{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:BZ5FEEZV5IV56EM7BN7ZBYJCBR","short_pith_number":"pith:BZ5FEEZV","canonical_record":{"source":{"id":"2504.03770","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-03T05:00:28Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c9f3255bfd690ab86f68d781f63da1dda00f444f6555a4862c059ee3da842d5f","abstract_canon_sha256":"06cc035fcdefdfd7b6826491f960a4245c132aba3dd2bbfc50f59827adc6c4c3"},"schema_version":"1.0"},"canonical_sha256":"0e7a521335ea2bdf119f0b7f90e1220c45524d51ee955fc56f3f2670f79dcc43","source":{"kind":"arxiv","id":"2504.03770","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.03770","created_at":"2026-07-05T11:38:28Z"},{"alias_kind":"arxiv_version","alias_value":"2504.03770v3","created_at":"2026-07-05T11:38:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.03770","created_at":"2026-07-05T11:38:28Z"},{"alias_kind":"pith_short_12","alias_value":"BZ5FEEZV5IV5","created_at":"2026-07-05T11:38:28Z"},{"alias_kind":"pith_short_16","alias_value":"BZ5FEEZV5IV56EM7","created_at":"2026-07-05T11:38:28Z"},{"alias_kind":"pith_short_8","alias_value":"BZ5FEEZV","created_at":"2026-07-05T11:38:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:BZ5FEEZV5IV56EM7BN7ZBYJCBR","target":"record","payload":{"canonical_record":{"source":{"id":"2504.03770","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-03T05:00:28Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c9f3255bfd690ab86f68d781f63da1dda00f444f6555a4862c059ee3da842d5f","abstract_canon_sha256":"06cc035fcdefdfd7b6826491f960a4245c132aba3dd2bbfc50f59827adc6c4c3"},"schema_version":"1.0"},"canonical_sha256":"0e7a521335ea2bdf119f0b7f90e1220c45524d51ee955fc56f3f2670f79dcc43","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:38:28.662697Z","signature_b64":"FWEDcIUKWp6EVx+E0A02N4H9tL8V1vDiy+vnmVcfn6WSESUB8KYdQAmfevanrL/Otlixwg1Ohiqk2wJrfCAuCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0e7a521335ea2bdf119f0b7f90e1220c45524d51ee955fc56f3f2670f79dcc43","last_reissued_at":"2026-07-05T11:38:28.662103Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:38:28.662103Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.03770","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:38:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zjNOwAgKpty6lgxQOS9fun5kfgJY6IHJ4aMXH2dywp0XIOOWEoLaeynRyo0pjEgFG9n1dsVR3dshZRu9LQSuDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T22:52:02.361264Z"},"content_sha256":"753194e93974ec209282740c7321a99f98cc08b9aeeb486c6f0fc44e26e8f624","schema_version":"1.0","event_id":"sha256:753194e93974ec209282740c7321a99f98cc08b9aeeb486c6f0fc44e26e8f624"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:BZ5FEEZV5IV56EM7BN7ZBYJCBR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"JailDAM: Jailbreak Detection with Adaptive Memory for Vision-Language Model","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Chaowei Xiao, Li Li, Shenzhe Zhu, Yi Nian, Yuehan Qin, Yue Zhao, Ziyi Wang","submitted_at":"2025-04-03T05:00:28Z","abstract_excerpt":"Multimodal large language models (MLLMs) excel in vision-language tasks but also pose significant risks of generating harmful content, particularly through jailbreak attacks. Jailbreak attacks refer to intentional manipulations that bypass safety mechanisms in models, leading to the generation of inappropriate or unsafe content. Detecting such attacks is critical to ensuring the responsible deployment of MLLMs. Existing jailbreak detection methods face three primary challenges: (1) Many rely on model hidden states or gradients, limiting their applicability to white-box models, where the intern"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.03770","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.03770/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:38:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oQ9VhQiTTX8cgOGreo5jlx30A3HJCb3Udm1mP7s7gdfeuiW2QIG6po4cNCIhtEHCjmKstaJwVnaWGHJzuHXDCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T22:52:02.361667Z"},"content_sha256":"e623d736fdb125b368c37c1aff7029124a810aae998809fe512f7f0a9184a663","schema_version":"1.0","event_id":"sha256:e623d736fdb125b368c37c1aff7029124a810aae998809fe512f7f0a9184a663"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BZ5FEEZV5IV56EM7BN7ZBYJCBR/bundle.json","state_url":"https://pith.science/pith/BZ5FEEZV5IV56EM7BN7ZBYJCBR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BZ5FEEZV5IV56EM7BN7ZBYJCBR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T22:52:02Z","links":{"resolver":"https://pith.science/pith/BZ5FEEZV5IV56EM7BN7ZBYJCBR","bundle":"https://pith.science/pith/BZ5FEEZV5IV56EM7BN7ZBYJCBR/bundle.json","state":"https://pith.science/pith/BZ5FEEZV5IV56EM7BN7ZBYJCBR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BZ5FEEZV5IV56EM7BN7ZBYJCBR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:BZ5FEEZV5IV56EM7BN7ZBYJCBR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"06cc035fcdefdfd7b6826491f960a4245c132aba3dd2bbfc50f59827adc6c4c3","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-03T05:00:28Z","title_canon_sha256":"c9f3255bfd690ab86f68d781f63da1dda00f444f6555a4862c059ee3da842d5f"},"schema_version":"1.0","source":{"id":"2504.03770","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.03770","created_at":"2026-07-05T11:38:28Z"},{"alias_kind":"arxiv_version","alias_value":"2504.03770v3","created_at":"2026-07-05T11:38:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.03770","created_at":"2026-07-05T11:38:28Z"},{"alias_kind":"pith_short_12","alias_value":"BZ5FEEZV5IV5","created_at":"2026-07-05T11:38:28Z"},{"alias_kind":"pith_short_16","alias_value":"BZ5FEEZV5IV56EM7","created_at":"2026-07-05T11:38:28Z"},{"alias_kind":"pith_short_8","alias_value":"BZ5FEEZV","created_at":"2026-07-05T11:38:28Z"}],"graph_snapshots":[{"event_id":"sha256:e623d736fdb125b368c37c1aff7029124a810aae998809fe512f7f0a9184a663","target":"graph","created_at":"2026-07-05T11:38:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.03770/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal large language models (MLLMs) excel in vision-language tasks but also pose significant risks of generating harmful content, particularly through jailbreak attacks. Jailbreak attacks refer to intentional manipulations that bypass safety mechanisms in models, leading to the generation of inappropriate or unsafe content. Detecting such attacks is critical to ensuring the responsible deployment of MLLMs. Existing jailbreak detection methods face three primary challenges: (1) Many rely on model hidden states or gradients, limiting their applicability to white-box models, where the intern","authors_text":"Chaowei Xiao, Li Li, Shenzhe Zhu, Yi Nian, Yuehan Qin, Yue Zhao, Ziyi Wang","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-03T05:00:28Z","title":"JailDAM: Jailbreak Detection with Adaptive Memory for Vision-Language Model"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.03770","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:753194e93974ec209282740c7321a99f98cc08b9aeeb486c6f0fc44e26e8f624","target":"record","created_at":"2026-07-05T11:38:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"06cc035fcdefdfd7b6826491f960a4245c132aba3dd2bbfc50f59827adc6c4c3","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-03T05:00:28Z","title_canon_sha256":"c9f3255bfd690ab86f68d781f63da1dda00f444f6555a4862c059ee3da842d5f"},"schema_version":"1.0","source":{"id":"2504.03770","kind":"arxiv","version":3}},"canonical_sha256":"0e7a521335ea2bdf119f0b7f90e1220c45524d51ee955fc56f3f2670f79dcc43","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0e7a521335ea2bdf119f0b7f90e1220c45524d51ee955fc56f3f2670f79dcc43","first_computed_at":"2026-07-05T11:38:28.662103Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:38:28.662103Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FWEDcIUKWp6EVx+E0A02N4H9tL8V1vDiy+vnmVcfn6WSESUB8KYdQAmfevanrL/Otlixwg1Ohiqk2wJrfCAuCw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:38:28.662697Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.03770","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:753194e93974ec209282740c7321a99f98cc08b9aeeb486c6f0fc44e26e8f624","sha256:e623d736fdb125b368c37c1aff7029124a810aae998809fe512f7f0a9184a663"],"state_sha256":"aa2990a39c8afb43af0ba0b072c5a278dc1d8b7382b0a7e027e6b7f25d6d9188"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V+/UeUqYv9qf6ZtO8rQNmKRiDwxwToDNbsIKIxpL7ROqJhK9NkIDtTIJQMVvQ172wh4TgKbxdDp5d9RuUt6YBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T22:52:02.364240Z","bundle_sha256":"57f01ce9dfa59ff2a3b7d5f1e0a59c489ad8feb3dc85fcdacde57acc344b93a4"}}