{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:DTE74SCAPW2EPOZXHSHHXUN4ZW","short_pith_number":"pith:DTE74SCA","canonical_record":{"source":{"id":"2408.11313","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2024-08-21T03:35:24Z","cross_cats_sorted":[],"title_canon_sha256":"65b4c9d031978fa161bc02d93c35486343b5aca04e49db73bfd4ce5074dd3b74","abstract_canon_sha256":"715d3bf55de67162ff2cda4900b2452b15bfca579671d53d457301e884a841df"},"schema_version":"1.0"},"canonical_sha256":"1cc9fe48407db447bb373c8e7bd1bccd8ccfac494b196ad403fbaded699f2945","source":{"kind":"arxiv","id":"2408.11313","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.11313","created_at":"2026-07-05T10:43:00Z"},{"alias_kind":"arxiv_version","alias_value":"2408.11313v2","created_at":"2026-07-05T10:43:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.11313","created_at":"2026-07-05T10:43:00Z"},{"alias_kind":"pith_short_12","alias_value":"DTE74SCAPW2E","created_at":"2026-07-05T10:43:00Z"},{"alias_kind":"pith_short_16","alias_value":"DTE74SCAPW2EPOZX","created_at":"2026-07-05T10:43:00Z"},{"alias_kind":"pith_short_8","alias_value":"DTE74SCA","created_at":"2026-07-05T10:43:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:DTE74SCAPW2EPOZXHSHHXUN4ZW","target":"record","payload":{"canonical_record":{"source":{"id":"2408.11313","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2024-08-21T03:35:24Z","cross_cats_sorted":[],"title_canon_sha256":"65b4c9d031978fa161bc02d93c35486343b5aca04e49db73bfd4ce5074dd3b74","abstract_canon_sha256":"715d3bf55de67162ff2cda4900b2452b15bfca579671d53d457301e884a841df"},"schema_version":"1.0"},"canonical_sha256":"1cc9fe48407db447bb373c8e7bd1bccd8ccfac494b196ad403fbaded699f2945","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:43:00.893877Z","signature_b64":"zn7PpJt+IDaSCfVcb/bb4zqxBFMCsZeQoyXfk/JAGSOIncZfO64exnQk5sWyaMxfWDvbeQmmQ3r0WDbgEDegCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1cc9fe48407db447bb373c8e7bd1bccd8ccfac494b196ad403fbaded699f2945","last_reissued_at":"2026-07-05T10:43:00.893401Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:43:00.893401Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.11313","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:43:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"09/0U7EjI1zthPHsPtAKJ0wALqqq807CdwlOcXWWLV6OVPO+Dhm2JLarnhStblVuDgS9eeT/EMbsp4ZIyGPgDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T07:49:20.400393Z"},"content_sha256":"4b780be2d8a737ea0ee195eeb3448acab26c3871795e7d3d839a0a44f99e0ec9","schema_version":"1.0","event_id":"sha256:4b780be2d8a737ea0ee195eeb3448acab26c3871795e7d3d839a0a44f99e0ec9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:DTE74SCAPW2EPOZXHSHHXUN4ZW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Optimizable Suffix Is Worth A Thousand Templates: Efficient Black-box Jailbreaking without Affirmative Phrases via LLM as Optimizer","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.AI","authors_text":"Chao Shen, Juan Zhai, Shiqing Ma, Weipeng Jiang, Zhengyu Zhao, Zhenting Wang","submitted_at":"2024-08-21T03:35:24Z","abstract_excerpt":"Despite prior safety alignment efforts, mainstream LLMs can still generate harmful and unethical content when subjected to jailbreaking attacks. Existing jailbreaking methods fall into two main categories: template-based and optimization-based methods. The former requires significant manual effort and domain knowledge, while the latter, exemplified by Greedy Coordinate Gradient (GCG), which seeks to maximize the likelihood of harmful LLM outputs through token-level optimization, also encounters several limitations: requiring white-box access, necessitating pre-constructed affirmative phrase, a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.11313","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.11313/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:43:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Rm/slxuROM28Idps6RhBoFU4R2l0+SD/JmmExsO3mWhJqcageTwyqL4NlAQDly+UE8PtNR0biiJJItd09/7LDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T07:49:20.400880Z"},"content_sha256":"b5fcf05b3cc1f8778fc9e5e882775ee157d4929c7d82cd21264f02af1972c384","schema_version":"1.0","event_id":"sha256:b5fcf05b3cc1f8778fc9e5e882775ee157d4929c7d82cd21264f02af1972c384"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DTE74SCAPW2EPOZXHSHHXUN4ZW/bundle.json","state_url":"https://pith.science/pith/DTE74SCAPW2EPOZXHSHHXUN4ZW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DTE74SCAPW2EPOZXHSHHXUN4ZW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T07:49:20Z","links":{"resolver":"https://pith.science/pith/DTE74SCAPW2EPOZXHSHHXUN4ZW","bundle":"https://pith.science/pith/DTE74SCAPW2EPOZXHSHHXUN4ZW/bundle.json","state":"https://pith.science/pith/DTE74SCAPW2EPOZXHSHHXUN4ZW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DTE74SCAPW2EPOZXHSHHXUN4ZW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:DTE74SCAPW2EPOZXHSHHXUN4ZW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"715d3bf55de67162ff2cda4900b2452b15bfca579671d53d457301e884a841df","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2024-08-21T03:35:24Z","title_canon_sha256":"65b4c9d031978fa161bc02d93c35486343b5aca04e49db73bfd4ce5074dd3b74"},"schema_version":"1.0","source":{"id":"2408.11313","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.11313","created_at":"2026-07-05T10:43:00Z"},{"alias_kind":"arxiv_version","alias_value":"2408.11313v2","created_at":"2026-07-05T10:43:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.11313","created_at":"2026-07-05T10:43:00Z"},{"alias_kind":"pith_short_12","alias_value":"DTE74SCAPW2E","created_at":"2026-07-05T10:43:00Z"},{"alias_kind":"pith_short_16","alias_value":"DTE74SCAPW2EPOZX","created_at":"2026-07-05T10:43:00Z"},{"alias_kind":"pith_short_8","alias_value":"DTE74SCA","created_at":"2026-07-05T10:43:00Z"}],"graph_snapshots":[{"event_id":"sha256:b5fcf05b3cc1f8778fc9e5e882775ee157d4929c7d82cd21264f02af1972c384","target":"graph","created_at":"2026-07-05T10:43:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.11313/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite prior safety alignment efforts, mainstream LLMs can still generate harmful and unethical content when subjected to jailbreaking attacks. Existing jailbreaking methods fall into two main categories: template-based and optimization-based methods. The former requires significant manual effort and domain knowledge, while the latter, exemplified by Greedy Coordinate Gradient (GCG), which seeks to maximize the likelihood of harmful LLM outputs through token-level optimization, also encounters several limitations: requiring white-box access, necessitating pre-constructed affirmative phrase, a","authors_text":"Chao Shen, Juan Zhai, Shiqing Ma, Weipeng Jiang, Zhengyu Zhao, Zhenting Wang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2024-08-21T03:35:24Z","title":"An Optimizable Suffix Is Worth A Thousand Templates: Efficient Black-box Jailbreaking without Affirmative Phrases via LLM as Optimizer"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.11313","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4b780be2d8a737ea0ee195eeb3448acab26c3871795e7d3d839a0a44f99e0ec9","target":"record","created_at":"2026-07-05T10:43:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"715d3bf55de67162ff2cda4900b2452b15bfca579671d53d457301e884a841df","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2024-08-21T03:35:24Z","title_canon_sha256":"65b4c9d031978fa161bc02d93c35486343b5aca04e49db73bfd4ce5074dd3b74"},"schema_version":"1.0","source":{"id":"2408.11313","kind":"arxiv","version":2}},"canonical_sha256":"1cc9fe48407db447bb373c8e7bd1bccd8ccfac494b196ad403fbaded699f2945","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1cc9fe48407db447bb373c8e7bd1bccd8ccfac494b196ad403fbaded699f2945","first_computed_at":"2026-07-05T10:43:00.893401Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:43:00.893401Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zn7PpJt+IDaSCfVcb/bb4zqxBFMCsZeQoyXfk/JAGSOIncZfO64exnQk5sWyaMxfWDvbeQmmQ3r0WDbgEDegCw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:43:00.893877Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.11313","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4b780be2d8a737ea0ee195eeb3448acab26c3871795e7d3d839a0a44f99e0ec9","sha256:b5fcf05b3cc1f8778fc9e5e882775ee157d4929c7d82cd21264f02af1972c384"],"state_sha256":"1d85a7704dbff37e6f0eac55243a59aa9c3e49c797e59c76b2348d17312b61b7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"K1OYu3wWuGJ+hrGV/Sjm5Gw/FA+KMcH37VuHzzGh8Pg+TAw6GDf644H1ABj3EwU2dik03+p7VC7b1MJS6OfiBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T07:49:20.404672Z","bundle_sha256":"24c3c093f4621debd983cc6e915b977775d7473a4ae5b11ee3dcbd190c5cc153"}}