{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:ET7ZDUNRJ7KBW3FNNWOLB3KHZO","short_pith_number":"pith:ET7ZDUNR","canonical_record":{"source":{"id":"2412.12192","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-13T23:58:12Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"18c4c8e339616cfc8c907e5c18d45872e2a51c1df4cd06c389086647c7240047","abstract_canon_sha256":"7b5ccabe74f3dccbab31e841d10915fdf6c0441830ff37ec79844a128992f5dc"},"schema_version":"1.0"},"canonical_sha256":"24ff91d1b14fd41b6cad6d9cb0ed47cb8198fe43e9ebc4088fb7b2c079b3616a","source":{"kind":"arxiv","id":"2412.12192","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.12192","created_at":"2026-07-05T09:50:11Z"},{"alias_kind":"arxiv_version","alias_value":"2412.12192v1","created_at":"2026-07-05T09:50:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.12192","created_at":"2026-07-05T09:50:11Z"},{"alias_kind":"pith_short_12","alias_value":"ET7ZDUNRJ7KB","created_at":"2026-07-05T09:50:11Z"},{"alias_kind":"pith_short_16","alias_value":"ET7ZDUNRJ7KBW3FN","created_at":"2026-07-05T09:50:11Z"},{"alias_kind":"pith_short_8","alias_value":"ET7ZDUNR","created_at":"2026-07-05T09:50:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:ET7ZDUNRJ7KBW3FNNWOLB3KHZO","target":"record","payload":{"canonical_record":{"source":{"id":"2412.12192","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-13T23:58:12Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"18c4c8e339616cfc8c907e5c18d45872e2a51c1df4cd06c389086647c7240047","abstract_canon_sha256":"7b5ccabe74f3dccbab31e841d10915fdf6c0441830ff37ec79844a128992f5dc"},"schema_version":"1.0"},"canonical_sha256":"24ff91d1b14fd41b6cad6d9cb0ed47cb8198fe43e9ebc4088fb7b2c079b3616a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:50:11.321870Z","signature_b64":"k21RVzJSP9vS6uEMkr9f/U33WW5p15A5JPm4tLfufKtO802YuHmPaQiJYxzI9rlJA7NAfa08ITwi9Q1LYrdFBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"24ff91d1b14fd41b6cad6d9cb0ed47cb8198fe43e9ebc4088fb7b2c079b3616a","last_reissued_at":"2026-07-05T09:50:11.321358Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:50:11.321358Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.12192","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:50:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2YUqgglwOU6ghNosPcB3OykbvsHnGqja/XHHJGdsX2OvB9p/+e4YVdXrQCC0EzqDD1C3sOB9GshVlUqDDfv0Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T17:25:42.289730Z"},"content_sha256":"90ed8158d5e8ff6b5ff86108e1e31a78991de9f063e2b559f42779f5123a7220","schema_version":"1.0","event_id":"sha256:90ed8158d5e8ff6b5ff86108e1e31a78991de9f063e2b559f42779f5123a7220"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:ET7ZDUNRJ7KBW3FNNWOLB3KHZO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Bocheng Chen, Guangliang Liu, Kristen Marie Johnson, Ramtin Pedarsani, Zhiyu Xue","submitted_at":"2024-12-13T23:58:12Z","abstract_excerpt":"The security of Large Language Models (LLMs) has become an important research topic since the emergence of ChatGPT. Though there have been various effective methods to defend against jailbreak attacks, prefilling attacks remain an unsolved and popular threat against open-sourced LLMs. In-Context Learning (ICL) offers a computationally efficient defense against various jailbreak attacks, yet no effective ICL methods have been developed to counter prefilling attacks. In this paper, we: (1) show that ICL can effectively defend against prefilling jailbreak attacks by employing adversative sentence"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.12192","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.12192/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:50:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eli1v6GWN/PAvYxaE04fvPbzUf52KYNUeCAQSXYYfkTD80paDVbf8POvAb3xd7ENT/SsHO9225PymK4aASxFDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T17:25:42.291249Z"},"content_sha256":"1c88d2ae224995a628d5aeb99bf1c413d86ca971b7b0de78d01ce642aa3f2222","schema_version":"1.0","event_id":"sha256:1c88d2ae224995a628d5aeb99bf1c413d86ca971b7b0de78d01ce642aa3f2222"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/bundle.json","state_url":"https://pith.science/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T17:25:42Z","links":{"resolver":"https://pith.science/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO","bundle":"https://pith.science/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/bundle.json","state":"https://pith.science/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:ET7ZDUNRJ7KBW3FNNWOLB3KHZO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7b5ccabe74f3dccbab31e841d10915fdf6c0441830ff37ec79844a128992f5dc","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-13T23:58:12Z","title_canon_sha256":"18c4c8e339616cfc8c907e5c18d45872e2a51c1df4cd06c389086647c7240047"},"schema_version":"1.0","source":{"id":"2412.12192","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.12192","created_at":"2026-07-05T09:50:11Z"},{"alias_kind":"arxiv_version","alias_value":"2412.12192v1","created_at":"2026-07-05T09:50:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.12192","created_at":"2026-07-05T09:50:11Z"},{"alias_kind":"pith_short_12","alias_value":"ET7ZDUNRJ7KB","created_at":"2026-07-05T09:50:11Z"},{"alias_kind":"pith_short_16","alias_value":"ET7ZDUNRJ7KBW3FN","created_at":"2026-07-05T09:50:11Z"},{"alias_kind":"pith_short_8","alias_value":"ET7ZDUNR","created_at":"2026-07-05T09:50:11Z"}],"graph_snapshots":[{"event_id":"sha256:1c88d2ae224995a628d5aeb99bf1c413d86ca971b7b0de78d01ce642aa3f2222","target":"graph","created_at":"2026-07-05T09:50:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.12192/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The security of Large Language Models (LLMs) has become an important research topic since the emergence of ChatGPT. Though there have been various effective methods to defend against jailbreak attacks, prefilling attacks remain an unsolved and popular threat against open-sourced LLMs. In-Context Learning (ICL) offers a computationally efficient defense against various jailbreak attacks, yet no effective ICL methods have been developed to counter prefilling attacks. In this paper, we: (1) show that ICL can effectively defend against prefilling jailbreak attacks by employing adversative sentence","authors_text":"Bocheng Chen, Guangliang Liu, Kristen Marie Johnson, Ramtin Pedarsani, Zhiyu Xue","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.12192","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:90ed8158d5e8ff6b5ff86108e1e31a78991de9f063e2b559f42779f5123a7220","target":"record","created_at":"2026-07-05T09:50:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7b5ccabe74f3dccbab31e841d10915fdf6c0441830ff37ec79844a128992f5dc","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-13T23:58:12Z","title_canon_sha256":"18c4c8e339616cfc8c907e5c18d45872e2a51c1df4cd06c389086647c7240047"},"schema_version":"1.0","source":{"id":"2412.12192","kind":"arxiv","version":1}},"canonical_sha256":"24ff91d1b14fd41b6cad6d9cb0ed47cb8198fe43e9ebc4088fb7b2c079b3616a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"24ff91d1b14fd41b6cad6d9cb0ed47cb8198fe43e9ebc4088fb7b2c079b3616a","first_computed_at":"2026-07-05T09:50:11.321358Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:50:11.321358Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"k21RVzJSP9vS6uEMkr9f/U33WW5p15A5JPm4tLfufKtO802YuHmPaQiJYxzI9rlJA7NAfa08ITwi9Q1LYrdFBA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:50:11.321870Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.12192","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:90ed8158d5e8ff6b5ff86108e1e31a78991de9f063e2b559f42779f5123a7220","sha256:1c88d2ae224995a628d5aeb99bf1c413d86ca971b7b0de78d01ce642aa3f2222"],"state_sha256":"512558acb4d29c2558a0b9993036ffed710c252526a28f224d3967975d60403f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jWiO73LI5Lp7mcGJO1QEApahIel251ToGzufxc4P+cSX4r6lzJ7YGaBERjCI5NftaeawpdpJZuox2x3V5JaLBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T17:25:42.298402Z","bundle_sha256":"25a524d22c672ff8d17b56ef4d0d7bf8da5882785b22593830125685d79a4dac"}}