{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:7XU67SPW2RAWQKBFMR6U6JZVKN","short_pith_number":"pith:7XU67SPW","canonical_record":{"source":{"id":"2506.22666","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-27T22:22:00Z","cross_cats_sorted":["cs.CL","cs.LG","stat.ML"],"title_canon_sha256":"0e88de6d04ef9e6a550ae2d0780bfa1639a473f2d586d6bdfbc6322351c4aa62","abstract_canon_sha256":"65d0387f9733e82082c7237e52a4df106b78e76753c358365847272667a7b18f"},"schema_version":"1.0"},"canonical_sha256":"fde9efc9f6d441682825647d4f2735537cb66365c7c12ec161618d817b5c2079","source":{"kind":"arxiv","id":"2506.22666","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.22666","created_at":"2026-06-02T01:03:32Z"},{"alias_kind":"arxiv_version","alias_value":"2506.22666v3","created_at":"2026-06-02T01:03:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.22666","created_at":"2026-06-02T01:03:32Z"},{"alias_kind":"pith_short_12","alias_value":"7XU67SPW2RAW","created_at":"2026-06-02T01:03:32Z"},{"alias_kind":"pith_short_16","alias_value":"7XU67SPW2RAWQKBF","created_at":"2026-06-02T01:03:32Z"},{"alias_kind":"pith_short_8","alias_value":"7XU67SPW","created_at":"2026-06-02T01:03:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:7XU67SPW2RAWQKBFMR6U6JZVKN","target":"record","payload":{"canonical_record":{"source":{"id":"2506.22666","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-27T22:22:00Z","cross_cats_sorted":["cs.CL","cs.LG","stat.ML"],"title_canon_sha256":"0e88de6d04ef9e6a550ae2d0780bfa1639a473f2d586d6bdfbc6322351c4aa62","abstract_canon_sha256":"65d0387f9733e82082c7237e52a4df106b78e76753c358365847272667a7b18f"},"schema_version":"1.0"},"canonical_sha256":"fde9efc9f6d441682825647d4f2735537cb66365c7c12ec161618d817b5c2079","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-02T01:03:32.447804Z","signature_b64":"HdlWJFJ+cG3TwmEbTYR4EIX0rgBvqq12L/b8F0k/KHMvzQx+6xvP/eRV1hFURwZGcc+NOm9D2MIhOaC7TZREDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fde9efc9f6d441682825647d4f2735537cb66365c7c12ec161618d817b5c2079","last_reissued_at":"2026-06-02T01:03:32.447277Z","signature_status":"signed_v1","first_computed_at":"2026-06-02T01:03:32.447277Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.22666","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-02T01:03:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SV4VByC5UDiH508K7qC6ivwfacZRhN9B+2NMsja03xCpY6es3uHAjoIpyJvfbMioYxPSjAp+vNa+oxrA4NKdBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-04T06:06:05.193430Z"},"content_sha256":"adeedf8444723cf01572a532865f2f7f37b77d1837dbff19c53b9becea1d8cea","schema_version":"1.0","event_id":"sha256:adeedf8444723cf01572a532865f2f7f37b77d1837dbff19c53b9becea1d8cea"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:7XU67SPW2RAWQKBFMR6U6JZVKN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"VERA: Variational Inference Framework for Jailbreaking Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL","cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Anamika Lochab, Lu Yan, Patrick Pynadath, Ruqi Zhang, Xiangyu Zhang","submitted_at":"2025-06-27T22:22:00Z","abstract_excerpt":"The rise of API-only access to state-of-the-art LLMs highlights the need for effective black-box jailbreak methods to identify model vulnerabilities in real-world settings. Without a principled objective for gradient-based optimization, most existing approaches rely on genetic algorithms, which are limited by their initialization and dependence on manually curated prompt pools. Furthermore, these methods require individual optimization for each prompt, failing to provide a comprehensive characterization of model vulnerabilities. To address this gap, we introduce VERA: Variational infErence fRa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.22666","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.22666/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-02T01:03:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OjNGrEUDv/i1kBPoBBC/TyHcGTgbwKs+twqeJqETN/iKwOuATwZlF+bw1SIYZ4HOLed3W0eY6VF+XhduIAuRAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-04T06:06:05.193836Z"},"content_sha256":"dcd3d9c03147782f7266cbcc9deb84ccbe339ab09ba46999c993c60b803c2a39","schema_version":"1.0","event_id":"sha256:dcd3d9c03147782f7266cbcc9deb84ccbe339ab09ba46999c993c60b803c2a39"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7XU67SPW2RAWQKBFMR6U6JZVKN/bundle.json","state_url":"https://pith.science/pith/7XU67SPW2RAWQKBFMR6U6JZVKN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7XU67SPW2RAWQKBFMR6U6JZVKN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-04T06:06:05Z","links":{"resolver":"https://pith.science/pith/7XU67SPW2RAWQKBFMR6U6JZVKN","bundle":"https://pith.science/pith/7XU67SPW2RAWQKBFMR6U6JZVKN/bundle.json","state":"https://pith.science/pith/7XU67SPW2RAWQKBFMR6U6JZVKN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7XU67SPW2RAWQKBFMR6U6JZVKN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:7XU67SPW2RAWQKBFMR6U6JZVKN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"65d0387f9733e82082c7237e52a4df106b78e76753c358365847272667a7b18f","cross_cats_sorted":["cs.CL","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-27T22:22:00Z","title_canon_sha256":"0e88de6d04ef9e6a550ae2d0780bfa1639a473f2d586d6bdfbc6322351c4aa62"},"schema_version":"1.0","source":{"id":"2506.22666","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.22666","created_at":"2026-06-02T01:03:32Z"},{"alias_kind":"arxiv_version","alias_value":"2506.22666v3","created_at":"2026-06-02T01:03:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.22666","created_at":"2026-06-02T01:03:32Z"},{"alias_kind":"pith_short_12","alias_value":"7XU67SPW2RAW","created_at":"2026-06-02T01:03:32Z"},{"alias_kind":"pith_short_16","alias_value":"7XU67SPW2RAWQKBF","created_at":"2026-06-02T01:03:32Z"},{"alias_kind":"pith_short_8","alias_value":"7XU67SPW","created_at":"2026-06-02T01:03:32Z"}],"graph_snapshots":[{"event_id":"sha256:dcd3d9c03147782f7266cbcc9deb84ccbe339ab09ba46999c993c60b803c2a39","target":"graph","created_at":"2026-06-02T01:03:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.22666/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rise of API-only access to state-of-the-art LLMs highlights the need for effective black-box jailbreak methods to identify model vulnerabilities in real-world settings. Without a principled objective for gradient-based optimization, most existing approaches rely on genetic algorithms, which are limited by their initialization and dependence on manually curated prompt pools. Furthermore, these methods require individual optimization for each prompt, failing to provide a comprehensive characterization of model vulnerabilities. To address this gap, we introduce VERA: Variational infErence fRa","authors_text":"Anamika Lochab, Lu Yan, Patrick Pynadath, Ruqi Zhang, Xiangyu Zhang","cross_cats":["cs.CL","cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-27T22:22:00Z","title":"VERA: Variational Inference Framework for Jailbreaking Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.22666","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:adeedf8444723cf01572a532865f2f7f37b77d1837dbff19c53b9becea1d8cea","target":"record","created_at":"2026-06-02T01:03:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"65d0387f9733e82082c7237e52a4df106b78e76753c358365847272667a7b18f","cross_cats_sorted":["cs.CL","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-27T22:22:00Z","title_canon_sha256":"0e88de6d04ef9e6a550ae2d0780bfa1639a473f2d586d6bdfbc6322351c4aa62"},"schema_version":"1.0","source":{"id":"2506.22666","kind":"arxiv","version":3}},"canonical_sha256":"fde9efc9f6d441682825647d4f2735537cb66365c7c12ec161618d817b5c2079","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fde9efc9f6d441682825647d4f2735537cb66365c7c12ec161618d817b5c2079","first_computed_at":"2026-06-02T01:03:32.447277Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-02T01:03:32.447277Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HdlWJFJ+cG3TwmEbTYR4EIX0rgBvqq12L/b8F0k/KHMvzQx+6xvP/eRV1hFURwZGcc+NOm9D2MIhOaC7TZREDw==","signature_status":"signed_v1","signed_at":"2026-06-02T01:03:32.447804Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.22666","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:adeedf8444723cf01572a532865f2f7f37b77d1837dbff19c53b9becea1d8cea","sha256:dcd3d9c03147782f7266cbcc9deb84ccbe339ab09ba46999c993c60b803c2a39"],"state_sha256":"0acd8e5d91af73996aeba4faeb64d4dc5ac47a6287a7eb656249bb6b5320152d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3xeQLC7dj648gpDo1fhrMXACtRw5JFHfPhas3RKIiZ3/GIgWN4Nsp+Cwr7TvYH9z5/Zqdpc/dHO7WL+ejLo3Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-04T06:06:05.195962Z","bundle_sha256":"e31ec4b4645f2297d7f5fd4087739d5a0849a4da5ad1704e8c94afaac20db6e6"}}