165657903743022dc8177aef2c5d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:3TI5NMUOEHETPQAEQA5TV62CMK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Attack on Large Language Models using Exponentiated Gradient Descent","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Mao Nishino, Sajib Biswas, Samuel Jacob Chacko, Xiuwen Liu","submitted_at":"2025-05-14T21:50:46Z","abstract_excerpt":"As Large Language Models (LLMs) are widely used, understanding them systematically is key to improving their safety and realizing their full potential. Although many models are aligned using techniques such as reinforcement learning from human feedback (RLHF), they are still vulnerable to jailbreaking attacks. Some of the existing adversarial attack methods search for discrete tokens that may jailbreak a target model while others try to optimize the continuous space represented by the tokens of the model's vocabulary. While techniques based on the discrete space may prove to be inefficient, op"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.09820","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.09820/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:03:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BFt0ItlQVk5B7hSachhCZUZJjRD9S9/Ac6Lo4tE4AhttjkR7zI1Dq8pd1NKQPZ9e+9Rt3+w5zXjz9C3w0rNHCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T01:40:18.084595Z"},"content_sha256":"b36c7bbdc7aeef80f573db6ae1f346e52c957e120aafe9d12e8e3db19f4e976d","schema_version":"1.0","event_id":"sha256:b36c7bbdc7aeef80f573db6ae1f346e52c957e120aafe9d12e8e3db19f4e976d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3TI5NMUOEHETPQAEQA5TV62CMK/bundle.json","state_url":"https://pith.science/pith/3TI5NMUOEHETPQAEQA5TV62CMK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3TI5NMUOEHETPQAEQA5TV62CMK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T01:40:18Z","links":{"resolver":"https://pith.science/pith/3TI5NMUOEHETPQAEQA5TV62CMK","bundle":"https://pith.science/pith/3TI5NMUOEHETPQAEQA5TV62CMK/bundle.json","state":"https://pith.science/pith/3TI5NMUOEHETPQAEQA5TV62CMK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3TI5NMUOEHETPQAEQA5TV62CMK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:3TI5NMUOEHETPQAEQA5TV62CMK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0d1f4c6c0dc8b542c0a9f9e9d122cf2bfa10958401b29068ee730d5df418d356","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-14T21:50:46Z","title_canon_sha256":"8e4c8abde394ed73cec3ce4cae949fcdd0c1135cb4a9c1a26cf6c75b16942a23"},"schema_version":"1.0","source":{"id":"2505.09820","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.09820","created_at":"2026-07-05T11:03:44Z"},{"alias_kind":"arxiv_version","alias_value":"2505.09820v1","created_at":"2026-07-05T11:03:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.09820","created_at":"2026-07-05T11:03:44Z"},{"alias_kind":"pith_short_12","alias_value":"3TI5NMUOEHET","created_at":"2026-07-05T11:03:44Z"},{"alias_kind":"pith_short_16","alias_value":"3TI5NMUOEHETPQAE","created_at":"2026-07-05T11:03:44Z"},{"alias_kind":"pith_short_8","alias_value":"3TI5NMUO","created_at":"2026-07-05T11:03:44Z"}],"graph_snapshots":[{"event_id":"sha256:b36c7bbdc7aeef80f573db6ae1f346e52c957e120aafe9d12e8e3db19f4e976d","target":"graph","created_at":"2026-07-05T11:03:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.09820/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As Large Language Models (LLMs) are widely used, understanding them systematically is key to improving their safety and realizing their full potential. Although many models are aligned using techniques such as reinforcement learning from human feedback (RLHF), they are still vulnerable to jailbreaking attacks. Some of the existing adversarial attack methods search for discrete tokens that may jailbreak a target model while others try to optimize the continuous space represented by the tokens of the model's vocabulary. While techniques based on the discrete space may prove to be inefficient, op","authors_text":"Mao Nishino, Sajib Biswas, Samuel Jacob Chacko, Xiuwen Liu","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-14T21:50:46Z","title":"Adversarial Attack on Large Language Models using Exponentiated Gradient Descent"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.09820","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:66183c853f9a7ac9f45840adbf4e6cf08556165657903743022dc8177aef2c5d","target":"record","created_at":"2026-07-05T11:03:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0d1f4c6c0dc8b542c0a9f9e9d122cf2bfa10958401b29068ee730d5df418d356","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-14T21:50:46Z","title_canon_sha256":"8e4c8abde394ed73cec3ce4cae949fcdd0c1135cb4a9c1a26cf6c75b16942a23"},"schema_version":"1.0","source":{"id":"2505.09820","kind":"arxiv","version":1}},"canonical_sha256":"dcd1d6b28e21c937c004803b3afb42629afd5c0083ea8ec8eef9f3e8ac7e3b9f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dcd1d6b28e21c937c004803b3afb42629afd5c0083ea8ec8eef9f3e8ac7e3b9f","first_computed_at":"2026-07-05T11:03:44.916499Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:03:44.916499Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lV7MI841pBJaPnzJ64ogwrPcBELi7NnU/BHLvLDVDiInIZmsZKtWSmxbK5ijnHcDqPkZPoXhdia2vVBLml+FAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:03:44.916974Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.09820","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:66183c853f9a7ac9f45840adbf4e6cf08556165657903743022dc8177aef2c5d","sha256:b36c7bbdc7aeef80f573db6ae1f346e52c957e120aafe9d12e8e3db19f4e976d"],"state_sha256":"5a1822e5e37f93abdf34c421ca944bb186d856d232770326c5db59705e7e5121"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s4fVO3kexjCWogqElrVJMXypV/jPFD0ylSO1cupu5DCDOU56lt/oC4FtgKsf//TPT0E+Zm7ED4GuUoExnzgJBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T01:40:18.092465Z","bundle_sha256":"09c16ffd77256a5921e94ed9b44863381131108d3df6dc3e822314cebe8474e1"}}