{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:COMFP36IFSUSM3NFNXGY7AFALU","short_pith_number":"pith:COMFP36I","canonical_record":{"source":{"id":"2507.13761","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-07-18T09:13:05Z","cross_cats_sorted":[],"title_canon_sha256":"c7c83e70ff5dee27106e4187f1174e069a3f8fe9ba2d14eb61e3a09449ef5784","abstract_canon_sha256":"d1b91f6776b87fb866c04cc80322c7e248a387121c53feb7e18c74db2f7fdc44"},"schema_version":"1.0"},"canonical_sha256":"139857efc82ca9266da56dcd8f80a05d275f66ff777424566caf369b8b4d4811","source":{"kind":"arxiv","id":"2507.13761","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.13761","created_at":"2026-07-05T11:39:22Z"},{"alias_kind":"arxiv_version","alias_value":"2507.13761v1","created_at":"2026-07-05T11:39:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.13761","created_at":"2026-07-05T11:39:22Z"},{"alias_kind":"pith_short_12","alias_value":"COMFP36IFSUS","created_at":"2026-07-05T11:39:22Z"},{"alias_kind":"pith_short_16","alias_value":"COMFP36IFSUSM3NF","created_at":"2026-07-05T11:39:22Z"},{"alias_kind":"pith_short_8","alias_value":"COMFP36I","created_at":"2026-07-05T11:39:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:COMFP36IFSUSM3NFNXGY7AFALU","target":"record","payload":{"canonical_record":{"source":{"id":"2507.13761","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-07-18T09:13:05Z","cross_cats_sorted":[],"title_canon_sha256":"c7c83e70ff5dee27106e4187f1174e069a3f8fe9ba2d14eb61e3a09449ef5784","abstract_canon_sha256":"d1b91f6776b87fb866c04cc80322c7e248a387121c53feb7e18c74db2f7fdc44"},"schema_version":"1.0"},"canonical_sha256":"139857efc82ca9266da56dcd8f80a05d275f66ff777424566caf369b8b4d4811","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:39:22.512812Z","signature_b64":"ahSBBzM1EN3KAEFiYDWF4I1wDLbUe2Ub7fdbC3s1Ijk9CGZG7XKpsu25MGSgXd5MPVjVOrM7G3u26/69iWi8Ag==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"139857efc82ca9266da56dcd8f80a05d275f66ff777424566caf369b8b4d4811","last_reissued_at":"2026-07-05T11:39:22.512348Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:39:22.512348Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.13761","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:39:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9t08opRPA+1b7pDQvL5SE4983tF3jYHHaboK6BoiJAqwPri+vDvWN79eW5IgvIuuz4AaGuejIlUFMDNv4YtVAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T15:07:20.418610Z"},"content_sha256":"8e1c229f5b37c3d3d6a92ce9f8ce44c5ea56655fcdc9e71353f69d675d0c8e29","schema_version":"1.0","event_id":"sha256:8e1c229f5b37c3d3d6a92ce9f8ce44c5ea56655fcdc9e71353f69d675d0c8e29"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:COMFP36IFSUSM3NFNXGY7AFALU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Maithili Joshi, Palash Nandi, Tanmoy Chakraborty","submitted_at":"2025-07-18T09:13:05Z","abstract_excerpt":"Language models are highly sensitive to prompt formulations - small changes in input can drastically alter their output. This raises a critical question: To what extent can prompt sensitivity be exploited to generate inapt content? In this paper, we investigate how discrete components of prompt design influence the generation of inappropriate content in Visual Language Models (VLMs). Specifically, we analyze the impact of three key factors on successful jailbreaks: (a) the inclusion of detailed visual information, (b) the presence of adversarial examples, and (c) the use of positively framed b"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.13761","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.13761/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:39:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Vw7VpYghJU6pXbJMOpRWuHr7U7Xt9hbCkYNKyTVtdDXr4KmZoWCiwBlmNdqJuk6WcUxtwPHpbzB/56r5A8iECg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T15:07:20.419143Z"},"content_sha256":"bc5efd45ef6fc1ce0243531bfb2acadbadc3bd8e6ad3815278ff8d05af4c3172","schema_version":"1.0","event_id":"sha256:bc5efd45ef6fc1ce0243531bfb2acadbadc3bd8e6ad3815278ff8d05af4c3172"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/COMFP36IFSUSM3NFNXGY7AFALU/bundle.json","state_url":"https://pith.science/pith/COMFP36IFSUSM3NFNXGY7AFALU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/COMFP36IFSUSM3NFNXGY7AFALU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T15:07:20Z","links":{"resolver":"https://pith.science/pith/COMFP36IFSUSM3NFNXGY7AFALU","bundle":"https://pith.science/pith/COMFP36IFSUSM3NFNXGY7AFALU/bundle.json","state":"https://pith.science/pith/COMFP36IFSUSM3NFNXGY7AFALU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/COMFP36IFSUSM3NFNXGY7AFALU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:COMFP36IFSUSM3NFNXGY7AFALU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d1b91f6776b87fb866c04cc80322c7e248a387121c53feb7e18c74db2f7fdc44","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-07-18T09:13:05Z","title_canon_sha256":"c7c83e70ff5dee27106e4187f1174e069a3f8fe9ba2d14eb61e3a09449ef5784"},"schema_version":"1.0","source":{"id":"2507.13761","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.13761","created_at":"2026-07-05T11:39:22Z"},{"alias_kind":"arxiv_version","alias_value":"2507.13761v1","created_at":"2026-07-05T11:39:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.13761","created_at":"2026-07-05T11:39:22Z"},{"alias_kind":"pith_short_12","alias_value":"COMFP36IFSUS","created_at":"2026-07-05T11:39:22Z"},{"alias_kind":"pith_short_16","alias_value":"COMFP36IFSUSM3NF","created_at":"2026-07-05T11:39:22Z"},{"alias_kind":"pith_short_8","alias_value":"COMFP36I","created_at":"2026-07-05T11:39:22Z"}],"graph_snapshots":[{"event_id":"sha256:bc5efd45ef6fc1ce0243531bfb2acadbadc3bd8e6ad3815278ff8d05af4c3172","target":"graph","created_at":"2026-07-05T11:39:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.13761/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Language models are highly sensitive to prompt formulations - small changes in input can drastically alter their output. This raises a critical question: To what extent can prompt sensitivity be exploited to generate inapt content? In this paper, we investigate how discrete components of prompt design influence the generation of inappropriate content in Visual Language Models (VLMs). Specifically, we analyze the impact of three key factors on successful jailbreaks: (a) the inclusion of detailed visual information, (b) the presence of adversarial examples, and (c) the use of positively framed b","authors_text":"Maithili Joshi, Palash Nandi, Tanmoy Chakraborty","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-07-18T09:13:05Z","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.13761","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8e1c229f5b37c3d3d6a92ce9f8ce44c5ea56655fcdc9e71353f69d675d0c8e29","target":"record","created_at":"2026-07-05T11:39:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d1b91f6776b87fb866c04cc80322c7e248a387121c53feb7e18c74db2f7fdc44","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-07-18T09:13:05Z","title_canon_sha256":"c7c83e70ff5dee27106e4187f1174e069a3f8fe9ba2d14eb61e3a09449ef5784"},"schema_version":"1.0","source":{"id":"2507.13761","kind":"arxiv","version":1}},"canonical_sha256":"139857efc82ca9266da56dcd8f80a05d275f66ff777424566caf369b8b4d4811","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"139857efc82ca9266da56dcd8f80a05d275f66ff777424566caf369b8b4d4811","first_computed_at":"2026-07-05T11:39:22.512348Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:39:22.512348Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ahSBBzM1EN3KAEFiYDWF4I1wDLbUe2Ub7fdbC3s1Ijk9CGZG7XKpsu25MGSgXd5MPVjVOrM7G3u26/69iWi8Ag==","signature_status":"signed_v1","signed_at":"2026-07-05T11:39:22.512812Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.13761","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8e1c229f5b37c3d3d6a92ce9f8ce44c5ea56655fcdc9e71353f69d675d0c8e29","sha256:bc5efd45ef6fc1ce0243531bfb2acadbadc3bd8e6ad3815278ff8d05af4c3172"],"state_sha256":"385bfd3a8163beabed003290b8c0c1b72308e26d45a99de40f15b3ab27ddb858"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FhuzoNFLiOE/x2iplPlAqpJs5WbeOHc+TimQ/hctNey5QDh6hvN7OiqMgivFRxHoBswkTx42kbwFpq9By72fCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T15:07:20.425141Z","bundle_sha256":"e8411ea311508ba4938729912d855f240f926d234547b92999ff50c147c6adc7"}}