{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:4HZJP76Y4EP25UWKORXNV76W56","short_pith_number":"pith:4HZJP76Y","canonical_record":{"source":{"id":"2508.03054","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2025-08-05T03:58:15Z","cross_cats_sorted":[],"title_canon_sha256":"292e45ee34fb94096eaad0718bc59d3a49bfe7c5cc0fc0f79cd45b2bc844a487","abstract_canon_sha256":"a6fd8daedd2d11a46e37986574c7071d9ae74169bf950be37eb4b88d83df8bde"},"schema_version":"1.0"},"canonical_sha256":"e1f297ffd8e11faed2ca746edaffd6ef9adebab004c6a32e37e2d544a50a777f","source":{"kind":"arxiv","id":"2508.03054","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.03054","created_at":"2026-07-05T11:48:35Z"},{"alias_kind":"arxiv_version","alias_value":"2508.03054v1","created_at":"2026-07-05T11:48:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.03054","created_at":"2026-07-05T11:48:35Z"},{"alias_kind":"pith_short_12","alias_value":"4HZJP76Y4EP2","created_at":"2026-07-05T11:48:35Z"},{"alias_kind":"pith_short_16","alias_value":"4HZJP76Y4EP25UWK","created_at":"2026-07-05T11:48:35Z"},{"alias_kind":"pith_short_8","alias_value":"4HZJP76Y","created_at":"2026-07-05T11:48:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:4HZJP76Y4EP25UWKORXNV76W56","target":"record","payload":{"canonical_record":{"source":{"id":"2508.03054","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2025-08-05T03:58:15Z","cross_cats_sorted":[],"title_canon_sha256":"292e45ee34fb94096eaad0718bc59d3a49bfe7c5cc0fc0f79cd45b2bc844a487","abstract_canon_sha256":"a6fd8daedd2d11a46e37986574c7071d9ae74169bf950be37eb4b88d83df8bde"},"schema_version":"1.0"},"canonical_sha256":"e1f297ffd8e11faed2ca746edaffd6ef9adebab004c6a32e37e2d544a50a777f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:48:35.542396Z","signature_b64":"uYmt6QFo8mJjfpCzlYYxob8kAUFncw3RaGaq8lyKdYxtzOP1KrJSysXSRy4a/r/G86vfSudDutP5lX36BKypDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e1f297ffd8e11faed2ca746edaffd6ef9adebab004c6a32e37e2d544a50a777f","last_reissued_at":"2026-07-05T11:48:35.541743Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:48:35.541743Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.03054","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:48:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wSSR4dnDlcQz0p4YM1vcnmLZnNgAU+jJ6FvTVPQwcI7gZjn/gAqCl78sjr/Yd7GuGiG2xBSAujQEk3/sMg57Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T11:51:30.646061Z"},"content_sha256":"99770e6e3bbdab12298bd7512cc150351fe88e6d0bd627de91fdebb2d15eb175","schema_version":"1.0","event_id":"sha256:99770e6e3bbdab12298bd7512cc150351fe88e6d0bd627de91fdebb2d15eb175"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:4HZJP76Y4EP25UWKORXNV76W56","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.AI","authors_text":"Chaozhuo Li, Lirong Qiu, Litian Zhang, Rui Ha, Rui Pu, Xi Zhang","submitted_at":"2025-08-05T03:58:15Z","abstract_excerpt":"Defending large language models (LLMs) against jailbreak attacks is essential for their safe and reliable deployment. Existing defenses often rely on shallow pattern matching, which struggles to generalize to novel and unseen attack strategies. To address this challenge, we propose the Cognitive-Driven Defense (CDD) framework, which targets the underlying structure of jailbreak prompts by applying meta-operations, defined as basic manipulations that conceal harmful intent.CDD emulates human cognitive reasoning through a structured reasoning chain. It begins with a global perception of the prom"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.03054","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.03054/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:48:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OJr6gyUTHfHaLlM1LjYZFQIezEj/665pjm9+wFnnCQJaAx0/Itk5rAeZgAtkVJGKaxS/NyQcQX7YGWtYpNVoBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T11:51:30.646705Z"},"content_sha256":"4e20d79d2812b5da5aae8aac9296810cbf693ec7dc17de0f7e4624a2d5769169","schema_version":"1.0","event_id":"sha256:4e20d79d2812b5da5aae8aac9296810cbf693ec7dc17de0f7e4624a2d5769169"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4HZJP76Y4EP25UWKORXNV76W56/bundle.json","state_url":"https://pith.science/pith/4HZJP76Y4EP25UWKORXNV76W56/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4HZJP76Y4EP25UWKORXNV76W56/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T11:51:30Z","links":{"resolver":"https://pith.science/pith/4HZJP76Y4EP25UWKORXNV76W56","bundle":"https://pith.science/pith/4HZJP76Y4EP25UWKORXNV76W56/bundle.json","state":"https://pith.science/pith/4HZJP76Y4EP25UWKORXNV76W56/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4HZJP76Y4EP25UWKORXNV76W56/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:4HZJP76Y4EP25UWKORXNV76W56","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a6fd8daedd2d11a46e37986574c7071d9ae74169bf950be37eb4b88d83df8bde","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2025-08-05T03:58:15Z","title_canon_sha256":"292e45ee34fb94096eaad0718bc59d3a49bfe7c5cc0fc0f79cd45b2bc844a487"},"schema_version":"1.0","source":{"id":"2508.03054","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.03054","created_at":"2026-07-05T11:48:35Z"},{"alias_kind":"arxiv_version","alias_value":"2508.03054v1","created_at":"2026-07-05T11:48:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.03054","created_at":"2026-07-05T11:48:35Z"},{"alias_kind":"pith_short_12","alias_value":"4HZJP76Y4EP2","created_at":"2026-07-05T11:48:35Z"},{"alias_kind":"pith_short_16","alias_value":"4HZJP76Y4EP25UWK","created_at":"2026-07-05T11:48:35Z"},{"alias_kind":"pith_short_8","alias_value":"4HZJP76Y","created_at":"2026-07-05T11:48:35Z"}],"graph_snapshots":[{"event_id":"sha256:4e20d79d2812b5da5aae8aac9296810cbf693ec7dc17de0f7e4624a2d5769169","target":"graph","created_at":"2026-07-05T11:48:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.03054/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Defending large language models (LLMs) against jailbreak attacks is essential for their safe and reliable deployment. Existing defenses often rely on shallow pattern matching, which struggles to generalize to novel and unseen attack strategies. To address this challenge, we propose the Cognitive-Driven Defense (CDD) framework, which targets the underlying structure of jailbreak prompts by applying meta-operations, defined as basic manipulations that conceal harmful intent.CDD emulates human cognitive reasoning through a structured reasoning chain. It begins with a global perception of the prom","authors_text":"Chaozhuo Li, Lirong Qiu, Litian Zhang, Rui Ha, Rui Pu, Xi Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.03054","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:99770e6e3bbdab12298bd7512cc150351fe88e6d0bd627de91fdebb2d15eb175","target":"record","created_at":"2026-07-05T11:48:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a6fd8daedd2d11a46e37986574c7071d9ae74169bf950be37eb4b88d83df8bde","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2025-08-05T03:58:15Z","title_canon_sha256":"292e45ee34fb94096eaad0718bc59d3a49bfe7c5cc0fc0f79cd45b2bc844a487"},"schema_version":"1.0","source":{"id":"2508.03054","kind":"arxiv","version":1}},"canonical_sha256":"e1f297ffd8e11faed2ca746edaffd6ef9adebab004c6a32e37e2d544a50a777f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e1f297ffd8e11faed2ca746edaffd6ef9adebab004c6a32e37e2d544a50a777f","first_computed_at":"2026-07-05T11:48:35.541743Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:48:35.541743Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"uYmt6QFo8mJjfpCzlYYxob8kAUFncw3RaGaq8lyKdYxtzOP1KrJSysXSRy4a/r/G86vfSudDutP5lX36BKypDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:48:35.542396Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.03054","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:99770e6e3bbdab12298bd7512cc150351fe88e6d0bd627de91fdebb2d15eb175","sha256:4e20d79d2812b5da5aae8aac9296810cbf693ec7dc17de0f7e4624a2d5769169"],"state_sha256":"324f1f1656e946f5a65a3c21fdba3f6d258d91655ad6d685f7d5447d81b8931c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TsMRp4MklAEI8QSuELBAlmZLXR78jqxeRSsf16eg/SevtWwqLvGdLCHrs3gh8A+XuOBr56hmKNMuiEHzK9izBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T11:51:30.651945Z","bundle_sha256":"a8b34774d1c3f7b6e449ee9b5ae5d8a1a47089d9fe5421a874566144078d69ca"}}