{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:AZK5LCCMVUXELF3IAHL5WMMUIM","short_pith_number":"pith:AZK5LCCM","canonical_record":{"source":{"id":"2505.04806","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-07T21:15:40Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"0f964dda37c7c4f7c65f643ca020d47a4457266645428137fc0af8f60f11c21b","abstract_canon_sha256":"c8adeecdde777acd6b073983a890b0596e5a4f1e70459357909613db2eb9b2bc"},"schema_version":"1.0"},"canonical_sha256":"0655d5884cad2e45976801d7db31944338da84a6948d33503933d5730bac8081","source":{"kind":"arxiv","id":"2505.04806","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.04806","created_at":"2026-07-05T11:02:24Z"},{"alias_kind":"arxiv_version","alias_value":"2505.04806v2","created_at":"2026-07-05T11:02:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.04806","created_at":"2026-07-05T11:02:24Z"},{"alias_kind":"pith_short_12","alias_value":"AZK5LCCMVUXE","created_at":"2026-07-05T11:02:24Z"},{"alias_kind":"pith_short_16","alias_value":"AZK5LCCMVUXELF3I","created_at":"2026-07-05T11:02:24Z"},{"alias_kind":"pith_short_8","alias_value":"AZK5LCCM","created_at":"2026-07-05T11:02:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:AZK5LCCMVUXELF3IAHL5WMMUIM","target":"record","payload":{"canonical_record":{"source":{"id":"2505.04806","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-07T21:15:40Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"0f964dda37c7c4f7c65f643ca020d47a4457266645428137fc0af8f60f11c21b","abstract_canon_sha256":"c8adeecdde777acd6b073983a890b0596e5a4f1e70459357909613db2eb9b2bc"},"schema_version":"1.0"},"canonical_sha256":"0655d5884cad2e45976801d7db31944338da84a6948d33503933d5730bac8081","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:02:24.442684Z","signature_b64":"apwAR2iPay9DXZWkSSH4gmxDn665qD0j9lf5ENWCLtqyqMHnGTLG0fUuxM5ufD2CGUGDpjJoL86lUkYyVzivAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0655d5884cad2e45976801d7db31944338da84a6948d33503933d5730bac8081","last_reissued_at":"2026-07-05T11:02:24.442197Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:02:24.442197Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.04806","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:02:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7me34Y0ovss+ecPXoGUYIanpzxtoLCqasyqK517HEnRTT1P8jY4viK6E5r3cYST+uttvMGsmNKdH0hCTh8pmAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:04:42.133726Z"},"content_sha256":"bc8f3b73afd8dd1236cd037a7239608b7be9e75962c105799f7237180caa1a36","schema_version":"1.0","event_id":"sha256:bc8f3b73afd8dd1236cd037a7239608b7be9e75962c105799f7237180caa1a36"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:AZK5LCCMVUXELF3IAHL5WMMUIM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.CR","authors_text":"Chetan Pathade","submitted_at":"2025-05-07T21:15:40Z","abstract_excerpt":"Large Language Models (LLMs) are increasingly integrated into consumer and enterprise applications. Despite their capabilities, they remain susceptible to adversarial attacks such as prompt injection and jailbreaks that override alignment safeguards. This paper provides a systematic investigation of jailbreak strategies against various state-of-the-art LLMs. We categorize over 1,400 adversarial prompts, analyze their success against GPT-4, Claude 2, Mistral 7B, and Vicuna, and examine their generalizability and construction logic. We further propose layered mitigation strategies and recommend "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.04806","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.04806/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:02:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tYE91GWE7aflHffs/5Jam5vfxYNIFOBQNcGtWvesViwas97+ASNxH+5lO+DExagAem8QP/BCWn3qEfuswiIXCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:04:42.134632Z"},"content_sha256":"f4ff3a8376e93535b0c16827947c39975cfc99d1297dac0ea8f44e471b63470e","schema_version":"1.0","event_id":"sha256:f4ff3a8376e93535b0c16827947c39975cfc99d1297dac0ea8f44e471b63470e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AZK5LCCMVUXELF3IAHL5WMMUIM/bundle.json","state_url":"https://pith.science/pith/AZK5LCCMVUXELF3IAHL5WMMUIM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AZK5LCCMVUXELF3IAHL5WMMUIM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T22:04:42Z","links":{"resolver":"https://pith.science/pith/AZK5LCCMVUXELF3IAHL5WMMUIM","bundle":"https://pith.science/pith/AZK5LCCMVUXELF3IAHL5WMMUIM/bundle.json","state":"https://pith.science/pith/AZK5LCCMVUXELF3IAHL5WMMUIM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AZK5LCCMVUXELF3IAHL5WMMUIM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:AZK5LCCMVUXELF3IAHL5WMMUIM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c8adeecdde777acd6b073983a890b0596e5a4f1e70459357909613db2eb9b2bc","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-07T21:15:40Z","title_canon_sha256":"0f964dda37c7c4f7c65f643ca020d47a4457266645428137fc0af8f60f11c21b"},"schema_version":"1.0","source":{"id":"2505.04806","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.04806","created_at":"2026-07-05T11:02:24Z"},{"alias_kind":"arxiv_version","alias_value":"2505.04806v2","created_at":"2026-07-05T11:02:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.04806","created_at":"2026-07-05T11:02:24Z"},{"alias_kind":"pith_short_12","alias_value":"AZK5LCCMVUXE","created_at":"2026-07-05T11:02:24Z"},{"alias_kind":"pith_short_16","alias_value":"AZK5LCCMVUXELF3I","created_at":"2026-07-05T11:02:24Z"},{"alias_kind":"pith_short_8","alias_value":"AZK5LCCM","created_at":"2026-07-05T11:02:24Z"}],"graph_snapshots":[{"event_id":"sha256:f4ff3a8376e93535b0c16827947c39975cfc99d1297dac0ea8f44e471b63470e","target":"graph","created_at":"2026-07-05T11:02:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.04806/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) are increasingly integrated into consumer and enterprise applications. Despite their capabilities, they remain susceptible to adversarial attacks such as prompt injection and jailbreaks that override alignment safeguards. This paper provides a systematic investigation of jailbreak strategies against various state-of-the-art LLMs. We categorize over 1,400 adversarial prompts, analyze their success against GPT-4, Claude 2, Mistral 7B, and Vicuna, and examine their generalizability and construction logic. We further propose layered mitigation strategies and recommend ","authors_text":"Chetan Pathade","cross_cats":["cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.04806","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bc8f3b73afd8dd1236cd037a7239608b7be9e75962c105799f7237180caa1a36","target":"record","created_at":"2026-07-05T11:02:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c8adeecdde777acd6b073983a890b0596e5a4f1e70459357909613db2eb9b2bc","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-07T21:15:40Z","title_canon_sha256":"0f964dda37c7c4f7c65f643ca020d47a4457266645428137fc0af8f60f11c21b"},"schema_version":"1.0","source":{"id":"2505.04806","kind":"arxiv","version":2}},"canonical_sha256":"0655d5884cad2e45976801d7db31944338da84a6948d33503933d5730bac8081","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0655d5884cad2e45976801d7db31944338da84a6948d33503933d5730bac8081","first_computed_at":"2026-07-05T11:02:24.442197Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:02:24.442197Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"apwAR2iPay9DXZWkSSH4gmxDn665qD0j9lf5ENWCLtqyqMHnGTLG0fUuxM5ufD2CGUGDpjJoL86lUkYyVzivAg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:02:24.442684Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.04806","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bc8f3b73afd8dd1236cd037a7239608b7be9e75962c105799f7237180caa1a36","sha256:f4ff3a8376e93535b0c16827947c39975cfc99d1297dac0ea8f44e471b63470e"],"state_sha256":"f922b7cba0df73dca2aca4a7459dd69f7f4ee8616b9bd2706e5a65415654eeee"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hrIXWeMLPDLvsGb3O6Ua7p6XMMXG3xpCww6khQtvXbvjQoEpkzAR2LcIBc8LosR+VfXErzKeIWYTLgtQBtC0Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T22:04:42.141360Z","bundle_sha256":"393dc7a71a42345c22e015adf1a1d90b4ce4694641053da2b1999461471ca7c7"}}