{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:DQN6CUJVIAX7CNSNK2HQQYJ7AW","short_pith_number":"pith:DQN6CUJV","canonical_record":{"source":{"id":"2508.05087","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.MM","submitted_at":"2025-08-07T07:14:01Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"title_canon_sha256":"938f97ff8bd6e93e23158b0aee2e8a3dd1ee907951fb48fec14453824e7c46b4","abstract_canon_sha256":"cfe709bff8c8392f2b165765cf516af73541cc472145612af5f7dd23c7d0d0d0"},"schema_version":"1.0"},"canonical_sha256":"1c1be15135402ff1364d568f08613f05b71e36c7a6e6fb30a098488c88db573f","source":{"kind":"arxiv","id":"2508.05087","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.05087","created_at":"2026-07-05T11:50:06Z"},{"alias_kind":"arxiv_version","alias_value":"2508.05087v1","created_at":"2026-07-05T11:50:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.05087","created_at":"2026-07-05T11:50:06Z"},{"alias_kind":"pith_short_12","alias_value":"DQN6CUJVIAX7","created_at":"2026-07-05T11:50:06Z"},{"alias_kind":"pith_short_16","alias_value":"DQN6CUJVIAX7CNSN","created_at":"2026-07-05T11:50:06Z"},{"alias_kind":"pith_short_8","alias_value":"DQN6CUJV","created_at":"2026-07-05T11:50:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:DQN6CUJVIAX7CNSNK2HQQYJ7AW","target":"record","payload":{"canonical_record":{"source":{"id":"2508.05087","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.MM","submitted_at":"2025-08-07T07:14:01Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"title_canon_sha256":"938f97ff8bd6e93e23158b0aee2e8a3dd1ee907951fb48fec14453824e7c46b4","abstract_canon_sha256":"cfe709bff8c8392f2b165765cf516af73541cc472145612af5f7dd23c7d0d0d0"},"schema_version":"1.0"},"canonical_sha256":"1c1be15135402ff1364d568f08613f05b71e36c7a6e6fb30a098488c88db573f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:50:06.875474Z","signature_b64":"adavtaPl0X/3icmwcb4IBxzygsiUNx57VOnEUP1WJZ4W5LvgCO8Yqg+vvH2756zQsMxOo8kSP7f+NFZoVawWCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1c1be15135402ff1364d568f08613f05b71e36c7a6e6fb30a098488c88db573f","last_reissued_at":"2026-07-05T11:50:06.875005Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:50:06.875005Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.05087","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:50:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Iq5r21d/yhz8JUF/oPuWFCQb4a/yFO0gJNBetIs6c+Us6/cpfqvLLdTaMCJTQ2eVlwOsYorwhTi3z+7DL7FtBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T19:23:59.239068Z"},"content_sha256":"b3f19cbc4753307be7fd2d146e727cb09406f49ab85bce14bf6e77b2824f3492","schema_version":"1.0","event_id":"sha256:b3f19cbc4753307be7fd2d146e727cb09406f49ab85bce14bf6e77b2824f3492"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:DQN6CUJVIAX7CNSNK2HQQYJ7AW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"JPS: Jailbreak Multimodal Large Language Models with Collaborative Visual Perturbation and Textual Steering","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.CR"],"primary_cat":"cs.MM","authors_text":"Chengwei Pan, Hongning Wang, Minlie Huang, Qinglin Zhang, Renmiao Chen, Shiyao Cui, Victor Shea-Jay Huang, Xuancheng Huang, Xuan Ouyang, Zhexin Zhang","submitted_at":"2025-08-07T07:14:01Z","abstract_excerpt":"Jailbreak attacks against multimodal large language Models (MLLMs) are a significant research focus. Current research predominantly focuses on maximizing attack success rate (ASR), often overlooking whether the generated responses actually fulfill the attacker's malicious intent. This oversight frequently leads to low-quality outputs that bypass safety filters but lack substantial harmful content. To address this gap, we propose JPS, \\underline{J}ailbreak MLLMs with collaborative visual \\underline{P}erturbation and textual \\underline{S}teering, which achieves jailbreaks via corporation of visu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.05087","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.05087/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:50:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3BvlfOYvznvV1Z31ehQO8N+lTSxDNmXXnOQMHi/psuBiaebchWX7QZMdrgPGYh3e7MjFSebRycmgfhUPjkO7Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T19:23:59.239594Z"},"content_sha256":"8cbf46377e83078e206345c843cb02f5e209968a286ae2397ef37fd904c347d4","schema_version":"1.0","event_id":"sha256:8cbf46377e83078e206345c843cb02f5e209968a286ae2397ef37fd904c347d4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DQN6CUJVIAX7CNSNK2HQQYJ7AW/bundle.json","state_url":"https://pith.science/pith/DQN6CUJVIAX7CNSNK2HQQYJ7AW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DQN6CUJVIAX7CNSNK2HQQYJ7AW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T19:23:59Z","links":{"resolver":"https://pith.science/pith/DQN6CUJVIAX7CNSNK2HQQYJ7AW","bundle":"https://pith.science/pith/DQN6CUJVIAX7CNSNK2HQQYJ7AW/bundle.json","state":"https://pith.science/pith/DQN6CUJVIAX7CNSNK2HQQYJ7AW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DQN6CUJVIAX7CNSNK2HQQYJ7AW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:DQN6CUJVIAX7CNSNK2HQQYJ7AW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cfe709bff8c8392f2b165765cf516af73541cc472145612af5f7dd23c7d0d0d0","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.MM","submitted_at":"2025-08-07T07:14:01Z","title_canon_sha256":"938f97ff8bd6e93e23158b0aee2e8a3dd1ee907951fb48fec14453824e7c46b4"},"schema_version":"1.0","source":{"id":"2508.05087","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.05087","created_at":"2026-07-05T11:50:06Z"},{"alias_kind":"arxiv_version","alias_value":"2508.05087v1","created_at":"2026-07-05T11:50:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.05087","created_at":"2026-07-05T11:50:06Z"},{"alias_kind":"pith_short_12","alias_value":"DQN6CUJVIAX7","created_at":"2026-07-05T11:50:06Z"},{"alias_kind":"pith_short_16","alias_value":"DQN6CUJVIAX7CNSN","created_at":"2026-07-05T11:50:06Z"},{"alias_kind":"pith_short_8","alias_value":"DQN6CUJV","created_at":"2026-07-05T11:50:06Z"}],"graph_snapshots":[{"event_id":"sha256:8cbf46377e83078e206345c843cb02f5e209968a286ae2397ef37fd904c347d4","target":"graph","created_at":"2026-07-05T11:50:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.05087/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Jailbreak attacks against multimodal large language Models (MLLMs) are a significant research focus. Current research predominantly focuses on maximizing attack success rate (ASR), often overlooking whether the generated responses actually fulfill the attacker's malicious intent. This oversight frequently leads to low-quality outputs that bypass safety filters but lack substantial harmful content. To address this gap, we propose JPS, \\underline{J}ailbreak MLLMs with collaborative visual \\underline{P}erturbation and textual \\underline{S}teering, which achieves jailbreaks via corporation of visu","authors_text":"Chengwei Pan, Hongning Wang, Minlie Huang, Qinglin Zhang, Renmiao Chen, Shiyao Cui, Victor Shea-Jay Huang, Xuancheng Huang, Xuan Ouyang, Zhexin Zhang","cross_cats":["cs.AI","cs.CL","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.MM","submitted_at":"2025-08-07T07:14:01Z","title":"JPS: Jailbreak Multimodal Large Language Models with Collaborative Visual Perturbation and Textual Steering"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.05087","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b3f19cbc4753307be7fd2d146e727cb09406f49ab85bce14bf6e77b2824f3492","target":"record","created_at":"2026-07-05T11:50:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cfe709bff8c8392f2b165765cf516af73541cc472145612af5f7dd23c7d0d0d0","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.MM","submitted_at":"2025-08-07T07:14:01Z","title_canon_sha256":"938f97ff8bd6e93e23158b0aee2e8a3dd1ee907951fb48fec14453824e7c46b4"},"schema_version":"1.0","source":{"id":"2508.05087","kind":"arxiv","version":1}},"canonical_sha256":"1c1be15135402ff1364d568f08613f05b71e36c7a6e6fb30a098488c88db573f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1c1be15135402ff1364d568f08613f05b71e36c7a6e6fb30a098488c88db573f","first_computed_at":"2026-07-05T11:50:06.875005Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:50:06.875005Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"adavtaPl0X/3icmwcb4IBxzygsiUNx57VOnEUP1WJZ4W5LvgCO8Yqg+vvH2756zQsMxOo8kSP7f+NFZoVawWCw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:50:06.875474Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.05087","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b3f19cbc4753307be7fd2d146e727cb09406f49ab85bce14bf6e77b2824f3492","sha256:8cbf46377e83078e206345c843cb02f5e209968a286ae2397ef37fd904c347d4"],"state_sha256":"93e9c4f0ef6057d779b102fdcd4f9a3e86ecbbbe33387b2e198d08d46ecc3f77"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yUtSb2BJ874H4bO9pCCrIHMOUX95OXhkyPUY5h875cJDgLO2O8L6eV7IbzqaZAiiraKZMBUGkeX2dDQDpLS1CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T19:23:59.243693Z","bundle_sha256":"185e797598b363a51f3f0af5ae7eaa408b5fd0adf86c0858172dd6cee49923d0"}}