{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:5VPCW45YR63YFQKSH5SC2HVYXH","short_pith_number":"pith:5VPCW45Y","canonical_record":{"source":{"id":"2408.01420","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-02T17:55:50Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"d7481317065b5b09cbc1785ebb99a29e518f115fa3f49ee5c9eeb29538b41d9f","abstract_canon_sha256":"73956068add112ff32f6480892a38ce1e13edd10bcd1eef49c972e13dddee5d8"},"schema_version":"1.0"},"canonical_sha256":"ed5e2b73b88fb782c1523f642d1eb8b9d2af6dfcc019a89c2d562cc5e3a52814","source":{"kind":"arxiv","id":"2408.01420","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.01420","created_at":"2026-07-05T08:51:38Z"},{"alias_kind":"arxiv_version","alias_value":"2408.01420v1","created_at":"2026-07-05T08:51:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.01420","created_at":"2026-07-05T08:51:38Z"},{"alias_kind":"pith_short_12","alias_value":"5VPCW45YR63Y","created_at":"2026-07-05T08:51:38Z"},{"alias_kind":"pith_short_16","alias_value":"5VPCW45YR63YFQKS","created_at":"2026-07-05T08:51:38Z"},{"alias_kind":"pith_short_8","alias_value":"5VPCW45Y","created_at":"2026-07-05T08:51:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:5VPCW45YR63YFQKSH5SC2HVYXH","target":"record","payload":{"canonical_record":{"source":{"id":"2408.01420","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-02T17:55:50Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"d7481317065b5b09cbc1785ebb99a29e518f115fa3f49ee5c9eeb29538b41d9f","abstract_canon_sha256":"73956068add112ff32f6480892a38ce1e13edd10bcd1eef49c972e13dddee5d8"},"schema_version":"1.0"},"canonical_sha256":"ed5e2b73b88fb782c1523f642d1eb8b9d2af6dfcc019a89c2d562cc5e3a52814","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:51:38.203568Z","signature_b64":"C9zLBX7w26pD+zFnAuCeWU82U04GZEBE4xbhpkw8wzfpuYBHbRmCTHkxn45LuNdDHeT7E/b3ADYV6NPsO6OBCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ed5e2b73b88fb782c1523f642d1eb8b9d2af6dfcc019a89c2d562cc5e3a52814","last_reissued_at":"2026-07-05T08:51:38.203018Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:51:38.203018Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.01420","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:51:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cwRhSmhksXAkInR713rWKulC1B+SH5KIeOHF01QlbVXCLcLYV+YC4EZ22GBqvGWtLg+g9cibJpiAyVhZUwbbDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-17T18:53:44.589281Z"},"content_sha256":"905df6cf2bfd8cb8118a49940ae597460a6c51b246c5cbc24d6d95c4785fc65e","schema_version":"1.0","event_id":"sha256:905df6cf2bfd8cb8118a49940ae597460a6c51b246c5cbc24d6d95c4785fc65e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:5VPCW45YR63YFQKSH5SC2HVYXH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.LG","authors_text":"Jingtong Su, Julia Kempe, Karen Ullrich","submitted_at":"2024-08-02T17:55:50Z","abstract_excerpt":"Large language models (LLMs) are trained on a deluge of text data with limited quality control. As a result, LLMs can exhibit unintended or even harmful behaviours, such as leaking information, fake news or hate speech. Countermeasures, commonly referred to as preference alignment, include fine-tuning the pretrained LLMs with carefully crafted text examples of desired behaviour. Even then, empirical evidence shows preference aligned LLMs can be enticed to harmful behaviour. This so called jailbreaking of LLMs is typically achieved by adversarially modifying the input prompt to the LLM. Our pap"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.01420","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.01420/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:51:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dEdJKFCSvLVNZFg1uUNvyNp6YEuxiydDMzMfkZ5UvGM2Sx+1zTLyVbgSa8qbDeWRraoPjhoA3xoiPMdQXrP4BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-17T18:53:44.589680Z"},"content_sha256":"520781410cdef584d3dfe4fc614e2e27ceed5760fa50ab6cca8ec7ef0e168246","schema_version":"1.0","event_id":"sha256:520781410cdef584d3dfe4fc614e2e27ceed5760fa50ab6cca8ec7ef0e168246"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5VPCW45YR63YFQKSH5SC2HVYXH/bundle.json","state_url":"https://pith.science/pith/5VPCW45YR63YFQKSH5SC2HVYXH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5VPCW45YR63YFQKSH5SC2HVYXH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-17T18:53:44Z","links":{"resolver":"https://pith.science/pith/5VPCW45YR63YFQKSH5SC2HVYXH","bundle":"https://pith.science/pith/5VPCW45YR63YFQKSH5SC2HVYXH/bundle.json","state":"https://pith.science/pith/5VPCW45YR63YFQKSH5SC2HVYXH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5VPCW45YR63YFQKSH5SC2HVYXH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:5VPCW45YR63YFQKSH5SC2HVYXH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"73956068add112ff32f6480892a38ce1e13edd10bcd1eef49c972e13dddee5d8","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-02T17:55:50Z","title_canon_sha256":"d7481317065b5b09cbc1785ebb99a29e518f115fa3f49ee5c9eeb29538b41d9f"},"schema_version":"1.0","source":{"id":"2408.01420","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.01420","created_at":"2026-07-05T08:51:38Z"},{"alias_kind":"arxiv_version","alias_value":"2408.01420v1","created_at":"2026-07-05T08:51:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.01420","created_at":"2026-07-05T08:51:38Z"},{"alias_kind":"pith_short_12","alias_value":"5VPCW45YR63Y","created_at":"2026-07-05T08:51:38Z"},{"alias_kind":"pith_short_16","alias_value":"5VPCW45YR63YFQKS","created_at":"2026-07-05T08:51:38Z"},{"alias_kind":"pith_short_8","alias_value":"5VPCW45Y","created_at":"2026-07-05T08:51:38Z"}],"graph_snapshots":[{"event_id":"sha256:520781410cdef584d3dfe4fc614e2e27ceed5760fa50ab6cca8ec7ef0e168246","target":"graph","created_at":"2026-07-05T08:51:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.01420/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) are trained on a deluge of text data with limited quality control. As a result, LLMs can exhibit unintended or even harmful behaviours, such as leaking information, fake news or hate speech. Countermeasures, commonly referred to as preference alignment, include fine-tuning the pretrained LLMs with carefully crafted text examples of desired behaviour. Even then, empirical evidence shows preference aligned LLMs can be enticed to harmful behaviour. This so called jailbreaking of LLMs is typically achieved by adversarially modifying the input prompt to the LLM. Our pap","authors_text":"Jingtong Su, Julia Kempe, Karen Ullrich","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-02T17:55:50Z","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.01420","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:905df6cf2bfd8cb8118a49940ae597460a6c51b246c5cbc24d6d95c4785fc65e","target":"record","created_at":"2026-07-05T08:51:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"73956068add112ff32f6480892a38ce1e13edd10bcd1eef49c972e13dddee5d8","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-02T17:55:50Z","title_canon_sha256":"d7481317065b5b09cbc1785ebb99a29e518f115fa3f49ee5c9eeb29538b41d9f"},"schema_version":"1.0","source":{"id":"2408.01420","kind":"arxiv","version":1}},"canonical_sha256":"ed5e2b73b88fb782c1523f642d1eb8b9d2af6dfcc019a89c2d562cc5e3a52814","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ed5e2b73b88fb782c1523f642d1eb8b9d2af6dfcc019a89c2d562cc5e3a52814","first_computed_at":"2026-07-05T08:51:38.203018Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:51:38.203018Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"C9zLBX7w26pD+zFnAuCeWU82U04GZEBE4xbhpkw8wzfpuYBHbRmCTHkxn45LuNdDHeT7E/b3ADYV6NPsO6OBCg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:51:38.203568Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.01420","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:905df6cf2bfd8cb8118a49940ae597460a6c51b246c5cbc24d6d95c4785fc65e","sha256:520781410cdef584d3dfe4fc614e2e27ceed5760fa50ab6cca8ec7ef0e168246"],"state_sha256":"ae06abacde60c5e2d7a56f53ca6f0a0ad84c3dd0bb92b9daec1d74bfdee448ac"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6H/2UXP8PYRkFuLQPAwNTLiqXMYWuSyYTHgJr3roi4R4smtkA509JL6h8V+58ehLG0/O7bopG4lsbE7njCbSDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-17T18:53:44.592206Z","bundle_sha256":"4e02630c1ddf91c30b550a69434878aa9cf4a89b08deba87cba84737ebb7da61"}}