{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:772S57VKWUKEUEOGSQA26NUZWX","short_pith_number":"pith:772S57VK","canonical_record":{"source":{"id":"2410.04190","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-05T15:10:01Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"e99ad0f13f6fe3166cc4dd061961f5a339831629c9aaf77a41aa5922c56f2dd8","abstract_canon_sha256":"4b47cd124c91c9b5d03ebb0b030922f0f6b5380702c9d3fba6d97adc423695e2"},"schema_version":"1.0"},"canonical_sha256":"fff52efeaab5144a11c69401af3699b5d3940c2c2291ea90422af7a6a1d3f427","source":{"kind":"arxiv","id":"2410.04190","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.04190","created_at":"2026-07-05T09:16:30Z"},{"alias_kind":"arxiv_version","alias_value":"2410.04190v1","created_at":"2026-07-05T09:16:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.04190","created_at":"2026-07-05T09:16:30Z"},{"alias_kind":"pith_short_12","alias_value":"772S57VKWUKE","created_at":"2026-07-05T09:16:30Z"},{"alias_kind":"pith_short_16","alias_value":"772S57VKWUKEUEOG","created_at":"2026-07-05T09:16:30Z"},{"alias_kind":"pith_short_8","alias_value":"772S57VK","created_at":"2026-07-05T09:16:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:772S57VKWUKEUEOGSQA26NUZWX","target":"record","payload":{"canonical_record":{"source":{"id":"2410.04190","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-05T15:10:01Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"e99ad0f13f6fe3166cc4dd061961f5a339831629c9aaf77a41aa5922c56f2dd8","abstract_canon_sha256":"4b47cd124c91c9b5d03ebb0b030922f0f6b5380702c9d3fba6d97adc423695e2"},"schema_version":"1.0"},"canonical_sha256":"fff52efeaab5144a11c69401af3699b5d3940c2c2291ea90422af7a6a1d3f427","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:16:30.200753Z","signature_b64":"WjC86asur0JWPfIZzu+umqm6iZMdNVvSjbt1XLdcxznlPzDOiKFopmr0r9he+SOEBNWPEnPq0iI/CziNI4EBDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fff52efeaab5144a11c69401af3699b5d3940c2c2291ea90422af7a6a1d3f427","last_reissued_at":"2026-07-05T09:16:30.200237Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:16:30.200237Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.04190","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:16:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WGSi9qU7+xSarZQwaljs8g8DXJaUNqHhgJNOihRXlJo5MgogLJ1OHZyYi7Ll0I8cG2qisVuM9V9ksGwdpLwCDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T19:00:15.164961Z"},"content_sha256":"b51c79ed855c1532e240b4e19597eb3cb550b14dceec92d3281718aa8c712d3a","schema_version":"1.0","event_id":"sha256:b51c79ed855c1532e240b4e19597eb3cb550b14dceec92d3281718aa8c712d3a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:772S57VKWUKEUEOGSQA26NUZWX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Harnessing Task Overload for Scalable Jailbreak Attacks on Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.CR","authors_text":"Dongcheng Zhao, Guobin Shen, Xiang He, Yiting Dong, Yi Zeng","submitted_at":"2024-10-05T15:10:01Z","abstract_excerpt":"Large Language Models (LLMs) remain vulnerable to jailbreak attacks that bypass their safety mechanisms. Existing attack methods are fixed or specifically tailored for certain models and cannot flexibly adjust attack strength, which is critical for generalization when attacking models of various sizes. We introduce a novel scalable jailbreak attack that preempts the activation of an LLM's safety policies by occupying its computational resources. Our method involves engaging the LLM in a resource-intensive preliminary task - a Character Map lookup and decoding process - before presenting the ta"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.04190","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.04190/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:16:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mNxlVmWN5ItX5aUTagJwxIyIDuj/ZyEBxs8xZEtTgKMv9NoT0CgWwnD4JQLbcAaNEpkT13ta/ncMaGvtr7mPDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T19:00:15.165470Z"},"content_sha256":"33d3cb1ace880ed17d8bf89aa2e8ac091d768a79580b65aef3e7ec11e6d4a24e","schema_version":"1.0","event_id":"sha256:33d3cb1ace880ed17d8bf89aa2e8ac091d768a79580b65aef3e7ec11e6d4a24e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/772S57VKWUKEUEOGSQA26NUZWX/bundle.json","state_url":"https://pith.science/pith/772S57VKWUKEUEOGSQA26NUZWX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/772S57VKWUKEUEOGSQA26NUZWX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T19:00:15Z","links":{"resolver":"https://pith.science/pith/772S57VKWUKEUEOGSQA26NUZWX","bundle":"https://pith.science/pith/772S57VKWUKEUEOGSQA26NUZWX/bundle.json","state":"https://pith.science/pith/772S57VKWUKEUEOGSQA26NUZWX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/772S57VKWUKEUEOGSQA26NUZWX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:772S57VKWUKEUEOGSQA26NUZWX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4b47cd124c91c9b5d03ebb0b030922f0f6b5380702c9d3fba6d97adc423695e2","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-05T15:10:01Z","title_canon_sha256":"e99ad0f13f6fe3166cc4dd061961f5a339831629c9aaf77a41aa5922c56f2dd8"},"schema_version":"1.0","source":{"id":"2410.04190","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.04190","created_at":"2026-07-05T09:16:30Z"},{"alias_kind":"arxiv_version","alias_value":"2410.04190v1","created_at":"2026-07-05T09:16:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.04190","created_at":"2026-07-05T09:16:30Z"},{"alias_kind":"pith_short_12","alias_value":"772S57VKWUKE","created_at":"2026-07-05T09:16:30Z"},{"alias_kind":"pith_short_16","alias_value":"772S57VKWUKEUEOG","created_at":"2026-07-05T09:16:30Z"},{"alias_kind":"pith_short_8","alias_value":"772S57VK","created_at":"2026-07-05T09:16:30Z"}],"graph_snapshots":[{"event_id":"sha256:33d3cb1ace880ed17d8bf89aa2e8ac091d768a79580b65aef3e7ec11e6d4a24e","target":"graph","created_at":"2026-07-05T09:16:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.04190/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) remain vulnerable to jailbreak attacks that bypass their safety mechanisms. Existing attack methods are fixed or specifically tailored for certain models and cannot flexibly adjust attack strength, which is critical for generalization when attacking models of various sizes. We introduce a novel scalable jailbreak attack that preempts the activation of an LLM's safety policies by occupying its computational resources. Our method involves engaging the LLM in a resource-intensive preliminary task - a Character Map lookup and decoding process - before presenting the ta","authors_text":"Dongcheng Zhao, Guobin Shen, Xiang He, Yiting Dong, Yi Zeng","cross_cats":["cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-05T15:10:01Z","title":"Harnessing Task Overload for Scalable Jailbreak Attacks on Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.04190","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b51c79ed855c1532e240b4e19597eb3cb550b14dceec92d3281718aa8c712d3a","target":"record","created_at":"2026-07-05T09:16:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4b47cd124c91c9b5d03ebb0b030922f0f6b5380702c9d3fba6d97adc423695e2","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-05T15:10:01Z","title_canon_sha256":"e99ad0f13f6fe3166cc4dd061961f5a339831629c9aaf77a41aa5922c56f2dd8"},"schema_version":"1.0","source":{"id":"2410.04190","kind":"arxiv","version":1}},"canonical_sha256":"fff52efeaab5144a11c69401af3699b5d3940c2c2291ea90422af7a6a1d3f427","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fff52efeaab5144a11c69401af3699b5d3940c2c2291ea90422af7a6a1d3f427","first_computed_at":"2026-07-05T09:16:30.200237Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:16:30.200237Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WjC86asur0JWPfIZzu+umqm6iZMdNVvSjbt1XLdcxznlPzDOiKFopmr0r9he+SOEBNWPEnPq0iI/CziNI4EBDw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:16:30.200753Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.04190","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b51c79ed855c1532e240b4e19597eb3cb550b14dceec92d3281718aa8c712d3a","sha256:33d3cb1ace880ed17d8bf89aa2e8ac091d768a79580b65aef3e7ec11e6d4a24e"],"state_sha256":"84756fad6bb629487bb192d193f4aeca24b58803ecec107ca57671d71829f103"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"g6WNbck+47WYUv2BlEL1UCxKKD8+d4QfXHhLz96A+FQqigQ+bnZ1hTMNO6aBoMuFPVjgcBcUmusoV6ehI2faBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T19:00:15.170000Z","bundle_sha256":"897cc6d2ef49f4078bbb9aa09a3a5249fc9b5389187bb6bc556bc3dc90c6e408"}}