{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:EBOIS6IUYU7PPI7ZXGRWLTKUOB","short_pith_number":"pith:EBOIS6IU","canonical_record":{"source":{"id":"2505.15753","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-21T16:58:14Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"34fbcc2178fd39a46350de3decf946655490e746e60859dff20b91282d4d9293","abstract_canon_sha256":"3431c34a8a1a63d7dcd1ab246f7ece65f6dfd7e64261a181ba041cc38433af15"},"schema_version":"1.0"},"canonical_sha256":"205c897914c53ef7a3f9b9a365cd547057326b40a7be0f34e3d49d929fad1b2c","source":{"kind":"arxiv","id":"2505.15753","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.15753","created_at":"2026-07-05T11:06:57Z"},{"alias_kind":"arxiv_version","alias_value":"2505.15753v1","created_at":"2026-07-05T11:06:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.15753","created_at":"2026-07-05T11:06:57Z"},{"alias_kind":"pith_short_12","alias_value":"EBOIS6IUYU7P","created_at":"2026-07-05T11:06:57Z"},{"alias_kind":"pith_short_16","alias_value":"EBOIS6IUYU7PPI7Z","created_at":"2026-07-05T11:06:57Z"},{"alias_kind":"pith_short_8","alias_value":"EBOIS6IU","created_at":"2026-07-05T11:06:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:EBOIS6IUYU7PPI7ZXGRWLTKUOB","target":"record","payload":{"canonical_record":{"source":{"id":"2505.15753","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-21T16:58:14Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"34fbcc2178fd39a46350de3decf946655490e746e60859dff20b91282d4d9293","abstract_canon_sha256":"3431c34a8a1a63d7dcd1ab246f7ece65f6dfd7e64261a181ba041cc38433af15"},"schema_version":"1.0"},"canonical_sha256":"205c897914c53ef7a3f9b9a365cd547057326b40a7be0f34e3d49d929fad1b2c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:06:57.453675Z","signature_b64":"KJJf2fL/SsE0cDVepI4C/8JdLOgKr13F6lmr2eAkZ5z147k92Jnet0exEZGuCUYFE2GmeDkjUGq8DmyIJgdYDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"205c897914c53ef7a3f9b9a365cd547057326b40a7be0f34e3d49d929fad1b2c","last_reissued_at":"2026-07-05T11:06:57.453160Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:06:57.453160Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.15753","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:06:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KuXaQmoPnXgC+K9GwFoKQz9oMHFxDu9rTp9YbLsGpP0ymoIiLXKFIxvMaxC7rxRm6fqzXcuV5VisK2spe8CSAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T22:55:03.203821Z"},"content_sha256":"daa565131ac7e63d19e6e6b943f870a0d1201dd3515d2d87db9d8cbc86717670","schema_version":"1.0","event_id":"sha256:daa565131ac7e63d19e6e6b943f870a0d1201dd3515d2d87db9d8cbc86717670"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:EBOIS6IUYU7PPI7ZXGRWLTKUOB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Ang Li, Taiye Chen, Yisen Wang, Zeming Wei","submitted_at":"2025-05-21T16:58:14Z","abstract_excerpt":"Large Language Models (LLMs) are known to be vulnerable to jailbreaking attacks, wherein adversaries exploit carefully engineered prompts to induce harmful or unethical responses. Such threats have raised critical concerns about the safety and reliability of LLMs in real-world deployment. While existing defense mechanisms partially mitigate such risks, subsequent advancements in adversarial techniques have enabled novel jailbreaking methods to circumvent these protections, exposing the limitations of static defense frameworks. In this work, we explore defending against evolving jailbreaking th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.15753","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.15753/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:06:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DKUdzYQEWOJ6Fc0tdE6n/mcARb8GVhibrGYckNc0r7CvmgIfBsaOf+OSVKKFU3PC4gq2gq6cApddKNvVSJZlCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T22:55:03.204332Z"},"content_sha256":"8207c805bde82b6f552d3e0b95103c1d48f40e40a02c12bcb469d164ceacd251","schema_version":"1.0","event_id":"sha256:8207c805bde82b6f552d3e0b95103c1d48f40e40a02c12bcb469d164ceacd251"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EBOIS6IUYU7PPI7ZXGRWLTKUOB/bundle.json","state_url":"https://pith.science/pith/EBOIS6IUYU7PPI7ZXGRWLTKUOB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EBOIS6IUYU7PPI7ZXGRWLTKUOB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T22:55:03Z","links":{"resolver":"https://pith.science/pith/EBOIS6IUYU7PPI7ZXGRWLTKUOB","bundle":"https://pith.science/pith/EBOIS6IUYU7PPI7ZXGRWLTKUOB/bundle.json","state":"https://pith.science/pith/EBOIS6IUYU7PPI7ZXGRWLTKUOB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EBOIS6IUYU7PPI7ZXGRWLTKUOB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:EBOIS6IUYU7PPI7ZXGRWLTKUOB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3431c34a8a1a63d7dcd1ab246f7ece65f6dfd7e64261a181ba041cc38433af15","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-21T16:58:14Z","title_canon_sha256":"34fbcc2178fd39a46350de3decf946655490e746e60859dff20b91282d4d9293"},"schema_version":"1.0","source":{"id":"2505.15753","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.15753","created_at":"2026-07-05T11:06:57Z"},{"alias_kind":"arxiv_version","alias_value":"2505.15753v1","created_at":"2026-07-05T11:06:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.15753","created_at":"2026-07-05T11:06:57Z"},{"alias_kind":"pith_short_12","alias_value":"EBOIS6IUYU7P","created_at":"2026-07-05T11:06:57Z"},{"alias_kind":"pith_short_16","alias_value":"EBOIS6IUYU7PPI7Z","created_at":"2026-07-05T11:06:57Z"},{"alias_kind":"pith_short_8","alias_value":"EBOIS6IU","created_at":"2026-07-05T11:06:57Z"}],"graph_snapshots":[{"event_id":"sha256:8207c805bde82b6f552d3e0b95103c1d48f40e40a02c12bcb469d164ceacd251","target":"graph","created_at":"2026-07-05T11:06:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.15753/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) are known to be vulnerable to jailbreaking attacks, wherein adversaries exploit carefully engineered prompts to induce harmful or unethical responses. Such threats have raised critical concerns about the safety and reliability of LLMs in real-world deployment. While existing defense mechanisms partially mitigate such risks, subsequent advancements in adversarial techniques have enabled novel jailbreaking methods to circumvent these protections, exposing the limitations of static defense frameworks. In this work, we explore defending against evolving jailbreaking th","authors_text":"Ang Li, Taiye Chen, Yisen Wang, Zeming Wei","cross_cats":["cs.AI","cs.CL","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-21T16:58:14Z","title":"Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.15753","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:daa565131ac7e63d19e6e6b943f870a0d1201dd3515d2d87db9d8cbc86717670","target":"record","created_at":"2026-07-05T11:06:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3431c34a8a1a63d7dcd1ab246f7ece65f6dfd7e64261a181ba041cc38433af15","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-21T16:58:14Z","title_canon_sha256":"34fbcc2178fd39a46350de3decf946655490e746e60859dff20b91282d4d9293"},"schema_version":"1.0","source":{"id":"2505.15753","kind":"arxiv","version":1}},"canonical_sha256":"205c897914c53ef7a3f9b9a365cd547057326b40a7be0f34e3d49d929fad1b2c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"205c897914c53ef7a3f9b9a365cd547057326b40a7be0f34e3d49d929fad1b2c","first_computed_at":"2026-07-05T11:06:57.453160Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:06:57.453160Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KJJf2fL/SsE0cDVepI4C/8JdLOgKr13F6lmr2eAkZ5z147k92Jnet0exEZGuCUYFE2GmeDkjUGq8DmyIJgdYDA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:06:57.453675Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.15753","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:daa565131ac7e63d19e6e6b943f870a0d1201dd3515d2d87db9d8cbc86717670","sha256:8207c805bde82b6f552d3e0b95103c1d48f40e40a02c12bcb469d164ceacd251"],"state_sha256":"92c514e5aa5394c62db460d6c3aa6ce6763f5d8fc2e5294d430646bea666c37e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2RnabvB+2bBUU+n9VeXWu1o9UewN/zbA2TBLFd19XudaaGPKbS6Ay25tjS1Lbh4/7LH4nk/175sN5sgNaKx/BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T22:55:03.208290Z","bundle_sha256":"89de078a0b3ee0a7e99adb06a3618ac7442e81862e9a2814564d02aa1e343d03"}}