{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:E5GEHXGMLIMRK7Z4TTMOTEFDTU","short_pith_number":"pith:E5GEHXGM","canonical_record":{"source":{"id":"2412.16359","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-12-20T21:43:52Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c2724eacaf84bb44ee0e43fd407becd87c47035fe536465e16aa785799464008","abstract_canon_sha256":"5416418db9e3b340724c862109a33479d4edfd08ea0957683cbfc7b78c73d1bc"},"schema_version":"1.0"},"canonical_sha256":"274c43dccc5a19157f3c9cd8e990a39d1a43e388b7fb18db940ac1974c8e4e30","source":{"kind":"arxiv","id":"2412.16359","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.16359","created_at":"2026-07-05T11:11:38Z"},{"alias_kind":"arxiv_version","alias_value":"2412.16359v3","created_at":"2026-07-05T11:11:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.16359","created_at":"2026-07-05T11:11:38Z"},{"alias_kind":"pith_short_12","alias_value":"E5GEHXGMLIMR","created_at":"2026-07-05T11:11:38Z"},{"alias_kind":"pith_short_16","alias_value":"E5GEHXGMLIMRK7Z4","created_at":"2026-07-05T11:11:38Z"},{"alias_kind":"pith_short_8","alias_value":"E5GEHXGM","created_at":"2026-07-05T11:11:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:E5GEHXGMLIMRK7Z4TTMOTEFDTU","target":"record","payload":{"canonical_record":{"source":{"id":"2412.16359","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-12-20T21:43:52Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c2724eacaf84bb44ee0e43fd407becd87c47035fe536465e16aa785799464008","abstract_canon_sha256":"5416418db9e3b340724c862109a33479d4edfd08ea0957683cbfc7b78c73d1bc"},"schema_version":"1.0"},"canonical_sha256":"274c43dccc5a19157f3c9cd8e990a39d1a43e388b7fb18db940ac1974c8e4e30","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:11:38.840234Z","signature_b64":"og+G7X++YIs37f/LDN7iluR4cRJxmTFuK/Qn2glZdK59pZVpBJUnbF2rLY8QhcvHAqEz5QQy+LXcfIdw6X/pAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"274c43dccc5a19157f3c9cd8e990a39d1a43e388b7fb18db940ac1974c8e4e30","last_reissued_at":"2026-07-05T11:11:38.839647Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:11:38.839647Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.16359","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:11:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"N5GcbiIv+gx6YE0trZduFTS2+BAojcRBpY7lRY7ti2gyacQ68lJJTv3wbUcAsVLYBhGP5PcZsVbJI3x+gYjUCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:32:37.456213Z"},"content_sha256":"5a299934b3e99aefabec89e6ef068ba476812a64ae8c3ddce26877a66d28a2f3","schema_version":"1.0","event_id":"sha256:5a299934b3e99aefabec89e6ef068ba476812a64ae8c3ddce26877a66d28a2f3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:E5GEHXGMLIMRK7Z4TTMOTEFDTU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Aman Chadha, Edward Raff, Manas Gaur, Nilanjana Das","submitted_at":"2024-12-20T21:43:52Z","abstract_excerpt":"As the AI systems become deeply embedded in social media platforms, we've uncovered a concerning security vulnerability that goes beyond traditional adversarial attacks. It becomes important to assess the risks of LLMs before the general public use them on social media platforms to avoid any adverse impacts. Unlike obvious nonsensical text strings that safety systems can easily catch, our work reveals that human-readable situation-driven adversarial full-prompts that leverage situational context are effective but much harder to detect. We found that skilled attackers can exploit the vulnerabil"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.16359","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.16359/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:11:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kbfIA4y4M8+5atwc9xvnrlKK1CvXvrOoWtXv8vxB4ZT4yvZaV7RwCOV8QfZ1eQFTmYi6YU1VXZ45F6pbGrdQAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:32:37.456619Z"},"content_sha256":"ab3eadad01fde25667f238b9367224bac7c0e746fb635854ef0d2fed63fad9af","schema_version":"1.0","event_id":"sha256:ab3eadad01fde25667f238b9367224bac7c0e746fb635854ef0d2fed63fad9af"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/E5GEHXGMLIMRK7Z4TTMOTEFDTU/bundle.json","state_url":"https://pith.science/pith/E5GEHXGMLIMRK7Z4TTMOTEFDTU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/E5GEHXGMLIMRK7Z4TTMOTEFDTU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T05:32:37Z","links":{"resolver":"https://pith.science/pith/E5GEHXGMLIMRK7Z4TTMOTEFDTU","bundle":"https://pith.science/pith/E5GEHXGMLIMRK7Z4TTMOTEFDTU/bundle.json","state":"https://pith.science/pith/E5GEHXGMLIMRK7Z4TTMOTEFDTU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/E5GEHXGMLIMRK7Z4TTMOTEFDTU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:E5GEHXGMLIMRK7Z4TTMOTEFDTU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5416418db9e3b340724c862109a33479d4edfd08ea0957683cbfc7b78c73d1bc","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-12-20T21:43:52Z","title_canon_sha256":"c2724eacaf84bb44ee0e43fd407becd87c47035fe536465e16aa785799464008"},"schema_version":"1.0","source":{"id":"2412.16359","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.16359","created_at":"2026-07-05T11:11:38Z"},{"alias_kind":"arxiv_version","alias_value":"2412.16359v3","created_at":"2026-07-05T11:11:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.16359","created_at":"2026-07-05T11:11:38Z"},{"alias_kind":"pith_short_12","alias_value":"E5GEHXGMLIMR","created_at":"2026-07-05T11:11:38Z"},{"alias_kind":"pith_short_16","alias_value":"E5GEHXGMLIMRK7Z4","created_at":"2026-07-05T11:11:38Z"},{"alias_kind":"pith_short_8","alias_value":"E5GEHXGM","created_at":"2026-07-05T11:11:38Z"}],"graph_snapshots":[{"event_id":"sha256:ab3eadad01fde25667f238b9367224bac7c0e746fb635854ef0d2fed63fad9af","target":"graph","created_at":"2026-07-05T11:11:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.16359/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As the AI systems become deeply embedded in social media platforms, we've uncovered a concerning security vulnerability that goes beyond traditional adversarial attacks. It becomes important to assess the risks of LLMs before the general public use them on social media platforms to avoid any adverse impacts. Unlike obvious nonsensical text strings that safety systems can easily catch, our work reveals that human-readable situation-driven adversarial full-prompts that leverage situational context are effective but much harder to detect. We found that skilled attackers can exploit the vulnerabil","authors_text":"Aman Chadha, Edward Raff, Manas Gaur, Nilanjana Das","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.16359","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5a299934b3e99aefabec89e6ef068ba476812a64ae8c3ddce26877a66d28a2f3","target":"record","created_at":"2026-07-05T11:11:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5416418db9e3b340724c862109a33479d4edfd08ea0957683cbfc7b78c73d1bc","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-12-20T21:43:52Z","title_canon_sha256":"c2724eacaf84bb44ee0e43fd407becd87c47035fe536465e16aa785799464008"},"schema_version":"1.0","source":{"id":"2412.16359","kind":"arxiv","version":3}},"canonical_sha256":"274c43dccc5a19157f3c9cd8e990a39d1a43e388b7fb18db940ac1974c8e4e30","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"274c43dccc5a19157f3c9cd8e990a39d1a43e388b7fb18db940ac1974c8e4e30","first_computed_at":"2026-07-05T11:11:38.839647Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:11:38.839647Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"og+G7X++YIs37f/LDN7iluR4cRJxmTFuK/Qn2glZdK59pZVpBJUnbF2rLY8QhcvHAqEz5QQy+LXcfIdw6X/pAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:11:38.840234Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.16359","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5a299934b3e99aefabec89e6ef068ba476812a64ae8c3ddce26877a66d28a2f3","sha256:ab3eadad01fde25667f238b9367224bac7c0e746fb635854ef0d2fed63fad9af"],"state_sha256":"814cc3f352c1ff028d52381aa1b9f4c68de1362364325ba5ddc3ff84faef8861"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bUWfQM7JcZ7tw1fBD50TecVkCUtxCNTAD/GeiDRiG9P58oGJUBI1I3DlCw9ldBiCVURZ76iPPq3qSHnCGSJrCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T05:32:37.458938Z","bundle_sha256":"29a3e3fef3879a9b34a8c489e0deb857f4427d6c6a932ffbb1721de20885cc4a"}}