{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:CRGIQURHY5WUEPINNTQ3J5GHRK","short_pith_number":"pith:CRGIQURH","canonical_record":{"source":{"id":"2608.03070","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T03:32:19Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"153627e41cbe0687b20c031b0dd5ede644de43566847fec9160f66b8575b9e38","abstract_canon_sha256":"615383b53e8d1b19b0c9f2b84e3a3480e0cb674000c7edb584edc109432d090f"},"schema_version":"1.0"},"canonical_sha256":"144c885227c76d423d0d6ce1b4f4c78ab3a5554ef4418f72b93e1b5cc58aa1ae","source":{"kind":"arxiv","id":"2608.03070","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03070","created_at":"2026-08-05T00:45:07Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03070v1","created_at":"2026-08-05T00:45:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03070","created_at":"2026-08-05T00:45:07Z"},{"alias_kind":"pith_short_12","alias_value":"CRGIQURHY5WU","created_at":"2026-08-05T00:45:07Z"},{"alias_kind":"pith_short_16","alias_value":"CRGIQURHY5WUEPIN","created_at":"2026-08-05T00:45:07Z"},{"alias_kind":"pith_short_8","alias_value":"CRGIQURH","created_at":"2026-08-05T00:45:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:CRGIQURHY5WUEPINNTQ3J5GHRK","target":"record","payload":{"canonical_record":{"source":{"id":"2608.03070","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T03:32:19Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"153627e41cbe0687b20c031b0dd5ede644de43566847fec9160f66b8575b9e38","abstract_canon_sha256":"615383b53e8d1b19b0c9f2b84e3a3480e0cb674000c7edb584edc109432d090f"},"schema_version":"1.0"},"canonical_sha256":"144c885227c76d423d0d6ce1b4f4c78ab3a5554ef4418f72b93e1b5cc58aa1ae","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-05T00:45:07.201261Z","signature_b64":"tnRAp2KL2v0ZdDPijCgNgq9rhNc0V4fnCZgZOJEQZonzAMapFkxuBvydi6hv9fIwTgBpADGz+6FDLLjoSHT2DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"144c885227c76d423d0d6ce1b4f4c78ab3a5554ef4418f72b93e1b5cc58aa1ae","last_reissued_at":"2026-08-05T00:45:07.198789Z","signature_status":"signed_v1","first_computed_at":"2026-08-05T00:45:07.198789Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.03070","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T00:45:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s4V0Vb07IDPWMtCBnj7udnqWosRhGfnPxLkYGjsRF1LRniGuD9BS3uan4rqeQdK4YTX/+AfmPcdKwtJNUTxvBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T18:30:52.674338Z"},"content_sha256":"e0ac755dac88a434d9060c0e5554244a4f7a876447212109544d7e5258400b62","schema_version":"1.0","event_id":"sha256:e0ac755dac88a434d9060c0e5554244a4f7a876447212109544d7e5258400b62"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:CRGIQURHY5WUEPINNTQ3J5GHRK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AI Security Leaderboard: Methodology, Results and Minimal Standard","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Adam Gleave, Dan Zhao, Edward Yee, Grace Cheong, Heather McIntyre, Isadora De Andrade, Jasper Timm, Kellin Pelrine, Lukas Struppek, Mick Yang, Oscar Mata, Samuel Bauer, Xiaojun Jia, Yiming Li, Ziwei Xu","submitted_at":"2026-08-04T03:32:19Z","abstract_excerpt":"Frontier AI model developers increasingly rely on layered safeguards to prevent catastrophic misuse, but little public evidence exists on how much protection these safeguards provide, or how consistently across developers. We introduce the FAR.AI Minimal Standard for Safeguards, Version 1.0: a taxonomy of 67 readily accessible static jailbreak techniques, a method for composing them into a very large attack space, and a benchmark of flagship models against a sample of it. We evaluate Claude Fable 5, GPT-5.6 Sol, Gemini 3.1 Pro, and Grok 4.5 on two complementary datasets totalling 360 attacker "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03070","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.03070/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T00:45:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ViK0mCOmerL+/0H42qAd44vm03i6kn9TqXDNYy0uolWWH8Gxua8e6/2YlFpnUQBmBGyswNjbbg9VsxAXuuEXDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T18:30:52.674977Z"},"content_sha256":"5da03da96162b4851630561f2abbd7b91554ddffb320a6348ac8a7f94e8d574e","schema_version":"1.0","event_id":"sha256:5da03da96162b4851630561f2abbd7b91554ddffb320a6348ac8a7f94e8d574e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CRGIQURHY5WUEPINNTQ3J5GHRK/bundle.json","state_url":"https://pith.science/pith/CRGIQURHY5WUEPINNTQ3J5GHRK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CRGIQURHY5WUEPINNTQ3J5GHRK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T18:30:52Z","links":{"resolver":"https://pith.science/pith/CRGIQURHY5WUEPINNTQ3J5GHRK","bundle":"https://pith.science/pith/CRGIQURHY5WUEPINNTQ3J5GHRK/bundle.json","state":"https://pith.science/pith/CRGIQURHY5WUEPINNTQ3J5GHRK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CRGIQURHY5WUEPINNTQ3J5GHRK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:CRGIQURHY5WUEPINNTQ3J5GHRK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"615383b53e8d1b19b0c9f2b84e3a3480e0cb674000c7edb584edc109432d090f","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T03:32:19Z","title_canon_sha256":"153627e41cbe0687b20c031b0dd5ede644de43566847fec9160f66b8575b9e38"},"schema_version":"1.0","source":{"id":"2608.03070","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03070","created_at":"2026-08-05T00:45:07Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03070v1","created_at":"2026-08-05T00:45:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03070","created_at":"2026-08-05T00:45:07Z"},{"alias_kind":"pith_short_12","alias_value":"CRGIQURHY5WU","created_at":"2026-08-05T00:45:07Z"},{"alias_kind":"pith_short_16","alias_value":"CRGIQURHY5WUEPIN","created_at":"2026-08-05T00:45:07Z"},{"alias_kind":"pith_short_8","alias_value":"CRGIQURH","created_at":"2026-08-05T00:45:07Z"}],"graph_snapshots":[{"event_id":"sha256:5da03da96162b4851630561f2abbd7b91554ddffb320a6348ac8a7f94e8d574e","target":"graph","created_at":"2026-08-05T00:45:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.03070/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Frontier AI model developers increasingly rely on layered safeguards to prevent catastrophic misuse, but little public evidence exists on how much protection these safeguards provide, or how consistently across developers. We introduce the FAR.AI Minimal Standard for Safeguards, Version 1.0: a taxonomy of 67 readily accessible static jailbreak techniques, a method for composing them into a very large attack space, and a benchmark of flagship models against a sample of it. We evaluate Claude Fable 5, GPT-5.6 Sol, Gemini 3.1 Pro, and Grok 4.5 on two complementary datasets totalling 360 attacker ","authors_text":"Adam Gleave, Dan Zhao, Edward Yee, Grace Cheong, Heather McIntyre, Isadora De Andrade, Jasper Timm, Kellin Pelrine, Lukas Struppek, Mick Yang, Oscar Mata, Samuel Bauer, Xiaojun Jia, Yiming Li, Ziwei Xu","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T03:32:19Z","title":"AI Security Leaderboard: Methodology, Results and Minimal Standard"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03070","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e0ac755dac88a434d9060c0e5554244a4f7a876447212109544d7e5258400b62","target":"record","created_at":"2026-08-05T00:45:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"615383b53e8d1b19b0c9f2b84e3a3480e0cb674000c7edb584edc109432d090f","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T03:32:19Z","title_canon_sha256":"153627e41cbe0687b20c031b0dd5ede644de43566847fec9160f66b8575b9e38"},"schema_version":"1.0","source":{"id":"2608.03070","kind":"arxiv","version":1}},"canonical_sha256":"144c885227c76d423d0d6ce1b4f4c78ab3a5554ef4418f72b93e1b5cc58aa1ae","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"144c885227c76d423d0d6ce1b4f4c78ab3a5554ef4418f72b93e1b5cc58aa1ae","first_computed_at":"2026-08-05T00:45:07.198789Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-05T00:45:07.198789Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tnRAp2KL2v0ZdDPijCgNgq9rhNc0V4fnCZgZOJEQZonzAMapFkxuBvydi6hv9fIwTgBpADGz+6FDLLjoSHT2DA==","signature_status":"signed_v1","signed_at":"2026-08-05T00:45:07.201261Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.03070","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e0ac755dac88a434d9060c0e5554244a4f7a876447212109544d7e5258400b62","sha256:5da03da96162b4851630561f2abbd7b91554ddffb320a6348ac8a7f94e8d574e"],"state_sha256":"4fe9443a1ba1f58097a4d7ab6de922defa9d6a46064e086e1d1dbca04109675b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XFtVPe9tZ/5STOS9nZCWHwOX6S/p/JD0xmoCGlaVuri+fosapTdjdZa3toSkUu0NO+y1Ue83REA3pKkcLrEeCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T18:30:52.680162Z","bundle_sha256":"193be1d263df698e47902c0dd2d9ff20a3dae63a5f5c2f2205a1d0440f92fab4"}}