{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:4J45FYYCEWARX25T5ETFVFFJD5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b16881e64c2124293bac4849bd5013135ef987d799f12c28f76bd9ac1bfa08f7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-13T12:40:39Z","title_canon_sha256":"f25241b1ea7ffdaf8d2b76802bc2554ad6faad9b0660f54aa2a3870a2faa7874"},"schema_version":"1.0","source":{"id":"2402.08416","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.08416","created_at":"2026-07-05T07:44:32Z"},{"alias_kind":"arxiv_version","alias_value":"2402.08416v1","created_at":"2026-07-05T07:44:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.08416","created_at":"2026-07-05T07:44:32Z"},{"alias_kind":"pith_short_12","alias_value":"4J45FYYCEWAR","created_at":"2026-07-05T07:44:32Z"},{"alias_kind":"pith_short_16","alias_value":"4J45FYYCEWARX25T","created_at":"2026-07-05T07:44:32Z"},{"alias_kind":"pith_short_8","alias_value":"4J45FYYC","created_at":"2026-07-05T07:44:32Z"}],"graph_snapshots":[{"event_id":"sha256:d4094ac70232f3cf5369079a58e2c4e23233fd85746456c17a53dae2d378d186","target":"graph","created_at":"2026-07-05T07:44:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.08416/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models~(LLMs) have gained immense popularity and are being increasingly applied in various domains. Consequently, ensuring the security of these models is of paramount importance. Jailbreak attacks, which manipulate LLMs to generate malicious content, are recognized as a significant vulnerability. While existing research has predominantly focused on direct jailbreak attacks on LLMs, there has been limited exploration of indirect methods. The integration of various plugins into LLMs, notably Retrieval Augmented Generation~(RAG), which enables LLMs to incorporate external knowledg","authors_text":"Gelei Deng, Kailong Wang, Tianwei Zhang, Yang Liu, Yi Liu, Yuekang Li","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-13T12:40:39Z","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.08416","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7aa6c5fd90d5056a0111aab22fe950b90405eee6f0863e4183ef042267879404","target":"record","created_at":"2026-07-05T07:44:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b16881e64c2124293bac4849bd5013135ef987d799f12c28f76bd9ac1bfa08f7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-13T12:40:39Z","title_canon_sha256":"f25241b1ea7ffdaf8d2b76802bc2554ad6faad9b0660f54aa2a3870a2faa7874"},"schema_version":"1.0","source":{"id":"2402.08416","kind":"arxiv","version":1}},"canonical_sha256":"e279d2e30225811bebb3e9265a94a91f6a9e45661573995831d00db6695fe1ac","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e279d2e30225811bebb3e9265a94a91f6a9e45661573995831d00db6695fe1ac","first_computed_at":"2026-07-05T07:44:32.276068Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:44:32.276068Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4S3gWghBfNSBFkji/N9VIfpNCROJ654SzwLMmEC/+WJWg4XGmBZKq9D/hR9MUFkNBWHSPqeiQZWRu7bt/vPgBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:44:32.276488Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.08416","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7aa6c5fd90d5056a0111aab22fe950b90405eee6f0863e4183ef042267879404","sha256:d4094ac70232f3cf5369079a58e2c4e23233fd85746456c17a53dae2d378d186"],"state_sha256":"c664d5f9e9b7658efa2549a4bba758c47681e8637c56fb21b080349897fc6fa0"}