{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:EXR2Q7AAZBB32W6FFM2X226NUQ","short_pith_number":"pith:EXR2Q7AA","canonical_record":{"source":{"id":"2406.05498","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-08T15:45:31Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"28cc0b37cdddb319cdae61fb08e125a04735355ac1915a6382a80a568c575f83","abstract_canon_sha256":"4a46d726b1a371c17837387eed71c1f8e388f4e04a09bacc556088bdae301d8b"},"schema_version":"1.0"},"canonical_sha256":"25e3a87c00c843bd5bc52b357d6bcda43e615a2911b549a0ef233c7d66f665e4","source":{"kind":"arxiv","id":"2406.05498","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.05498","created_at":"2026-07-05T10:09:44Z"},{"alias_kind":"arxiv_version","alias_value":"2406.05498v3","created_at":"2026-07-05T10:09:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.05498","created_at":"2026-07-05T10:09:44Z"},{"alias_kind":"pith_short_12","alias_value":"EXR2Q7AAZBB3","created_at":"2026-07-05T10:09:44Z"},{"alias_kind":"pith_short_16","alias_value":"EXR2Q7AAZBB32W6F","created_at":"2026-07-05T10:09:44Z"},{"alias_kind":"pith_short_8","alias_value":"EXR2Q7AA","created_at":"2026-07-05T10:09:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:EXR2Q7AAZBB32W6FFM2X226NUQ","target":"record","payload":{"canonical_record":{"source":{"id":"2406.05498","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-08T15:45:31Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"28cc0b37cdddb319cdae61fb08e125a04735355ac1915a6382a80a568c575f83","abstract_canon_sha256":"4a46d726b1a371c17837387eed71c1f8e388f4e04a09bacc556088bdae301d8b"},"schema_version":"1.0"},"canonical_sha256":"25e3a87c00c843bd5bc52b357d6bcda43e615a2911b549a0ef233c7d66f665e4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:09:44.501265Z","signature_b64":"/jvV7hRoFGyocm+qBnDYCIxnjTtMhUvHjP0YK5M3dRFeh3i7eAHWxIUJBcaLaVKKu9eyxIhXZo6SXBV119dGAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"25e3a87c00c843bd5bc52b357d6bcda43e615a2911b549a0ef233c7d66f665e4","last_reissued_at":"2026-07-05T10:09:44.500798Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:09:44.500798Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.05498","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:09:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3okbKAVhM8o8V0pD8tSllW4BCG8YcmAaU92yLfCkqOD1N+PUhYmrmES9iEXqb8kUMG/Qqs2Mx1dYl/LeML1LDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T19:45:08.983718Z"},"content_sha256":"d3d803258a734a2a8371b928178e7d90af08715c87863dad1d773de94fc8a515","schema_version":"1.0","event_id":"sha256:d3d803258a734a2a8371b928178e7d90af08715c87863dad1d773de94fc8a515"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:EXR2Q7AAZBB32W6FFM2X226NUQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Daoyuan Wu, Juergen Rahmel, Ning Liu, Pingchuan Ma, Shuai Wang, Xunguang Wang, Yang Liu, Yingjiu Li, Zhenlan Ji, Zongjie Li","submitted_at":"2024-06-08T15:45:31Z","abstract_excerpt":"Jailbreaking is an emerging adversarial attack that bypasses the safety alignment deployed in off-the-shelf large language models (LLMs) and has evolved into multiple categories: human-based, optimization-based, generation-based, and the recent indirect and multilingual jailbreaks. However, delivering a practical jailbreak defense is challenging because it needs to not only handle all the above jailbreak attacks but also incur negligible delays to user prompts, as well as be compatible with both open-source and closed-source LLMs. Inspired by how the traditional security concept of shadow stac"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.05498","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.05498/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:09:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"owAoF8idFuAgbZeVzbI1C/KMs4t3ZrR6QpnssQY+2OaVi8FI/P/2l2S+wTjRvhiDo1e8jT9UjW6LK2ayIGVqDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T19:45:08.984215Z"},"content_sha256":"89b1e6d2b3a1a673f5792d9e2987b830ad7a26addc46a6ff59a8c54986d084c9","schema_version":"1.0","event_id":"sha256:89b1e6d2b3a1a673f5792d9e2987b830ad7a26addc46a6ff59a8c54986d084c9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EXR2Q7AAZBB32W6FFM2X226NUQ/bundle.json","state_url":"https://pith.science/pith/EXR2Q7AAZBB32W6FFM2X226NUQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EXR2Q7AAZBB32W6FFM2X226NUQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T19:45:08Z","links":{"resolver":"https://pith.science/pith/EXR2Q7AAZBB32W6FFM2X226NUQ","bundle":"https://pith.science/pith/EXR2Q7AAZBB32W6FFM2X226NUQ/bundle.json","state":"https://pith.science/pith/EXR2Q7AAZBB32W6FFM2X226NUQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EXR2Q7AAZBB32W6FFM2X226NUQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:EXR2Q7AAZBB32W6FFM2X226NUQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4a46d726b1a371c17837387eed71c1f8e388f4e04a09bacc556088bdae301d8b","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-08T15:45:31Z","title_canon_sha256":"28cc0b37cdddb319cdae61fb08e125a04735355ac1915a6382a80a568c575f83"},"schema_version":"1.0","source":{"id":"2406.05498","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.05498","created_at":"2026-07-05T10:09:44Z"},{"alias_kind":"arxiv_version","alias_value":"2406.05498v3","created_at":"2026-07-05T10:09:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.05498","created_at":"2026-07-05T10:09:44Z"},{"alias_kind":"pith_short_12","alias_value":"EXR2Q7AAZBB3","created_at":"2026-07-05T10:09:44Z"},{"alias_kind":"pith_short_16","alias_value":"EXR2Q7AAZBB32W6F","created_at":"2026-07-05T10:09:44Z"},{"alias_kind":"pith_short_8","alias_value":"EXR2Q7AA","created_at":"2026-07-05T10:09:44Z"}],"graph_snapshots":[{"event_id":"sha256:89b1e6d2b3a1a673f5792d9e2987b830ad7a26addc46a6ff59a8c54986d084c9","target":"graph","created_at":"2026-07-05T10:09:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.05498/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Jailbreaking is an emerging adversarial attack that bypasses the safety alignment deployed in off-the-shelf large language models (LLMs) and has evolved into multiple categories: human-based, optimization-based, generation-based, and the recent indirect and multilingual jailbreaks. However, delivering a practical jailbreak defense is challenging because it needs to not only handle all the above jailbreak attacks but also incur negligible delays to user prompts, as well as be compatible with both open-source and closed-source LLMs. Inspired by how the traditional security concept of shadow stac","authors_text":"Daoyuan Wu, Juergen Rahmel, Ning Liu, Pingchuan Ma, Shuai Wang, Xunguang Wang, Yang Liu, Yingjiu Li, Zhenlan Ji, Zongjie Li","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-08T15:45:31Z","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.05498","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d3d803258a734a2a8371b928178e7d90af08715c87863dad1d773de94fc8a515","target":"record","created_at":"2026-07-05T10:09:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4a46d726b1a371c17837387eed71c1f8e388f4e04a09bacc556088bdae301d8b","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-08T15:45:31Z","title_canon_sha256":"28cc0b37cdddb319cdae61fb08e125a04735355ac1915a6382a80a568c575f83"},"schema_version":"1.0","source":{"id":"2406.05498","kind":"arxiv","version":3}},"canonical_sha256":"25e3a87c00c843bd5bc52b357d6bcda43e615a2911b549a0ef233c7d66f665e4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"25e3a87c00c843bd5bc52b357d6bcda43e615a2911b549a0ef233c7d66f665e4","first_computed_at":"2026-07-05T10:09:44.500798Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:09:44.500798Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/jvV7hRoFGyocm+qBnDYCIxnjTtMhUvHjP0YK5M3dRFeh3i7eAHWxIUJBcaLaVKKu9eyxIhXZo6SXBV119dGAw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:09:44.501265Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.05498","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d3d803258a734a2a8371b928178e7d90af08715c87863dad1d773de94fc8a515","sha256:89b1e6d2b3a1a673f5792d9e2987b830ad7a26addc46a6ff59a8c54986d084c9"],"state_sha256":"b3f9ef7dabe1617143d5dec03a475446b392df994046495590f347fcf94aa345"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4YG/bKvoi3gbytU+IG/zN24IG/wESRxY21PST8XPh9btPaQS+pYjffN0Zzv6xnxF9Yls2DCoDmcC35DVcSF/Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T19:45:08.987888Z","bundle_sha256":"b70d11a6e8b71118ab38330cf484150b82d3e7f6142af39f60f35d6ad6baa86f"}}