{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:BHEION6CTPEII6KVQUNFGJUATY","short_pith_number":"pith:BHEION6C","canonical_record":{"source":{"id":"2409.07503","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-11T00:00:58Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"1d01db159c3e69c15531684a98df3403fdb72983e1618d7e0f93a3e6d47a7880","abstract_canon_sha256":"9dfd443c2291aff360e45704bb0a26e12a6f49b32a38a3db4eb3ee72a4936f44"},"schema_version":"1.0"},"canonical_sha256":"09c88737c29bc8847955851a5326809e39bb98f75e85eb65e6d3b741074e850c","source":{"kind":"arxiv","id":"2409.07503","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.07503","created_at":"2026-07-05T09:06:10Z"},{"alias_kind":"arxiv_version","alias_value":"2409.07503v1","created_at":"2026-07-05T09:06:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.07503","created_at":"2026-07-05T09:06:10Z"},{"alias_kind":"pith_short_12","alias_value":"BHEION6CTPEI","created_at":"2026-07-05T09:06:10Z"},{"alias_kind":"pith_short_16","alias_value":"BHEION6CTPEII6KV","created_at":"2026-07-05T09:06:10Z"},{"alias_kind":"pith_short_8","alias_value":"BHEION6C","created_at":"2026-07-05T09:06:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:BHEION6CTPEII6KVQUNFGJUATY","target":"record","payload":{"canonical_record":{"source":{"id":"2409.07503","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-11T00:00:58Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"1d01db159c3e69c15531684a98df3403fdb72983e1618d7e0f93a3e6d47a7880","abstract_canon_sha256":"9dfd443c2291aff360e45704bb0a26e12a6f49b32a38a3db4eb3ee72a4936f44"},"schema_version":"1.0"},"canonical_sha256":"09c88737c29bc8847955851a5326809e39bb98f75e85eb65e6d3b741074e850c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:06:10.773970Z","signature_b64":"HxtXdonwTHImIykzBw+glP4Qwm+EkN9YBSYJyOJeHXlJtQ754C86yFLsC/+9MHWu/Ar/2AUiNjpqYKfrh7aBAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"09c88737c29bc8847955851a5326809e39bb98f75e85eb65e6d3b741074e850c","last_reissued_at":"2026-07-05T09:06:10.773544Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:06:10.773544Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.07503","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:06:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LDLQ6f3swlKa9GbXU5JcmJ/fqA3ocJsZYoBZ6TyIAOoeU/r9ldnURZN7+XCPkUJTyrcBWEqvvTFgWars6K3hCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T23:54:28.372229Z"},"content_sha256":"03c5d7e854f7442575ac09339a70bd4f597caa24360d2dc2458b475cbebb0767","schema_version":"1.0","event_id":"sha256:03c5d7e854f7442575ac09339a70bd4f597caa24360d2dc2458b475cbebb0767"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:BHEION6CTPEII6KVQUNFGJUATY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AdaPPA: Adaptive Position Pre-Fill Jailbreak Attack Approach Targeting LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Feng Liu, Jie Wen, Jizhong Han, Lijia Lv, Songlin Hu, Weigang Zhang, Xuehai Tang","submitted_at":"2024-09-11T00:00:58Z","abstract_excerpt":"Jailbreak vulnerabilities in Large Language Models (LLMs) refer to methods that extract malicious content from the model by carefully crafting prompts or suffixes, which has garnered significant attention from the research community. However, traditional attack methods, which primarily focus on the semantic level, are easily detected by the model. These methods overlook the difference in the model's alignment protection capabilities at different output stages. To address this issue, we propose an adaptive position pre-fill jailbreak attack approach for executing jailbreak attacks on LLMs. Our "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.07503","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.07503/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:06:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9xWejzvRndogDTk8eiah09AREZGEtLzgaI7BnFGFKeBhTDKO4z/5ikrESq9JaVCF/HFTUqu0ZR5f8gjQ7vDLBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T23:54:28.372757Z"},"content_sha256":"c7443fc38f3f5450794900053d677e7f40da66ea1a014e989dab120c69948b89","schema_version":"1.0","event_id":"sha256:c7443fc38f3f5450794900053d677e7f40da66ea1a014e989dab120c69948b89"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BHEION6CTPEII6KVQUNFGJUATY/bundle.json","state_url":"https://pith.science/pith/BHEION6CTPEII6KVQUNFGJUATY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BHEION6CTPEII6KVQUNFGJUATY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T23:54:28Z","links":{"resolver":"https://pith.science/pith/BHEION6CTPEII6KVQUNFGJUATY","bundle":"https://pith.science/pith/BHEION6CTPEII6KVQUNFGJUATY/bundle.json","state":"https://pith.science/pith/BHEION6CTPEII6KVQUNFGJUATY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BHEION6CTPEII6KVQUNFGJUATY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:BHEION6CTPEII6KVQUNFGJUATY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9dfd443c2291aff360e45704bb0a26e12a6f49b32a38a3db4eb3ee72a4936f44","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-11T00:00:58Z","title_canon_sha256":"1d01db159c3e69c15531684a98df3403fdb72983e1618d7e0f93a3e6d47a7880"},"schema_version":"1.0","source":{"id":"2409.07503","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.07503","created_at":"2026-07-05T09:06:10Z"},{"alias_kind":"arxiv_version","alias_value":"2409.07503v1","created_at":"2026-07-05T09:06:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.07503","created_at":"2026-07-05T09:06:10Z"},{"alias_kind":"pith_short_12","alias_value":"BHEION6CTPEI","created_at":"2026-07-05T09:06:10Z"},{"alias_kind":"pith_short_16","alias_value":"BHEION6CTPEII6KV","created_at":"2026-07-05T09:06:10Z"},{"alias_kind":"pith_short_8","alias_value":"BHEION6C","created_at":"2026-07-05T09:06:10Z"}],"graph_snapshots":[{"event_id":"sha256:c7443fc38f3f5450794900053d677e7f40da66ea1a014e989dab120c69948b89","target":"graph","created_at":"2026-07-05T09:06:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.07503/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Jailbreak vulnerabilities in Large Language Models (LLMs) refer to methods that extract malicious content from the model by carefully crafting prompts or suffixes, which has garnered significant attention from the research community. However, traditional attack methods, which primarily focus on the semantic level, are easily detected by the model. These methods overlook the difference in the model's alignment protection capabilities at different output stages. To address this issue, we propose an adaptive position pre-fill jailbreak attack approach for executing jailbreak attacks on LLMs. Our ","authors_text":"Feng Liu, Jie Wen, Jizhong Han, Lijia Lv, Songlin Hu, Weigang Zhang, Xuehai Tang","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-11T00:00:58Z","title":"AdaPPA: Adaptive Position Pre-Fill Jailbreak Attack Approach Targeting LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.07503","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:03c5d7e854f7442575ac09339a70bd4f597caa24360d2dc2458b475cbebb0767","target":"record","created_at":"2026-07-05T09:06:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9dfd443c2291aff360e45704bb0a26e12a6f49b32a38a3db4eb3ee72a4936f44","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-11T00:00:58Z","title_canon_sha256":"1d01db159c3e69c15531684a98df3403fdb72983e1618d7e0f93a3e6d47a7880"},"schema_version":"1.0","source":{"id":"2409.07503","kind":"arxiv","version":1}},"canonical_sha256":"09c88737c29bc8847955851a5326809e39bb98f75e85eb65e6d3b741074e850c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"09c88737c29bc8847955851a5326809e39bb98f75e85eb65e6d3b741074e850c","first_computed_at":"2026-07-05T09:06:10.773544Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:06:10.773544Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HxtXdonwTHImIykzBw+glP4Qwm+EkN9YBSYJyOJeHXlJtQ754C86yFLsC/+9MHWu/Ar/2AUiNjpqYKfrh7aBAA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:06:10.773970Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.07503","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:03c5d7e854f7442575ac09339a70bd4f597caa24360d2dc2458b475cbebb0767","sha256:c7443fc38f3f5450794900053d677e7f40da66ea1a014e989dab120c69948b89"],"state_sha256":"bc7871e25387232e84173262a71096467fba78f3003d8601deb36df2d996e54a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6C8LSlvuuXaPoDgVMfMBcBqle9E0WK/D5wAug7tc6ZxEfUwVWR7+vphVvweXdKQTtdptluubDI27v8QaRRmSAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T23:54:28.377980Z","bundle_sha256":"94844f08002b0f326b239aa02347a2c3de1fc6524392c89e8d4f1c0742b33bce"}}