{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:C4GJL74WECPP5QT6LQAAZBHPQ3","short_pith_number":"pith:C4GJL74W","canonical_record":{"source":{"id":"2404.02532","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-04-03T07:43:11Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"249aca43c2d9ceddd653c62ec93d79b9fe3b066706bf6384b3c35cce53c4ee1a","abstract_canon_sha256":"d062cf16f18240e988a0882716ecb4da13393b91c3f64bd9339bd6d00ee17bf2"},"schema_version":"1.0"},"canonical_sha256":"170c95ff96209efec27e5c000c84ef86eff9338aa940d7caea28d2d060ec10fd","source":{"kind":"arxiv","id":"2404.02532","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.02532","created_at":"2026-07-05T08:03:57Z"},{"alias_kind":"arxiv_version","alias_value":"2404.02532v1","created_at":"2026-07-05T08:03:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.02532","created_at":"2026-07-05T08:03:57Z"},{"alias_kind":"pith_short_12","alias_value":"C4GJL74WECPP","created_at":"2026-07-05T08:03:57Z"},{"alias_kind":"pith_short_16","alias_value":"C4GJL74WECPP5QT6","created_at":"2026-07-05T08:03:57Z"},{"alias_kind":"pith_short_8","alias_value":"C4GJL74W","created_at":"2026-07-05T08:03:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:C4GJL74WECPP5QT6LQAAZBHPQ3","target":"record","payload":{"canonical_record":{"source":{"id":"2404.02532","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-04-03T07:43:11Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"249aca43c2d9ceddd653c62ec93d79b9fe3b066706bf6384b3c35cce53c4ee1a","abstract_canon_sha256":"d062cf16f18240e988a0882716ecb4da13393b91c3f64bd9339bd6d00ee17bf2"},"schema_version":"1.0"},"canonical_sha256":"170c95ff96209efec27e5c000c84ef86eff9338aa940d7caea28d2d060ec10fd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:03:57.881505Z","signature_b64":"X80lJPeHdZHR6JpvXJTWjhNh/slvbYObGqhAyPsYFvO46siVbWwFjjsfxcNsGZMi5txSVWDtmHs4L104TpDOCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"170c95ff96209efec27e5c000c84ef86eff9338aa940d7caea28d2d060ec10fd","last_reissued_at":"2026-07-05T08:03:57.881030Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:03:57.881030Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.02532","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:03:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MGBS3OQXol2zH3FAwuq9quPkte7zkuc3YdqVJayy0kNo16/JspUw154ok657bkVICof833al534jp78MsNaNCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:06:15.519146Z"},"content_sha256":"a2d4e75d26c2e14f82c444354b7982c153abb0fdded69b321f03fcdc355b8880","schema_version":"1.0","event_id":"sha256:a2d4e75d26c2e14f82c444354b7982c153abb0fdded69b321f03fcdc355b8880"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:C4GJL74WECPP5QT6LQAAZBHPQ3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Learn to Disguise: Avoid Refusal Responses in LLM's Defense via a Multi-agent Attacker-Disguiser Game","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.AI","authors_text":"Dongsheng Li, Feng Liu, Hongyan Wu, Qianqiao Xu, Yiping Song, Zhen Huang, Zhiliang Tian","submitted_at":"2024-04-03T07:43:11Z","abstract_excerpt":"With the enhanced performance of large models on natural language processing tasks, potential moral and ethical issues of large models arise. There exist malicious attackers who induce large models to jailbreak and generate information containing illegal, privacy-invasive information through techniques such as prompt engineering. As a result, large models counter malicious attackers' attacks using techniques such as safety alignment. However, the strong defense mechanism of the large model through rejection replies is easily identified by attackers and used to strengthen attackers' capabilitie"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.02532","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.02532/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:03:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GnpZc4zCwQ1bgnVkO0NW93PFBG+1qoybngY1l3RY6Snn1jiueLtmQGHSDXWaz9WlprHr/dnKRtoi06Ee2zn3BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:06:15.519469Z"},"content_sha256":"fe08b7737d4d6c7653b2f55d1b3a182b9c3de7245f5c9bb6a56732bd8b2187e7","schema_version":"1.0","event_id":"sha256:fe08b7737d4d6c7653b2f55d1b3a182b9c3de7245f5c9bb6a56732bd8b2187e7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/C4GJL74WECPP5QT6LQAAZBHPQ3/bundle.json","state_url":"https://pith.science/pith/C4GJL74WECPP5QT6LQAAZBHPQ3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/C4GJL74WECPP5QT6LQAAZBHPQ3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T04:06:15Z","links":{"resolver":"https://pith.science/pith/C4GJL74WECPP5QT6LQAAZBHPQ3","bundle":"https://pith.science/pith/C4GJL74WECPP5QT6LQAAZBHPQ3/bundle.json","state":"https://pith.science/pith/C4GJL74WECPP5QT6LQAAZBHPQ3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/C4GJL74WECPP5QT6LQAAZBHPQ3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:C4GJL74WECPP5QT6LQAAZBHPQ3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d062cf16f18240e988a0882716ecb4da13393b91c3f64bd9339bd6d00ee17bf2","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-04-03T07:43:11Z","title_canon_sha256":"249aca43c2d9ceddd653c62ec93d79b9fe3b066706bf6384b3c35cce53c4ee1a"},"schema_version":"1.0","source":{"id":"2404.02532","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.02532","created_at":"2026-07-05T08:03:57Z"},{"alias_kind":"arxiv_version","alias_value":"2404.02532v1","created_at":"2026-07-05T08:03:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.02532","created_at":"2026-07-05T08:03:57Z"},{"alias_kind":"pith_short_12","alias_value":"C4GJL74WECPP","created_at":"2026-07-05T08:03:57Z"},{"alias_kind":"pith_short_16","alias_value":"C4GJL74WECPP5QT6","created_at":"2026-07-05T08:03:57Z"},{"alias_kind":"pith_short_8","alias_value":"C4GJL74W","created_at":"2026-07-05T08:03:57Z"}],"graph_snapshots":[{"event_id":"sha256:fe08b7737d4d6c7653b2f55d1b3a182b9c3de7245f5c9bb6a56732bd8b2187e7","target":"graph","created_at":"2026-07-05T08:03:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.02532/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the enhanced performance of large models on natural language processing tasks, potential moral and ethical issues of large models arise. There exist malicious attackers who induce large models to jailbreak and generate information containing illegal, privacy-invasive information through techniques such as prompt engineering. As a result, large models counter malicious attackers' attacks using techniques such as safety alignment. However, the strong defense mechanism of the large model through rejection replies is easily identified by attackers and used to strengthen attackers' capabilitie","authors_text":"Dongsheng Li, Feng Liu, Hongyan Wu, Qianqiao Xu, Yiping Song, Zhen Huang, Zhiliang Tian","cross_cats":["cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-04-03T07:43:11Z","title":"Learn to Disguise: Avoid Refusal Responses in LLM's Defense via a Multi-agent Attacker-Disguiser Game"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.02532","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a2d4e75d26c2e14f82c444354b7982c153abb0fdded69b321f03fcdc355b8880","target":"record","created_at":"2026-07-05T08:03:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d062cf16f18240e988a0882716ecb4da13393b91c3f64bd9339bd6d00ee17bf2","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-04-03T07:43:11Z","title_canon_sha256":"249aca43c2d9ceddd653c62ec93d79b9fe3b066706bf6384b3c35cce53c4ee1a"},"schema_version":"1.0","source":{"id":"2404.02532","kind":"arxiv","version":1}},"canonical_sha256":"170c95ff96209efec27e5c000c84ef86eff9338aa940d7caea28d2d060ec10fd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"170c95ff96209efec27e5c000c84ef86eff9338aa940d7caea28d2d060ec10fd","first_computed_at":"2026-07-05T08:03:57.881030Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:03:57.881030Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"X80lJPeHdZHR6JpvXJTWjhNh/slvbYObGqhAyPsYFvO46siVbWwFjjsfxcNsGZMi5txSVWDtmHs4L104TpDOCg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:03:57.881505Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.02532","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a2d4e75d26c2e14f82c444354b7982c153abb0fdded69b321f03fcdc355b8880","sha256:fe08b7737d4d6c7653b2f55d1b3a182b9c3de7245f5c9bb6a56732bd8b2187e7"],"state_sha256":"2c3ea95a90e23ba4e7d206b43a55ef834602e9f4bb35bd785f155e7a03fc5ea9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0VR1/HM6t0hParq2p4BgaWivCTlSay8vO+oL5QlMrkC6P2vN2nZrBNDOz50h/diXpp7EUfeydHJMUq+AYzh8Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T04:06:15.522705Z","bundle_sha256":"62cba2a7480d93a2faa2c0910404f29bae1983c8b5eda2033c0eeb508dc9e706"}}