{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:COKMVHPMSEZTJ4ML46HFZ2WLMV","short_pith_number":"pith:COKMVHPM","canonical_record":{"source":{"id":"2406.18725","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-26T19:48:48Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"2b7b10a47a0101994807bf1e11310b828b3cf8a9e89ab6a164efd4dd7be40f81","abstract_canon_sha256":"03a4e57de6330dcf0ae17f4c6eb2e29279a0c12949ccf01e1465b3820e52bed4"},"schema_version":"1.0"},"canonical_sha256":"1394ca9dec913334f18be78e5ceacb654a21473f0d8916e7e381c6a1d9eebae6","source":{"kind":"arxiv","id":"2406.18725","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.18725","created_at":"2026-07-05T09:15:12Z"},{"alias_kind":"arxiv_version","alias_value":"2406.18725v2","created_at":"2026-07-05T09:15:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.18725","created_at":"2026-07-05T09:15:12Z"},{"alias_kind":"pith_short_12","alias_value":"COKMVHPMSEZT","created_at":"2026-07-05T09:15:12Z"},{"alias_kind":"pith_short_16","alias_value":"COKMVHPMSEZTJ4ML","created_at":"2026-07-05T09:15:12Z"},{"alias_kind":"pith_short_8","alias_value":"COKMVHPM","created_at":"2026-07-05T09:15:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:COKMVHPMSEZTJ4ML46HFZ2WLMV","target":"record","payload":{"canonical_record":{"source":{"id":"2406.18725","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-26T19:48:48Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"2b7b10a47a0101994807bf1e11310b828b3cf8a9e89ab6a164efd4dd7be40f81","abstract_canon_sha256":"03a4e57de6330dcf0ae17f4c6eb2e29279a0c12949ccf01e1465b3820e52bed4"},"schema_version":"1.0"},"canonical_sha256":"1394ca9dec913334f18be78e5ceacb654a21473f0d8916e7e381c6a1d9eebae6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:15:12.549752Z","signature_b64":"AzYT3A8OlWAdIG5HgnLqFlValOZ+APPWRXxCOGRGGArNh2LIlZkjnE31zMtewqjTL/4rXVTEMm3ZIKw4FDICBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1394ca9dec913334f18be78e5ceacb654a21473f0d8916e7e381c6a1d9eebae6","last_reissued_at":"2026-07-05T09:15:12.549299Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:15:12.549299Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.18725","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:15:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qJTFRyKew528NOJnvqJQKuKsf1c0WOOX5D8KYBG7JUP1t5DUc0jJjDmvH8bkylkByly1Aqe+cj72fed2vXGoCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T15:02:54.526892Z"},"content_sha256":"f399c534c80f9480df7c74fffa13aedf7921466c4737d699525f598fca06d0bf","schema_version":"1.0","event_id":"sha256:f399c534c80f9480df7c74fffa13aedf7921466c4737d699525f598fca06d0bf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:COKMVHPMSEZTJ4ML46HFZ2WLMV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Jailbreaking LLMs with Arabic Transliteration and Arabizi","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.LG","authors_text":"Mansour Al Ghanim, Mengxin Zheng, Qian Lou, Saleh Almohaimeed, Yan Solihin","submitted_at":"2024-06-26T19:48:48Z","abstract_excerpt":"This study identifies the potential vulnerabilities of Large Language Models (LLMs) to 'jailbreak' attacks, specifically focusing on the Arabic language and its various forms. While most research has concentrated on English-based prompt manipulation, our investigation broadens the scope to investigate the Arabic language. We initially tested the AdvBench benchmark in Standardized Arabic, finding that even with prompt manipulation techniques like prefix injection, it was insufficient to provoke LLMs into generating unsafe content. However, when using Arabic transliteration and chatspeak (or ara"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.18725","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.18725/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:15:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xzOSDdQtokFyOqHUZvR1Q+39Biy++u1Xehx9NOlInxqYZw0Ir6ayPgwv/4wYJaIX/BR8pgzaOOrg8dSmzQYdAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T15:02:54.527488Z"},"content_sha256":"259a4b0cd2deea686ab73488df37d76ae001f6e97bd34e69697a34856fdd78e6","schema_version":"1.0","event_id":"sha256:259a4b0cd2deea686ab73488df37d76ae001f6e97bd34e69697a34856fdd78e6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/COKMVHPMSEZTJ4ML46HFZ2WLMV/bundle.json","state_url":"https://pith.science/pith/COKMVHPMSEZTJ4ML46HFZ2WLMV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/COKMVHPMSEZTJ4ML46HFZ2WLMV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T15:02:54Z","links":{"resolver":"https://pith.science/pith/COKMVHPMSEZTJ4ML46HFZ2WLMV","bundle":"https://pith.science/pith/COKMVHPMSEZTJ4ML46HFZ2WLMV/bundle.json","state":"https://pith.science/pith/COKMVHPMSEZTJ4ML46HFZ2WLMV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/COKMVHPMSEZTJ4ML46HFZ2WLMV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:COKMVHPMSEZTJ4ML46HFZ2WLMV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"03a4e57de6330dcf0ae17f4c6eb2e29279a0c12949ccf01e1465b3820e52bed4","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-26T19:48:48Z","title_canon_sha256":"2b7b10a47a0101994807bf1e11310b828b3cf8a9e89ab6a164efd4dd7be40f81"},"schema_version":"1.0","source":{"id":"2406.18725","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.18725","created_at":"2026-07-05T09:15:12Z"},{"alias_kind":"arxiv_version","alias_value":"2406.18725v2","created_at":"2026-07-05T09:15:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.18725","created_at":"2026-07-05T09:15:12Z"},{"alias_kind":"pith_short_12","alias_value":"COKMVHPMSEZT","created_at":"2026-07-05T09:15:12Z"},{"alias_kind":"pith_short_16","alias_value":"COKMVHPMSEZTJ4ML","created_at":"2026-07-05T09:15:12Z"},{"alias_kind":"pith_short_8","alias_value":"COKMVHPM","created_at":"2026-07-05T09:15:12Z"}],"graph_snapshots":[{"event_id":"sha256:259a4b0cd2deea686ab73488df37d76ae001f6e97bd34e69697a34856fdd78e6","target":"graph","created_at":"2026-07-05T09:15:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.18725/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This study identifies the potential vulnerabilities of Large Language Models (LLMs) to 'jailbreak' attacks, specifically focusing on the Arabic language and its various forms. While most research has concentrated on English-based prompt manipulation, our investigation broadens the scope to investigate the Arabic language. We initially tested the AdvBench benchmark in Standardized Arabic, finding that even with prompt manipulation techniques like prefix injection, it was insufficient to provoke LLMs into generating unsafe content. However, when using Arabic transliteration and chatspeak (or ara","authors_text":"Mansour Al Ghanim, Mengxin Zheng, Qian Lou, Saleh Almohaimeed, Yan Solihin","cross_cats":["cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-26T19:48:48Z","title":"Jailbreaking LLMs with Arabic Transliteration and Arabizi"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.18725","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f399c534c80f9480df7c74fffa13aedf7921466c4737d699525f598fca06d0bf","target":"record","created_at":"2026-07-05T09:15:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"03a4e57de6330dcf0ae17f4c6eb2e29279a0c12949ccf01e1465b3820e52bed4","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-26T19:48:48Z","title_canon_sha256":"2b7b10a47a0101994807bf1e11310b828b3cf8a9e89ab6a164efd4dd7be40f81"},"schema_version":"1.0","source":{"id":"2406.18725","kind":"arxiv","version":2}},"canonical_sha256":"1394ca9dec913334f18be78e5ceacb654a21473f0d8916e7e381c6a1d9eebae6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1394ca9dec913334f18be78e5ceacb654a21473f0d8916e7e381c6a1d9eebae6","first_computed_at":"2026-07-05T09:15:12.549299Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:15:12.549299Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"AzYT3A8OlWAdIG5HgnLqFlValOZ+APPWRXxCOGRGGArNh2LIlZkjnE31zMtewqjTL/4rXVTEMm3ZIKw4FDICBw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:15:12.549752Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.18725","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f399c534c80f9480df7c74fffa13aedf7921466c4737d699525f598fca06d0bf","sha256:259a4b0cd2deea686ab73488df37d76ae001f6e97bd34e69697a34856fdd78e6"],"state_sha256":"b5744eacd0f11a4151f52a47d78f6903e6ac17aff8ccd592e4467cc0864d121c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"R89ZbCVp+aH0jFOPFAKXbkp2DBgajo5BXuljbFZQe2HOykWLh9OJ242eJ3FRkHNVBz0hL/+A6TRfgPXSU7aYAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T15:02:54.532224Z","bundle_sha256":"756b59f682f9ea6c87df93c02832c7ec75e32706c4dc6485ad3a67866ca7aead"}}