{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:E4C75SRTK5TWI7V7DAMTBCFHJV","short_pith_number":"pith:E4C75SRT","canonical_record":{"source":{"id":"2407.16205","kind":"arxiv","version":6},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-23T06:14:41Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"690a9719a47b29ffb7178e5139852ac7ab1bea152990fe5e51a8276c237ad675","abstract_canon_sha256":"e8b3052bf35c7cb0dd32efda23a7892d8e77c4397d2a59acbb2d48a334159957"},"schema_version":"1.0"},"canonical_sha256":"2705feca335767647ebf18193088a74d4ca0f12b67d1ca13eb44cb2eb7b1d9e5","source":{"kind":"arxiv","id":"2407.16205","version":6},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.16205","created_at":"2026-07-05T11:23:17Z"},{"alias_kind":"arxiv_version","alias_value":"2407.16205v6","created_at":"2026-07-05T11:23:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.16205","created_at":"2026-07-05T11:23:17Z"},{"alias_kind":"pith_short_12","alias_value":"E4C75SRTK5TW","created_at":"2026-07-05T11:23:17Z"},{"alias_kind":"pith_short_16","alias_value":"E4C75SRTK5TWI7V7","created_at":"2026-07-05T11:23:17Z"},{"alias_kind":"pith_short_8","alias_value":"E4C75SRT","created_at":"2026-07-05T11:23:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:E4C75SRTK5TWI7V7DAMTBCFHJV","target":"record","payload":{"canonical_record":{"source":{"id":"2407.16205","kind":"arxiv","version":6},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-23T06:14:41Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"690a9719a47b29ffb7178e5139852ac7ab1bea152990fe5e51a8276c237ad675","abstract_canon_sha256":"e8b3052bf35c7cb0dd32efda23a7892d8e77c4397d2a59acbb2d48a334159957"},"schema_version":"1.0"},"canonical_sha256":"2705feca335767647ebf18193088a74d4ca0f12b67d1ca13eb44cb2eb7b1d9e5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:23:17.215287Z","signature_b64":"esr/pm+c7HZZuIsV1Ez2HSiph5bwT7gFl/3mWm8/UkYxA1WZne/1G9sXETAAbR+IrinnsFqYjIScTg3AoqLRDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2705feca335767647ebf18193088a74d4ca0f12b67d1ca13eb44cb2eb7b1d9e5","last_reissued_at":"2026-07-05T11:23:17.214790Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:23:17.214790Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.16205","source_version":6,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:23:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PYgFsPwkBDSrbCp0orKKNRUpXmpNjzPk4nQL3rQLBAmg5MEo2Wzk7CW1YLU6/FhR64qyCwsOI1DJgxy47m+QDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T17:28:48.386131Z"},"content_sha256":"ed019ae5cefa8055d15d882a92603e7168822959a47f59a5ee0a0f6c5d62c794","schema_version":"1.0","event_id":"sha256:ed019ae5cefa8055d15d882a92603e7168822959a47f59a5ee0a0f6c5d62c794"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:E4C75SRTK5TWI7V7DAMTBCFHJV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Changting Lin, Hongming Yang, Meng Han, Rongchang Li, Shi Lin, Wenpeng Xing, Xun Wang","submitted_at":"2024-07-23T06:14:41Z","abstract_excerpt":"The rapid development of Large Language Models (LLMs) has brought impressive advancements across various tasks. However, despite these achievements, LLMs still pose inherent safety risks, especially in the context of jailbreak attacks. Most existing jailbreak methods follow an input-level manipulation paradigm to bypass safety mechanisms. Yet, as alignment techniques improve, such attacks are becoming increasingly detectable. In this work, we identify an underexplored threat vector: the model's internal reasoning process, which can be manipulated to elicit harmful outputs in a more stealthy wa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.16205","kind":"arxiv","version":6},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.16205/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:23:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LJuLE3phUbpuuYzahKHptYquvPUXoweZXuWUBiOLOTNIKYe+KhyZbk0H/MeyMoZy7dSV0BUoQtiqOiIJ2X1lCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T17:28:48.387090Z"},"content_sha256":"9711f72d0a7cbde232fcd91335a4a792bec365cd9dcdda26a813b22a484fed25","schema_version":"1.0","event_id":"sha256:9711f72d0a7cbde232fcd91335a4a792bec365cd9dcdda26a813b22a484fed25"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/E4C75SRTK5TWI7V7DAMTBCFHJV/bundle.json","state_url":"https://pith.science/pith/E4C75SRTK5TWI7V7DAMTBCFHJV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/E4C75SRTK5TWI7V7DAMTBCFHJV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T17:28:48Z","links":{"resolver":"https://pith.science/pith/E4C75SRTK5TWI7V7DAMTBCFHJV","bundle":"https://pith.science/pith/E4C75SRTK5TWI7V7DAMTBCFHJV/bundle.json","state":"https://pith.science/pith/E4C75SRTK5TWI7V7DAMTBCFHJV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/E4C75SRTK5TWI7V7DAMTBCFHJV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:E4C75SRTK5TWI7V7DAMTBCFHJV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e8b3052bf35c7cb0dd32efda23a7892d8e77c4397d2a59acbb2d48a334159957","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-23T06:14:41Z","title_canon_sha256":"690a9719a47b29ffb7178e5139852ac7ab1bea152990fe5e51a8276c237ad675"},"schema_version":"1.0","source":{"id":"2407.16205","kind":"arxiv","version":6}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.16205","created_at":"2026-07-05T11:23:17Z"},{"alias_kind":"arxiv_version","alias_value":"2407.16205v6","created_at":"2026-07-05T11:23:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.16205","created_at":"2026-07-05T11:23:17Z"},{"alias_kind":"pith_short_12","alias_value":"E4C75SRTK5TW","created_at":"2026-07-05T11:23:17Z"},{"alias_kind":"pith_short_16","alias_value":"E4C75SRTK5TWI7V7","created_at":"2026-07-05T11:23:17Z"},{"alias_kind":"pith_short_8","alias_value":"E4C75SRT","created_at":"2026-07-05T11:23:17Z"}],"graph_snapshots":[{"event_id":"sha256:9711f72d0a7cbde232fcd91335a4a792bec365cd9dcdda26a813b22a484fed25","target":"graph","created_at":"2026-07-05T11:23:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.16205/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rapid development of Large Language Models (LLMs) has brought impressive advancements across various tasks. However, despite these achievements, LLMs still pose inherent safety risks, especially in the context of jailbreak attacks. Most existing jailbreak methods follow an input-level manipulation paradigm to bypass safety mechanisms. Yet, as alignment techniques improve, such attacks are becoming increasingly detectable. In this work, we identify an underexplored threat vector: the model's internal reasoning process, which can be manipulated to elicit harmful outputs in a more stealthy wa","authors_text":"Changting Lin, Hongming Yang, Meng Han, Rongchang Li, Shi Lin, Wenpeng Xing, Xun Wang","cross_cats":["cs.AI","cs.CL","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.16205","kind":"arxiv","version":6},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ed019ae5cefa8055d15d882a92603e7168822959a47f59a5ee0a0f6c5d62c794","target":"record","created_at":"2026-07-05T11:23:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e8b3052bf35c7cb0dd32efda23a7892d8e77c4397d2a59acbb2d48a334159957","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-23T06:14:41Z","title_canon_sha256":"690a9719a47b29ffb7178e5139852ac7ab1bea152990fe5e51a8276c237ad675"},"schema_version":"1.0","source":{"id":"2407.16205","kind":"arxiv","version":6}},"canonical_sha256":"2705feca335767647ebf18193088a74d4ca0f12b67d1ca13eb44cb2eb7b1d9e5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2705feca335767647ebf18193088a74d4ca0f12b67d1ca13eb44cb2eb7b1d9e5","first_computed_at":"2026-07-05T11:23:17.214790Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:23:17.214790Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"esr/pm+c7HZZuIsV1Ez2HSiph5bwT7gFl/3mWm8/UkYxA1WZne/1G9sXETAAbR+IrinnsFqYjIScTg3AoqLRDw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:23:17.215287Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.16205","source_kind":"arxiv","source_version":6}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ed019ae5cefa8055d15d882a92603e7168822959a47f59a5ee0a0f6c5d62c794","sha256:9711f72d0a7cbde232fcd91335a4a792bec365cd9dcdda26a813b22a484fed25"],"state_sha256":"754a9a59232460527a319d3dd33183ba6912acf531fddf193cb42f0551a5bc3b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"v4hp+84gFQ2ahpiUqo5R58n9/Vyu2asVoeef6XZldVSrIrixJJ84mvdx1p9reY5K3vB2R0OuHbTGW8aLzrQSDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T17:28:48.392526Z","bundle_sha256":"f941b466a5c7f142486e467ef09f7bb6c6c26ccb45eb2ba95cf1238fe0adaa3d"}}