{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:D7PFTEBQ5YMZSDJRGPVKJOXV62","short_pith_number":"pith:D7PFTEBQ","canonical_record":{"source":{"id":"2410.11317","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-15T06:31:04Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"d0c6b0688f1373ec4b08575e21afdfe77f8dd4ad4dc63c3857b256115b411705","abstract_canon_sha256":"1822a3ff9d4433df405a154ee80f693cd30f7fd393749d1414c4a5d3fe43eec6"},"schema_version":"1.0"},"canonical_sha256":"1fde599030ee19990d3133eaa4baf5f6baa72faadcde02a2b1628edeb833e028","source":{"kind":"arxiv","id":"2410.11317","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.11317","created_at":"2026-07-05T10:02:53Z"},{"alias_kind":"arxiv_version","alias_value":"2410.11317v2","created_at":"2026-07-05T10:02:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.11317","created_at":"2026-07-05T10:02:53Z"},{"alias_kind":"pith_short_12","alias_value":"D7PFTEBQ5YMZ","created_at":"2026-07-05T10:02:53Z"},{"alias_kind":"pith_short_16","alias_value":"D7PFTEBQ5YMZSDJR","created_at":"2026-07-05T10:02:53Z"},{"alias_kind":"pith_short_8","alias_value":"D7PFTEBQ","created_at":"2026-07-05T10:02:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:D7PFTEBQ5YMZSDJRGPVKJOXV62","target":"record","payload":{"canonical_record":{"source":{"id":"2410.11317","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-15T06:31:04Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"d0c6b0688f1373ec4b08575e21afdfe77f8dd4ad4dc63c3857b256115b411705","abstract_canon_sha256":"1822a3ff9d4433df405a154ee80f693cd30f7fd393749d1414c4a5d3fe43eec6"},"schema_version":"1.0"},"canonical_sha256":"1fde599030ee19990d3133eaa4baf5f6baa72faadcde02a2b1628edeb833e028","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:02:53.318831Z","signature_b64":"bpUSfximbZ2g2SmJ3zPy94yFd2ZElsGkWmSB9TaoC3Xw/QknyFWLdBynzwR1d1/2iPZY4CVSpKgP4B1Ffr87CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1fde599030ee19990d3133eaa4baf5f6baa72faadcde02a2b1628edeb833e028","last_reissued_at":"2026-07-05T10:02:53.318407Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:02:53.318407Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.11317","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:02:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ub1VuqVY00S62AsYrcKQGiMz0Qld/0i6qYFPtA+fhllKIIzUVdGVGli8QpOeDCEMOmzJTfGvVKp1xztfEwQ0DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T03:51:13.969063Z"},"content_sha256":"b916e7e08608629c573e8dda3ebcd3036b4b0f633dbf1a6711c326ebbeb8d54a","schema_version":"1.0","event_id":"sha256:b916e7e08608629c573e8dda3ebcd3036b4b0f633dbf1a6711c326ebbeb8d54a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:D7PFTEBQ5YMZSDJRGPVKJOXV62","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Deciphering the Chaos: Enhancing Jailbreak Attacks via Adversarial Prompt Translation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Qizhang Li, Wangmeng Zuo, Xiaochen Yang, Yiwen Guo","submitted_at":"2024-10-15T06:31:04Z","abstract_excerpt":"Automatic adversarial prompt generation provides remarkable success in jailbreaking safely-aligned large language models (LLMs). Existing gradient-based attacks, while demonstrating outstanding performance in jailbreaking white-box LLMs, often generate garbled adversarial prompts with chaotic appearance. These adversarial prompts are difficult to transfer to other LLMs, hindering their performance in attacking unknown victim models. In this paper, for the first time, we delve into the semantic meaning embedded in garbled adversarial prompts and propose a novel method that \"translates\" them int"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.11317","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.11317/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:02:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GhAIZG3XQMErlTyHkBnjN4JStdO5oYFNtmxu9TVu0lOhajwzIu2wPiEmAfDBoT85PTI3iCEiU3HkO8NHadbBAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T03:51:13.969710Z"},"content_sha256":"9b4051f6122098effc9b48d803f085b8125130f166228482f0ceeb365404b65a","schema_version":"1.0","event_id":"sha256:9b4051f6122098effc9b48d803f085b8125130f166228482f0ceeb365404b65a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/D7PFTEBQ5YMZSDJRGPVKJOXV62/bundle.json","state_url":"https://pith.science/pith/D7PFTEBQ5YMZSDJRGPVKJOXV62/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/D7PFTEBQ5YMZSDJRGPVKJOXV62/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T03:51:13Z","links":{"resolver":"https://pith.science/pith/D7PFTEBQ5YMZSDJRGPVKJOXV62","bundle":"https://pith.science/pith/D7PFTEBQ5YMZSDJRGPVKJOXV62/bundle.json","state":"https://pith.science/pith/D7PFTEBQ5YMZSDJRGPVKJOXV62/state.json","well_known_bundle":"https://pith.science/.well-known/pith/D7PFTEBQ5YMZSDJRGPVKJOXV62/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:D7PFTEBQ5YMZSDJRGPVKJOXV62","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1822a3ff9d4433df405a154ee80f693cd30f7fd393749d1414c4a5d3fe43eec6","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-15T06:31:04Z","title_canon_sha256":"d0c6b0688f1373ec4b08575e21afdfe77f8dd4ad4dc63c3857b256115b411705"},"schema_version":"1.0","source":{"id":"2410.11317","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.11317","created_at":"2026-07-05T10:02:53Z"},{"alias_kind":"arxiv_version","alias_value":"2410.11317v2","created_at":"2026-07-05T10:02:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.11317","created_at":"2026-07-05T10:02:53Z"},{"alias_kind":"pith_short_12","alias_value":"D7PFTEBQ5YMZ","created_at":"2026-07-05T10:02:53Z"},{"alias_kind":"pith_short_16","alias_value":"D7PFTEBQ5YMZSDJR","created_at":"2026-07-05T10:02:53Z"},{"alias_kind":"pith_short_8","alias_value":"D7PFTEBQ","created_at":"2026-07-05T10:02:53Z"}],"graph_snapshots":[{"event_id":"sha256:9b4051f6122098effc9b48d803f085b8125130f166228482f0ceeb365404b65a","target":"graph","created_at":"2026-07-05T10:02:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.11317/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Automatic adversarial prompt generation provides remarkable success in jailbreaking safely-aligned large language models (LLMs). Existing gradient-based attacks, while demonstrating outstanding performance in jailbreaking white-box LLMs, often generate garbled adversarial prompts with chaotic appearance. These adversarial prompts are difficult to transfer to other LLMs, hindering their performance in attacking unknown victim models. In this paper, for the first time, we delve into the semantic meaning embedded in garbled adversarial prompts and propose a novel method that \"translates\" them int","authors_text":"Qizhang Li, Wangmeng Zuo, Xiaochen Yang, Yiwen Guo","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-15T06:31:04Z","title":"Deciphering the Chaos: Enhancing Jailbreak Attacks via Adversarial Prompt Translation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.11317","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b916e7e08608629c573e8dda3ebcd3036b4b0f633dbf1a6711c326ebbeb8d54a","target":"record","created_at":"2026-07-05T10:02:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1822a3ff9d4433df405a154ee80f693cd30f7fd393749d1414c4a5d3fe43eec6","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-15T06:31:04Z","title_canon_sha256":"d0c6b0688f1373ec4b08575e21afdfe77f8dd4ad4dc63c3857b256115b411705"},"schema_version":"1.0","source":{"id":"2410.11317","kind":"arxiv","version":2}},"canonical_sha256":"1fde599030ee19990d3133eaa4baf5f6baa72faadcde02a2b1628edeb833e028","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1fde599030ee19990d3133eaa4baf5f6baa72faadcde02a2b1628edeb833e028","first_computed_at":"2026-07-05T10:02:53.318407Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:02:53.318407Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bpUSfximbZ2g2SmJ3zPy94yFd2ZElsGkWmSB9TaoC3Xw/QknyFWLdBynzwR1d1/2iPZY4CVSpKgP4B1Ffr87CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:02:53.318831Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.11317","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b916e7e08608629c573e8dda3ebcd3036b4b0f633dbf1a6711c326ebbeb8d54a","sha256:9b4051f6122098effc9b48d803f085b8125130f166228482f0ceeb365404b65a"],"state_sha256":"01381c32fec8f915b5a9c87fb0a76b3e776e6eba54ccc75eaf4e945a57816ca6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9nsYdpYvJj+pEHomxIN0Y44sR8u2jbP28UEZj8jqawgfAE/miL/KDptZnmYIYGl8WwdVP/DvsxdQ0TnUSSCaBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T03:51:13.974089Z","bundle_sha256":"486a5987dd5a3ed2de5c2310758efbdb3bfaee5ed542688ed09824c303d49e0c"}}