{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:DNLG7ZJDAP5HUMXO6IL63Q24ML","short_pith_number":"pith:DNLG7ZJD","canonical_record":{"source":{"id":"2503.20823","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-26T01:25:24Z","cross_cats_sorted":[],"title_canon_sha256":"7448890cee98f218c331e4eefd4b1f912df44ac569f6bc81ce0fd792496b1e4e","abstract_canon_sha256":"748dd9a441b96b072fc92c5bec27f48f15b84bad8d7b9e9bcf6e3a6d51c7524a"},"schema_version":"1.0"},"canonical_sha256":"1b566fe52303fa7a32eef217edc35c62ffd0bd9011ee1c41ac54a6f244da5621","source":{"kind":"arxiv","id":"2503.20823","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.20823","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"arxiv_version","alias_value":"2503.20823v1","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.20823","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"pith_short_12","alias_value":"DNLG7ZJDAP5H","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"pith_short_16","alias_value":"DNLG7ZJDAP5HUMXO","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"pith_short_8","alias_value":"DNLG7ZJD","created_at":"2026-07-05T10:39:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:DNLG7ZJDAP5HUMXO6IL63Q24ML","target":"record","payload":{"canonical_record":{"source":{"id":"2503.20823","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-26T01:25:24Z","cross_cats_sorted":[],"title_canon_sha256":"7448890cee98f218c331e4eefd4b1f912df44ac569f6bc81ce0fd792496b1e4e","abstract_canon_sha256":"748dd9a441b96b072fc92c5bec27f48f15b84bad8d7b9e9bcf6e3a6d51c7524a"},"schema_version":"1.0"},"canonical_sha256":"1b566fe52303fa7a32eef217edc35c62ffd0bd9011ee1c41ac54a6f244da5621","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:39:48.754613Z","signature_b64":"u1G6Am65obzZ9uFduWWHArOkdHDHRJ8svEB/s2hGyG8FDl5mwVLAjcAeYJ7LfjeGxgn93nzUDMnlwSsOdPZwDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1b566fe52303fa7a32eef217edc35c62ffd0bd9011ee1c41ac54a6f244da5621","last_reissued_at":"2026-07-05T10:39:48.754129Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:39:48.754129Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.20823","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:39:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wywRVgt6XRPZSbHt64CU4VdFhQrnPamJXLA6urrfmFbMkgPF5ffLAX9s3RVUBQTGHFw5RGjGXUJUuBkQUkD4Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-25T11:44:20.018446Z"},"content_sha256":"9aacfae31763afcd314cb7f7920b0e49324787be02f4c443b9ea2cccddc5b718","schema_version":"1.0","event_id":"sha256:9aacfae31763afcd314cb7f7920b0e49324787be02f4c443b9ea2cccddc5b718"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:DNLG7ZJDAP5HUMXO6IL63Q24ML","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Playing the Fool: Jailbreaking LLMs and Multimodal LLMs with Out-of-Distribution Strategy","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Eunho Yang, Jaeryong Hwang, Joonhyun Jeong, Seyun Bae, Yeonsung Jung","submitted_at":"2025-03-26T01:25:24Z","abstract_excerpt":"Despite the remarkable versatility of Large Language Models (LLMs) and Multimodal LLMs (MLLMs) to generalize across both language and vision tasks, LLMs and MLLMs have shown vulnerability to jailbreaking, generating textual outputs that undermine safety, ethical, and bias standards when exposed to harmful or sensitive inputs. With the recent advancement of safety alignment via preference-tuning from human feedback, LLMs and MLLMs have been equipped with safety guardrails to yield safe, ethical, and fair responses with regard to harmful inputs. However, despite the significance of safety alignm"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.20823","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.20823/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:39:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OvCmaG3D9hsfv3w5jJkdfUx9PCwFwT2Z5bN0e+EtrKSYyG4SERx+cvops/s6rJInrZclqgIIDIGt7SHmWLfZDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-25T11:44:20.018830Z"},"content_sha256":"0426b7ae187fdac020bc41bebf7d7f11f9c78c0ce76fba94dedf9afd5ba025c7","schema_version":"1.0","event_id":"sha256:0426b7ae187fdac020bc41bebf7d7f11f9c78c0ce76fba94dedf9afd5ba025c7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DNLG7ZJDAP5HUMXO6IL63Q24ML/bundle.json","state_url":"https://pith.science/pith/DNLG7ZJDAP5HUMXO6IL63Q24ML/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DNLG7ZJDAP5HUMXO6IL63Q24ML/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-25T11:44:20Z","links":{"resolver":"https://pith.science/pith/DNLG7ZJDAP5HUMXO6IL63Q24ML","bundle":"https://pith.science/pith/DNLG7ZJDAP5HUMXO6IL63Q24ML/bundle.json","state":"https://pith.science/pith/DNLG7ZJDAP5HUMXO6IL63Q24ML/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DNLG7ZJDAP5HUMXO6IL63Q24ML/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:DNLG7ZJDAP5HUMXO6IL63Q24ML","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"748dd9a441b96b072fc92c5bec27f48f15b84bad8d7b9e9bcf6e3a6d51c7524a","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-26T01:25:24Z","title_canon_sha256":"7448890cee98f218c331e4eefd4b1f912df44ac569f6bc81ce0fd792496b1e4e"},"schema_version":"1.0","source":{"id":"2503.20823","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.20823","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"arxiv_version","alias_value":"2503.20823v1","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.20823","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"pith_short_12","alias_value":"DNLG7ZJDAP5H","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"pith_short_16","alias_value":"DNLG7ZJDAP5HUMXO","created_at":"2026-07-05T10:39:48Z"},{"alias_kind":"pith_short_8","alias_value":"DNLG7ZJD","created_at":"2026-07-05T10:39:48Z"}],"graph_snapshots":[{"event_id":"sha256:0426b7ae187fdac020bc41bebf7d7f11f9c78c0ce76fba94dedf9afd5ba025c7","target":"graph","created_at":"2026-07-05T10:39:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.20823/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite the remarkable versatility of Large Language Models (LLMs) and Multimodal LLMs (MLLMs) to generalize across both language and vision tasks, LLMs and MLLMs have shown vulnerability to jailbreaking, generating textual outputs that undermine safety, ethical, and bias standards when exposed to harmful or sensitive inputs. With the recent advancement of safety alignment via preference-tuning from human feedback, LLMs and MLLMs have been equipped with safety guardrails to yield safe, ethical, and fair responses with regard to harmful inputs. However, despite the significance of safety alignm","authors_text":"Eunho Yang, Jaeryong Hwang, Joonhyun Jeong, Seyun Bae, Yeonsung Jung","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-26T01:25:24Z","title":"Playing the Fool: Jailbreaking LLMs and Multimodal LLMs with Out-of-Distribution Strategy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.20823","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9aacfae31763afcd314cb7f7920b0e49324787be02f4c443b9ea2cccddc5b718","target":"record","created_at":"2026-07-05T10:39:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"748dd9a441b96b072fc92c5bec27f48f15b84bad8d7b9e9bcf6e3a6d51c7524a","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-26T01:25:24Z","title_canon_sha256":"7448890cee98f218c331e4eefd4b1f912df44ac569f6bc81ce0fd792496b1e4e"},"schema_version":"1.0","source":{"id":"2503.20823","kind":"arxiv","version":1}},"canonical_sha256":"1b566fe52303fa7a32eef217edc35c62ffd0bd9011ee1c41ac54a6f244da5621","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1b566fe52303fa7a32eef217edc35c62ffd0bd9011ee1c41ac54a6f244da5621","first_computed_at":"2026-07-05T10:39:48.754129Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:39:48.754129Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"u1G6Am65obzZ9uFduWWHArOkdHDHRJ8svEB/s2hGyG8FDl5mwVLAjcAeYJ7LfjeGxgn93nzUDMnlwSsOdPZwDA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:39:48.754613Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.20823","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9aacfae31763afcd314cb7f7920b0e49324787be02f4c443b9ea2cccddc5b718","sha256:0426b7ae187fdac020bc41bebf7d7f11f9c78c0ce76fba94dedf9afd5ba025c7"],"state_sha256":"001071aabc35db902b6dadba340ae8e0ceb5ef72ebe1071ece8a9065e53adb6f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Qty4UDjG1C3bYoXtTGgK4cSqpEyymbVUE+dKohtvG5ttGyTbKK/iPO+4t2cs+EtyGiDMBsQTbEUNaqDtpKBuBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-25T11:44:20.021057Z","bundle_sha256":"6402937024f1a43124b1815a64e15e00db992e547d2fd377757b0d88d3b2c6b9"}}