{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:CLN7SEMY3I54DDDBLIV3BS5IKB","short_pith_number":"pith:CLN7SEMY","canonical_record":{"source":{"id":"2503.08195","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-03-11T09:00:45Z","cross_cats_sorted":[],"title_canon_sha256":"44387cf48df0363cda0f5db280e844225014def134d02f6e27dac6800964d018","abstract_canon_sha256":"5c48c62eddd0bd85d1590f1321f3c775de7693abe88be79e59f84c778f9b3495"},"schema_version":"1.0"},"canonical_sha256":"12dbf91198da3bc18c615a2bb0cba85062461425a703df1fcb5bb52702d96f16","source":{"kind":"arxiv","id":"2503.08195","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.08195","created_at":"2026-07-05T10:28:53Z"},{"alias_kind":"arxiv_version","alias_value":"2503.08195v1","created_at":"2026-07-05T10:28:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.08195","created_at":"2026-07-05T10:28:53Z"},{"alias_kind":"pith_short_12","alias_value":"CLN7SEMY3I54","created_at":"2026-07-05T10:28:53Z"},{"alias_kind":"pith_short_16","alias_value":"CLN7SEMY3I54DDDB","created_at":"2026-07-05T10:28:53Z"},{"alias_kind":"pith_short_8","alias_value":"CLN7SEMY","created_at":"2026-07-05T10:28:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:CLN7SEMY3I54DDDBLIV3BS5IKB","target":"record","payload":{"canonical_record":{"source":{"id":"2503.08195","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-03-11T09:00:45Z","cross_cats_sorted":[],"title_canon_sha256":"44387cf48df0363cda0f5db280e844225014def134d02f6e27dac6800964d018","abstract_canon_sha256":"5c48c62eddd0bd85d1590f1321f3c775de7693abe88be79e59f84c778f9b3495"},"schema_version":"1.0"},"canonical_sha256":"12dbf91198da3bc18c615a2bb0cba85062461425a703df1fcb5bb52702d96f16","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:28:53.551935Z","signature_b64":"A5svFutzApJNpPOyYkNFo8brjyScyA9RUTURoHd5tge82LJCuE+wXL1SPexXRruAwmoa/tA9Hbt0QiIUW+73DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"12dbf91198da3bc18c615a2bb0cba85062461425a703df1fcb5bb52702d96f16","last_reissued_at":"2026-07-05T10:28:53.551090Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:28:53.551090Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.08195","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:28:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UX3/e03GREv2D31w6et1aHxT2vq4qJU3YT+BQxrblX7WjjrxAiIaIoti69LppwVdazW1sh1kqO4SEjrx0UoyCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T22:08:58.859749Z"},"content_sha256":"8ce11c3ecbb8f0ce4db9a2406606c6bf3d9f41a8d833186d9c0dad440c2f2b74","schema_version":"1.0","event_id":"sha256:8ce11c3ecbb8f0ce4db9a2406606c6bf3d9f41a8d833186d9c0dad440c2f2b74"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:CLN7SEMY3I54DDDBLIV3BS5IKB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Dialogue Injection Attack: Jailbreaking LLMs through Context Manipulation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Chengkun Wei, Fan Zhang, Wendao Yao, Wenlong Meng, Wenzhi Chen, Yuwei Li, Zhenyuan Guo","submitted_at":"2025-03-11T09:00:45Z","abstract_excerpt":"Large language models (LLMs) have demonstrated significant utility in a wide range of applications; however, their deployment is plagued by security vulnerabilities, notably jailbreak attacks. These attacks manipulate LLMs to generate harmful or unethical content by crafting adversarial prompts. While much of the current research on jailbreak attacks has focused on single-turn interactions, it has largely overlooked the impact of historical dialogues on model behavior. In this paper, we introduce a novel jailbreak paradigm, Dialogue Injection Attack (DIA), which leverages the dialogue history "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.08195","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.08195/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:28:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YSoJRcAI29xrP75wsck1azQeYhY2lwb5cwdtjXBl+UKe0h6IGWZ4XemPI4y1QmLweCGa5BQonyh0gHdGpYS7Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T22:08:58.860258Z"},"content_sha256":"27b18d9d5f1c9ebbf60e3a93e3b9be2a2f073d39e42a3cd67ad8ebe1e09b914c","schema_version":"1.0","event_id":"sha256:27b18d9d5f1c9ebbf60e3a93e3b9be2a2f073d39e42a3cd67ad8ebe1e09b914c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CLN7SEMY3I54DDDBLIV3BS5IKB/bundle.json","state_url":"https://pith.science/pith/CLN7SEMY3I54DDDBLIV3BS5IKB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CLN7SEMY3I54DDDBLIV3BS5IKB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T22:08:58Z","links":{"resolver":"https://pith.science/pith/CLN7SEMY3I54DDDBLIV3BS5IKB","bundle":"https://pith.science/pith/CLN7SEMY3I54DDDBLIV3BS5IKB/bundle.json","state":"https://pith.science/pith/CLN7SEMY3I54DDDBLIV3BS5IKB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CLN7SEMY3I54DDDBLIV3BS5IKB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:CLN7SEMY3I54DDDBLIV3BS5IKB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5c48c62eddd0bd85d1590f1321f3c775de7693abe88be79e59f84c778f9b3495","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-03-11T09:00:45Z","title_canon_sha256":"44387cf48df0363cda0f5db280e844225014def134d02f6e27dac6800964d018"},"schema_version":"1.0","source":{"id":"2503.08195","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.08195","created_at":"2026-07-05T10:28:53Z"},{"alias_kind":"arxiv_version","alias_value":"2503.08195v1","created_at":"2026-07-05T10:28:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.08195","created_at":"2026-07-05T10:28:53Z"},{"alias_kind":"pith_short_12","alias_value":"CLN7SEMY3I54","created_at":"2026-07-05T10:28:53Z"},{"alias_kind":"pith_short_16","alias_value":"CLN7SEMY3I54DDDB","created_at":"2026-07-05T10:28:53Z"},{"alias_kind":"pith_short_8","alias_value":"CLN7SEMY","created_at":"2026-07-05T10:28:53Z"}],"graph_snapshots":[{"event_id":"sha256:27b18d9d5f1c9ebbf60e3a93e3b9be2a2f073d39e42a3cd67ad8ebe1e09b914c","target":"graph","created_at":"2026-07-05T10:28:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.08195/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have demonstrated significant utility in a wide range of applications; however, their deployment is plagued by security vulnerabilities, notably jailbreak attacks. These attacks manipulate LLMs to generate harmful or unethical content by crafting adversarial prompts. While much of the current research on jailbreak attacks has focused on single-turn interactions, it has largely overlooked the impact of historical dialogues on model behavior. In this paper, we introduce a novel jailbreak paradigm, Dialogue Injection Attack (DIA), which leverages the dialogue history ","authors_text":"Chengkun Wei, Fan Zhang, Wendao Yao, Wenlong Meng, Wenzhi Chen, Yuwei Li, Zhenyuan Guo","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-03-11T09:00:45Z","title":"Dialogue Injection Attack: Jailbreaking LLMs through Context Manipulation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.08195","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8ce11c3ecbb8f0ce4db9a2406606c6bf3d9f41a8d833186d9c0dad440c2f2b74","target":"record","created_at":"2026-07-05T10:28:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5c48c62eddd0bd85d1590f1321f3c775de7693abe88be79e59f84c778f9b3495","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-03-11T09:00:45Z","title_canon_sha256":"44387cf48df0363cda0f5db280e844225014def134d02f6e27dac6800964d018"},"schema_version":"1.0","source":{"id":"2503.08195","kind":"arxiv","version":1}},"canonical_sha256":"12dbf91198da3bc18c615a2bb0cba85062461425a703df1fcb5bb52702d96f16","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"12dbf91198da3bc18c615a2bb0cba85062461425a703df1fcb5bb52702d96f16","first_computed_at":"2026-07-05T10:28:53.551090Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:28:53.551090Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"A5svFutzApJNpPOyYkNFo8brjyScyA9RUTURoHd5tge82LJCuE+wXL1SPexXRruAwmoa/tA9Hbt0QiIUW+73DA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:28:53.551935Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.08195","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8ce11c3ecbb8f0ce4db9a2406606c6bf3d9f41a8d833186d9c0dad440c2f2b74","sha256:27b18d9d5f1c9ebbf60e3a93e3b9be2a2f073d39e42a3cd67ad8ebe1e09b914c"],"state_sha256":"7f04fce36b032c9560f36532d191843de5be7e35244eeba8a0cdee09c74148c1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ful2EEiqc+0JcKTgsx3pmaUhKXxPiJG4zgu/juQFuDOSYzPzlYmTEf9qayZITrl9rZvoSIcLC53VOh5z7tj5AQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T22:08:58.865150Z","bundle_sha256":"f15d8f1d384a8aaea4647a0bb885696bc2cd1ac35768945d7630369f9d94fd5c"}}