{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:CFFTT3YCF4HJMPFHVY6J2PCMC3","short_pith_number":"pith:CFFTT3YC","canonical_record":{"source":{"id":"2407.21659","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-07-31T15:02:46Z","cross_cats_sorted":[],"title_canon_sha256":"99e12c99cc5355807a1fe8f76a8ec2cc60be997d0c2a4df0663b40ffedfb1342","abstract_canon_sha256":"0bbdc1771a7b11d625589c6532fee6ed130b524aaa9c63e4ea1f2202de11e518"},"schema_version":"1.0"},"canonical_sha256":"114b39ef022f0e963ca7ae3c9d3c4c16fbb14968fc2245bf1134d142b87f7d89","source":{"kind":"arxiv","id":"2407.21659","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.21659","created_at":"2026-07-05T09:21:47Z"},{"alias_kind":"arxiv_version","alias_value":"2407.21659v4","created_at":"2026-07-05T09:21:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.21659","created_at":"2026-07-05T09:21:47Z"},{"alias_kind":"pith_short_12","alias_value":"CFFTT3YCF4HJ","created_at":"2026-07-05T09:21:47Z"},{"alias_kind":"pith_short_16","alias_value":"CFFTT3YCF4HJMPFH","created_at":"2026-07-05T09:21:47Z"},{"alias_kind":"pith_short_8","alias_value":"CFFTT3YC","created_at":"2026-07-05T09:21:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:CFFTT3YCF4HJMPFHVY6J2PCMC3","target":"record","payload":{"canonical_record":{"source":{"id":"2407.21659","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-07-31T15:02:46Z","cross_cats_sorted":[],"title_canon_sha256":"99e12c99cc5355807a1fe8f76a8ec2cc60be997d0c2a4df0663b40ffedfb1342","abstract_canon_sha256":"0bbdc1771a7b11d625589c6532fee6ed130b524aaa9c63e4ea1f2202de11e518"},"schema_version":"1.0"},"canonical_sha256":"114b39ef022f0e963ca7ae3c9d3c4c16fbb14968fc2245bf1134d142b87f7d89","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:21:47.394420Z","signature_b64":"u6osMsJV4JnG9pt8WiTwWmQU0MhyTD1sDdlTPMkNb6A9fuU8/Adl22tXgAgL2UfEICFmaKpkFhwhKmFNOQljBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"114b39ef022f0e963ca7ae3c9d3c4c16fbb14968fc2245bf1134d142b87f7d89","last_reissued_at":"2026-07-05T09:21:47.393927Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:21:47.393927Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.21659","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:21:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aAGN467PB+ao8sk6IUiHlhJE9CJes+fNlyGj5RslkMa+K2zlu47NIy2LtPUUeZkNJeFELQmtZ+1RG+Hj6y2dCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T02:36:29.399420Z"},"content_sha256":"4d7e3848de8d74df545c674f652b6dc6f2c7beaf692866b63476efb4a8085977","schema_version":"1.0","event_id":"sha256:4d7e3848de8d74df545c674f652b6dc6f2c7beaf692866b63476efb4a8085977"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:CFFTT3YCF4HJMPFHVY6J2PCMC3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Cross-modality Information Check for Detecting Jailbreaking in Multimodal Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Wenjie Wang, Xiuyuan Qi, Yue Xu, Zhan Qin","submitted_at":"2024-07-31T15:02:46Z","abstract_excerpt":"Multimodal Large Language Models (MLLMs) extend the capacity of LLMs to understand multimodal information comprehensively, achieving remarkable performance in many vision-centric tasks. Despite that, recent studies have shown that these models are susceptible to jailbreak attacks, which refer to an exploitative technique where malicious users can break the safety alignment of the target model and generate misleading and harmful answers. This potential threat is caused by both the inherent vulnerabilities of LLM and the larger attack scope introduced by vision input. To enhance the security of "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.21659","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.21659/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:21:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E77Y75u5PrJsS8lMLkwoSugWqoONbo3wY5opyphTWON9lm1srfpNq4zKB0RmOEDGGwqs+QkavQAMVHFlp0gWAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T02:36:29.399947Z"},"content_sha256":"0c42aab9ba532b8b5255af59948c5d32c8c88f6013212d13c769ed1494d03e6e","schema_version":"1.0","event_id":"sha256:0c42aab9ba532b8b5255af59948c5d32c8c88f6013212d13c769ed1494d03e6e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CFFTT3YCF4HJMPFHVY6J2PCMC3/bundle.json","state_url":"https://pith.science/pith/CFFTT3YCF4HJMPFHVY6J2PCMC3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CFFTT3YCF4HJMPFHVY6J2PCMC3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T02:36:29Z","links":{"resolver":"https://pith.science/pith/CFFTT3YCF4HJMPFHVY6J2PCMC3","bundle":"https://pith.science/pith/CFFTT3YCF4HJMPFHVY6J2PCMC3/bundle.json","state":"https://pith.science/pith/CFFTT3YCF4HJMPFHVY6J2PCMC3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CFFTT3YCF4HJMPFHVY6J2PCMC3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:CFFTT3YCF4HJMPFHVY6J2PCMC3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0bbdc1771a7b11d625589c6532fee6ed130b524aaa9c63e4ea1f2202de11e518","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-07-31T15:02:46Z","title_canon_sha256":"99e12c99cc5355807a1fe8f76a8ec2cc60be997d0c2a4df0663b40ffedfb1342"},"schema_version":"1.0","source":{"id":"2407.21659","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.21659","created_at":"2026-07-05T09:21:47Z"},{"alias_kind":"arxiv_version","alias_value":"2407.21659v4","created_at":"2026-07-05T09:21:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.21659","created_at":"2026-07-05T09:21:47Z"},{"alias_kind":"pith_short_12","alias_value":"CFFTT3YCF4HJ","created_at":"2026-07-05T09:21:47Z"},{"alias_kind":"pith_short_16","alias_value":"CFFTT3YCF4HJMPFH","created_at":"2026-07-05T09:21:47Z"},{"alias_kind":"pith_short_8","alias_value":"CFFTT3YC","created_at":"2026-07-05T09:21:47Z"}],"graph_snapshots":[{"event_id":"sha256:0c42aab9ba532b8b5255af59948c5d32c8c88f6013212d13c769ed1494d03e6e","target":"graph","created_at":"2026-07-05T09:21:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.21659/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal Large Language Models (MLLMs) extend the capacity of LLMs to understand multimodal information comprehensively, achieving remarkable performance in many vision-centric tasks. Despite that, recent studies have shown that these models are susceptible to jailbreak attacks, which refer to an exploitative technique where malicious users can break the safety alignment of the target model and generate misleading and harmful answers. This potential threat is caused by both the inherent vulnerabilities of LLM and the larger attack scope introduced by vision input. To enhance the security of ","authors_text":"Wenjie Wang, Xiuyuan Qi, Yue Xu, Zhan Qin","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-07-31T15:02:46Z","title":"Cross-modality Information Check for Detecting Jailbreaking in Multimodal Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.21659","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4d7e3848de8d74df545c674f652b6dc6f2c7beaf692866b63476efb4a8085977","target":"record","created_at":"2026-07-05T09:21:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0bbdc1771a7b11d625589c6532fee6ed130b524aaa9c63e4ea1f2202de11e518","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-07-31T15:02:46Z","title_canon_sha256":"99e12c99cc5355807a1fe8f76a8ec2cc60be997d0c2a4df0663b40ffedfb1342"},"schema_version":"1.0","source":{"id":"2407.21659","kind":"arxiv","version":4}},"canonical_sha256":"114b39ef022f0e963ca7ae3c9d3c4c16fbb14968fc2245bf1134d142b87f7d89","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"114b39ef022f0e963ca7ae3c9d3c4c16fbb14968fc2245bf1134d142b87f7d89","first_computed_at":"2026-07-05T09:21:47.393927Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:21:47.393927Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"u6osMsJV4JnG9pt8WiTwWmQU0MhyTD1sDdlTPMkNb6A9fuU8/Adl22tXgAgL2UfEICFmaKpkFhwhKmFNOQljBg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:21:47.394420Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.21659","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4d7e3848de8d74df545c674f652b6dc6f2c7beaf692866b63476efb4a8085977","sha256:0c42aab9ba532b8b5255af59948c5d32c8c88f6013212d13c769ed1494d03e6e"],"state_sha256":"a7198ba89ebd4f4aa669ab21f9f04ce4c6a35bc29259656b15f7dbe29e5f809d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"r0/xMCKh57jiD/YKb88S4lH6r0ASnKKouXMsVcAPLxovSDJ7v0LQB4QRPp2rGHPu5z4RJiX7I5iPy/2FWE+ZCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T02:36:29.403542Z","bundle_sha256":"444330b69462a9a488f940cf9b1c911cb92b60deff81995fde7f696d45a2fc9c"}}