{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:7I3FMLKERXHDCHAGZ456C6PH4H","short_pith_number":"pith:7I3FMLKE","canonical_record":{"source":{"id":"2405.16567","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2024-05-26T13:32:24Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"eae0a09abf90e7d31ea3415f87c79d5bdde5739e4ff6dadcfda0b88dd8147277","abstract_canon_sha256":"a81f0eb7f7dfd608053c95a9d400c9a0dc65c46576617e126a624ea305d92745"},"schema_version":"1.0"},"canonical_sha256":"fa36562d448dce311c06cf3be179e7e1fa2be01a4e39d11ee21c5d98e2c18076","source":{"kind":"arxiv","id":"2405.16567","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.16567","created_at":"2026-07-05T08:24:07Z"},{"alias_kind":"arxiv_version","alias_value":"2405.16567v2","created_at":"2026-07-05T08:24:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.16567","created_at":"2026-07-05T08:24:07Z"},{"alias_kind":"pith_short_12","alias_value":"7I3FMLKERXHD","created_at":"2026-07-05T08:24:07Z"},{"alias_kind":"pith_short_16","alias_value":"7I3FMLKERXHDCHAG","created_at":"2026-07-05T08:24:07Z"},{"alias_kind":"pith_short_8","alias_value":"7I3FMLKE","created_at":"2026-07-05T08:24:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:7I3FMLKERXHDCHAGZ456C6PH4H","target":"record","payload":{"canonical_record":{"source":{"id":"2405.16567","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2024-05-26T13:32:24Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"eae0a09abf90e7d31ea3415f87c79d5bdde5739e4ff6dadcfda0b88dd8147277","abstract_canon_sha256":"a81f0eb7f7dfd608053c95a9d400c9a0dc65c46576617e126a624ea305d92745"},"schema_version":"1.0"},"canonical_sha256":"fa36562d448dce311c06cf3be179e7e1fa2be01a4e39d11ee21c5d98e2c18076","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:24:07.051528Z","signature_b64":"1srbenWlHDUWcxUKNGEhat8s01lPW5GAKTqiPYChmFg0RsUR9l0sxqDj1qXrFlZYOM1HSwMQZEHVAUP3cE9gBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fa36562d448dce311c06cf3be179e7e1fa2be01a4e39d11ee21c5d98e2c18076","last_reissued_at":"2026-07-05T08:24:07.051017Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:24:07.051017Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.16567","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:24:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2rURPrq+aKKfnbfaYrK4OGFV7SXvxyikXrKKwZmH4Dp5hLQVSd2xfxCjyhPMtKmJ0jMpF3Kc9Q9IMQhdZxvGDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T12:18:45.997229Z"},"content_sha256":"bc9510297c80ac9da51ae186e611b4bc6481c80fbecf5ea459715007a0c826c7","schema_version":"1.0","event_id":"sha256:bc9510297c80ac9da51ae186e611b4bc6481c80fbecf5ea459715007a0c826c7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:7I3FMLKERXHDCHAGZ456C6PH4H","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Automatic Jailbreaking of the Text-to-Image Generative AI Systems","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.AI","authors_text":"Boqing Gong, Huishuai Zhang, Hyomin Lee, Minseon Kim, Sung Ju Hwang","submitted_at":"2024-05-26T13:32:24Z","abstract_excerpt":"Recent AI systems have shown extremely powerful performance, even surpassing human performance, on various tasks such as information retrieval, language generation, and image generation based on large language models (LLMs). At the same time, there are diverse safety risks that can cause the generation of malicious contents by circumventing the alignment in LLMs, which are often referred to as jailbreaking. However, most of the previous works only focused on the text-based jailbreaking in LLMs, and the jailbreaking of the text-to-image (T2I) generation system has been relatively overlooked. In"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.16567","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.16567/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:24:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rRtP7XS6D1qRNHjXVIyvXxJZKQvSQ67l0ETD1b/T2vumIRm3ZWQM9Zfz7JMc6EtnR0bVBZBZ7G0bRyqSxly2Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T12:18:45.997717Z"},"content_sha256":"896a64ea853424c046dc1f8655b7965d5b3f0ff649ec085354671588ce580cea","schema_version":"1.0","event_id":"sha256:896a64ea853424c046dc1f8655b7965d5b3f0ff649ec085354671588ce580cea"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7I3FMLKERXHDCHAGZ456C6PH4H/bundle.json","state_url":"https://pith.science/pith/7I3FMLKERXHDCHAGZ456C6PH4H/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7I3FMLKERXHDCHAGZ456C6PH4H/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T12:18:45Z","links":{"resolver":"https://pith.science/pith/7I3FMLKERXHDCHAGZ456C6PH4H","bundle":"https://pith.science/pith/7I3FMLKERXHDCHAGZ456C6PH4H/bundle.json","state":"https://pith.science/pith/7I3FMLKERXHDCHAGZ456C6PH4H/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7I3FMLKERXHDCHAGZ456C6PH4H/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:7I3FMLKERXHDCHAGZ456C6PH4H","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a81f0eb7f7dfd608053c95a9d400c9a0dc65c46576617e126a624ea305d92745","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2024-05-26T13:32:24Z","title_canon_sha256":"eae0a09abf90e7d31ea3415f87c79d5bdde5739e4ff6dadcfda0b88dd8147277"},"schema_version":"1.0","source":{"id":"2405.16567","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.16567","created_at":"2026-07-05T08:24:07Z"},{"alias_kind":"arxiv_version","alias_value":"2405.16567v2","created_at":"2026-07-05T08:24:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.16567","created_at":"2026-07-05T08:24:07Z"},{"alias_kind":"pith_short_12","alias_value":"7I3FMLKERXHD","created_at":"2026-07-05T08:24:07Z"},{"alias_kind":"pith_short_16","alias_value":"7I3FMLKERXHDCHAG","created_at":"2026-07-05T08:24:07Z"},{"alias_kind":"pith_short_8","alias_value":"7I3FMLKE","created_at":"2026-07-05T08:24:07Z"}],"graph_snapshots":[{"event_id":"sha256:896a64ea853424c046dc1f8655b7965d5b3f0ff649ec085354671588ce580cea","target":"graph","created_at":"2026-07-05T08:24:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.16567/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent AI systems have shown extremely powerful performance, even surpassing human performance, on various tasks such as information retrieval, language generation, and image generation based on large language models (LLMs). At the same time, there are diverse safety risks that can cause the generation of malicious contents by circumventing the alignment in LLMs, which are often referred to as jailbreaking. However, most of the previous works only focused on the text-based jailbreaking in LLMs, and the jailbreaking of the text-to-image (T2I) generation system has been relatively overlooked. In","authors_text":"Boqing Gong, Huishuai Zhang, Hyomin Lee, Minseon Kim, Sung Ju Hwang","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2024-05-26T13:32:24Z","title":"Automatic Jailbreaking of the Text-to-Image Generative AI Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.16567","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bc9510297c80ac9da51ae186e611b4bc6481c80fbecf5ea459715007a0c826c7","target":"record","created_at":"2026-07-05T08:24:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a81f0eb7f7dfd608053c95a9d400c9a0dc65c46576617e126a624ea305d92745","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2024-05-26T13:32:24Z","title_canon_sha256":"eae0a09abf90e7d31ea3415f87c79d5bdde5739e4ff6dadcfda0b88dd8147277"},"schema_version":"1.0","source":{"id":"2405.16567","kind":"arxiv","version":2}},"canonical_sha256":"fa36562d448dce311c06cf3be179e7e1fa2be01a4e39d11ee21c5d98e2c18076","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fa36562d448dce311c06cf3be179e7e1fa2be01a4e39d11ee21c5d98e2c18076","first_computed_at":"2026-07-05T08:24:07.051017Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:24:07.051017Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1srbenWlHDUWcxUKNGEhat8s01lPW5GAKTqiPYChmFg0RsUR9l0sxqDj1qXrFlZYOM1HSwMQZEHVAUP3cE9gBA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:24:07.051528Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.16567","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bc9510297c80ac9da51ae186e611b4bc6481c80fbecf5ea459715007a0c826c7","sha256:896a64ea853424c046dc1f8655b7965d5b3f0ff649ec085354671588ce580cea"],"state_sha256":"a848121e270d510779f3fc969bec92fffa30de83de2b4fa426a1afd1f1c5e0c2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lh2CTzieux7t6MnU4m5k6l1+hX8I+RyXeB8CbmUXFDJdIg7ZNvuAl/JhDCUO4YkQgxcL/uCVOVJ5V97e7uJODw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T12:18:46.001568Z","bundle_sha256":"ec60aff6ceeca00b895c975fb2ab0e039c98ee45e4a0c88d87eaf951dcfd1fdb"}}