{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:5DMEZKUIDNUJG3HGOCDHQNMBIU","short_pith_number":"pith:5DMEZKUI","canonical_record":{"source":{"id":"2505.13862","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-20T03:14:57Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"a8453c9ace476fe53e5097dae99d63f6bc6d56307efca04395d6c29d4af66d9e","abstract_canon_sha256":"1fb6db44820cce2e51e55ccbcfc3ff663df6b3201266c8a26ac62e6622bcd5ce"},"schema_version":"1.0"},"canonical_sha256":"e8d84caa881b68936ce67086783581452bef4d19d24733dd1226a70c825ac783","source":{"kind":"arxiv","id":"2505.13862","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.13862","created_at":"2026-07-05T11:09:47Z"},{"alias_kind":"arxiv_version","alias_value":"2505.13862v3","created_at":"2026-07-05T11:09:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.13862","created_at":"2026-07-05T11:09:47Z"},{"alias_kind":"pith_short_12","alias_value":"5DMEZKUIDNUJ","created_at":"2026-07-05T11:09:47Z"},{"alias_kind":"pith_short_16","alias_value":"5DMEZKUIDNUJG3HG","created_at":"2026-07-05T11:09:47Z"},{"alias_kind":"pith_short_8","alias_value":"5DMEZKUI","created_at":"2026-07-05T11:09:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:5DMEZKUIDNUJG3HGOCDHQNMBIU","target":"record","payload":{"canonical_record":{"source":{"id":"2505.13862","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-20T03:14:57Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"a8453c9ace476fe53e5097dae99d63f6bc6d56307efca04395d6c29d4af66d9e","abstract_canon_sha256":"1fb6db44820cce2e51e55ccbcfc3ff663df6b3201266c8a26ac62e6622bcd5ce"},"schema_version":"1.0"},"canonical_sha256":"e8d84caa881b68936ce67086783581452bef4d19d24733dd1226a70c825ac783","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:09:47.422491Z","signature_b64":"tjwZ0ITEbzLSYzpnyCUADPEpdabAvUg6nALGR+gUllRnd53o4N9lqjVH4YQPhQJ9y/doqewOmW4c4yObwBPuBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e8d84caa881b68936ce67086783581452bef4d19d24733dd1226a70c825ac783","last_reissued_at":"2026-07-05T11:09:47.421874Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:09:47.421874Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.13862","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qC/OpjO9THIm3zHGykXqNDYxI/Ur7mA+ssDUYCLl+Ada9REFGDza9tAKlQ/Xyzr3w0TKy9RYatPLGNCzzBaoBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T06:15:58.773651Z"},"content_sha256":"2a1e7f2f57cabcf7e127b9ce7588ea758f6b785eb9cd32b95ea3b1a815721ec5","schema_version":"1.0","event_id":"sha256:2a1e7f2f57cabcf7e127b9ce7588ea758f6b785eb9cd32b95ea3b1a815721ec5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:5DMEZKUIDNUJG3HGOCDHQNMBIU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PandaGuard: Systematic Evaluation of LLM Safety against Jailbreaking Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.CR","authors_text":"Dongcheng Zhao, Guobin Shen, Haibo Tong, Jihang Wang, Jindong Li, Linghao Feng, Sicheng Shen, Xiang He, Xiang Zheng, Yiting Dong, Yi Zeng","submitted_at":"2025-05-20T03:14:57Z","abstract_excerpt":"Large language models (LLMs) have achieved remarkable capabilities but remain vulnerable to adversarial prompts known as jailbreaks, which can bypass safety alignment and elicit harmful outputs. Despite growing efforts in LLM safety research, existing evaluations are often fragmented, focused on isolated attack or defense techniques, and lack systematic, reproducible analysis. In this work, we introduce PandaGuard, a unified and modular framework that models LLM jailbreak safety as a multi-agent system comprising attackers, defenders, and judges. Our framework implements 19 attack methods and "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.13862","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.13862/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aB59KfIZjl4jjh5vJT83cVVPeyLkUQh9khN3H2r7Pdgdwll5pLeOb8agq88rnCp31jIKhp8ROGunFhAid14OAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T06:15:58.774169Z"},"content_sha256":"9067deba432195686dc045d0ef307eb780ce1f94f4ac0de893fadc2b1ee54fcf","schema_version":"1.0","event_id":"sha256:9067deba432195686dc045d0ef307eb780ce1f94f4ac0de893fadc2b1ee54fcf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5DMEZKUIDNUJG3HGOCDHQNMBIU/bundle.json","state_url":"https://pith.science/pith/5DMEZKUIDNUJG3HGOCDHQNMBIU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5DMEZKUIDNUJG3HGOCDHQNMBIU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T06:15:58Z","links":{"resolver":"https://pith.science/pith/5DMEZKUIDNUJG3HGOCDHQNMBIU","bundle":"https://pith.science/pith/5DMEZKUIDNUJG3HGOCDHQNMBIU/bundle.json","state":"https://pith.science/pith/5DMEZKUIDNUJG3HGOCDHQNMBIU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5DMEZKUIDNUJG3HGOCDHQNMBIU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:5DMEZKUIDNUJG3HGOCDHQNMBIU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1fb6db44820cce2e51e55ccbcfc3ff663df6b3201266c8a26ac62e6622bcd5ce","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-20T03:14:57Z","title_canon_sha256":"a8453c9ace476fe53e5097dae99d63f6bc6d56307efca04395d6c29d4af66d9e"},"schema_version":"1.0","source":{"id":"2505.13862","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.13862","created_at":"2026-07-05T11:09:47Z"},{"alias_kind":"arxiv_version","alias_value":"2505.13862v3","created_at":"2026-07-05T11:09:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.13862","created_at":"2026-07-05T11:09:47Z"},{"alias_kind":"pith_short_12","alias_value":"5DMEZKUIDNUJ","created_at":"2026-07-05T11:09:47Z"},{"alias_kind":"pith_short_16","alias_value":"5DMEZKUIDNUJG3HG","created_at":"2026-07-05T11:09:47Z"},{"alias_kind":"pith_short_8","alias_value":"5DMEZKUI","created_at":"2026-07-05T11:09:47Z"}],"graph_snapshots":[{"event_id":"sha256:9067deba432195686dc045d0ef307eb780ce1f94f4ac0de893fadc2b1ee54fcf","target":"graph","created_at":"2026-07-05T11:09:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.13862/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have achieved remarkable capabilities but remain vulnerable to adversarial prompts known as jailbreaks, which can bypass safety alignment and elicit harmful outputs. Despite growing efforts in LLM safety research, existing evaluations are often fragmented, focused on isolated attack or defense techniques, and lack systematic, reproducible analysis. In this work, we introduce PandaGuard, a unified and modular framework that models LLM jailbreak safety as a multi-agent system comprising attackers, defenders, and judges. Our framework implements 19 attack methods and ","authors_text":"Dongcheng Zhao, Guobin Shen, Haibo Tong, Jihang Wang, Jindong Li, Linghao Feng, Sicheng Shen, Xiang He, Xiang Zheng, Yiting Dong, Yi Zeng","cross_cats":["cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-20T03:14:57Z","title":"PandaGuard: Systematic Evaluation of LLM Safety against Jailbreaking Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.13862","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2a1e7f2f57cabcf7e127b9ce7588ea758f6b785eb9cd32b95ea3b1a815721ec5","target":"record","created_at":"2026-07-05T11:09:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1fb6db44820cce2e51e55ccbcfc3ff663df6b3201266c8a26ac62e6622bcd5ce","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-20T03:14:57Z","title_canon_sha256":"a8453c9ace476fe53e5097dae99d63f6bc6d56307efca04395d6c29d4af66d9e"},"schema_version":"1.0","source":{"id":"2505.13862","kind":"arxiv","version":3}},"canonical_sha256":"e8d84caa881b68936ce67086783581452bef4d19d24733dd1226a70c825ac783","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e8d84caa881b68936ce67086783581452bef4d19d24733dd1226a70c825ac783","first_computed_at":"2026-07-05T11:09:47.421874Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:09:47.421874Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tjwZ0ITEbzLSYzpnyCUADPEpdabAvUg6nALGR+gUllRnd53o4N9lqjVH4YQPhQJ9y/doqewOmW4c4yObwBPuBA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:09:47.422491Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.13862","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2a1e7f2f57cabcf7e127b9ce7588ea758f6b785eb9cd32b95ea3b1a815721ec5","sha256:9067deba432195686dc045d0ef307eb780ce1f94f4ac0de893fadc2b1ee54fcf"],"state_sha256":"66de5e3cdcb0bcaa733931184e1b2474412b7cb236cc57b8abeac29fd8e494c1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mp22Me3j9t0eIop5BDX+WkxAPeLz7t0RPHgbmdXfsda3g1JscbgzweWPiWuqmfHDAdvm5I8clRswYHI2MpaAAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T06:15:58.781415Z","bundle_sha256":"ec2e2b89659d0a7c38040585277b443e5f59a4f227c82d156e5351662ac971de"}}