{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:EZLQNH6QHTQ54MK3YSBHS5ZSJO","short_pith_number":"pith:EZLQNH6Q","canonical_record":{"source":{"id":"2402.17262","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-02-27T07:11:59Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8767433b2056fc6193d909bc2c2ba6e5a07f862ad8d7a2b44e70c28427470ee2","abstract_canon_sha256":"aa432fc7b46baba1383b7a40df086426e7b9dbee299eed5e7a846f3f44e0f21c"},"schema_version":"1.0"},"canonical_sha256":"2657069fd03ce1de315bc4827977324b9d70474d6a0e7a939fc52f803f588725","source":{"kind":"arxiv","id":"2402.17262","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.17262","created_at":"2026-07-05T09:28:10Z"},{"alias_kind":"arxiv_version","alias_value":"2402.17262v2","created_at":"2026-07-05T09:28:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.17262","created_at":"2026-07-05T09:28:10Z"},{"alias_kind":"pith_short_12","alias_value":"EZLQNH6QHTQ5","created_at":"2026-07-05T09:28:10Z"},{"alias_kind":"pith_short_16","alias_value":"EZLQNH6QHTQ54MK3","created_at":"2026-07-05T09:28:10Z"},{"alias_kind":"pith_short_8","alias_value":"EZLQNH6Q","created_at":"2026-07-05T09:28:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:EZLQNH6QHTQ54MK3YSBHS5ZSJO","target":"record","payload":{"canonical_record":{"source":{"id":"2402.17262","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-02-27T07:11:59Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8767433b2056fc6193d909bc2c2ba6e5a07f862ad8d7a2b44e70c28427470ee2","abstract_canon_sha256":"aa432fc7b46baba1383b7a40df086426e7b9dbee299eed5e7a846f3f44e0f21c"},"schema_version":"1.0"},"canonical_sha256":"2657069fd03ce1de315bc4827977324b9d70474d6a0e7a939fc52f803f588725","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:28:10.954724Z","signature_b64":"0N6YTBonzh6RTwbKJPoFEiqeB3e5mYU8Bpg630UsgyPuIKQNNwxNRTp+SbPaaJDQSAVu4blFg9qMTQdeERBcAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2657069fd03ce1de315bc4827977324b9d70474d6a0e7a939fc52f803f588725","last_reissued_at":"2026-07-05T09:28:10.954298Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:28:10.954298Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.17262","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:28:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"64s3vDFyjPvhREifIAMjoJZwWrNbFuLh/rvkLAGAUZO+5PQVTcPIgQHgzBE1xA0e+RS1YROqO5M64MU+8JDdCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T08:10:23.230680Z"},"content_sha256":"0a2918131df7728fa6a761cb3a630b6aabb8fd2277b18f8e4b55823b31e8efdf","schema_version":"1.0","event_id":"sha256:0a2918131df7728fa6a761cb3a630b6aabb8fd2277b18f8e4b55823b31e8efdf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:EZLQNH6QHTQ54MK3YSBHS5ZSJO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Speak Out of Turn: Safety Vulnerability of Large Language Models in Multi-turn Dialogue","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Haopeng Chen, Jiuyang Xiang, Quan Liu, Sen Su, Zhenhong Zhou, Zherui Li","submitted_at":"2024-02-27T07:11:59Z","abstract_excerpt":"Large Language Models (LLMs) have been demonstrated to generate illegal or unethical responses, particularly when subjected to \"jailbreak.\" Research on jailbreak has highlighted the safety issues of LLMs. However, prior studies have predominantly focused on single-turn dialogue, ignoring the potential complexities and risks presented by multi-turn dialogue, a crucial mode through which humans derive information from LLMs. In this paper, we argue that humans could exploit multi-turn dialogue to induce LLMs into generating harmful information. LLMs may not intend to reject cautionary or borderli"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.17262","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.17262/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:28:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DZtQ66n8roPMAvAa1skuhacwYCSF7RB7kDgdN0lWvjfQ8HE5T3l7eyXPHkDOov+XliTUlbtDUwHQKIV4R/StCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T08:10:23.230988Z"},"content_sha256":"aa26993606c9b388a61fdd3832d403a8eebf4b8bc04a9282b163f6994f6244f5","schema_version":"1.0","event_id":"sha256:aa26993606c9b388a61fdd3832d403a8eebf4b8bc04a9282b163f6994f6244f5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EZLQNH6QHTQ54MK3YSBHS5ZSJO/bundle.json","state_url":"https://pith.science/pith/EZLQNH6QHTQ54MK3YSBHS5ZSJO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EZLQNH6QHTQ54MK3YSBHS5ZSJO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T08:10:23Z","links":{"resolver":"https://pith.science/pith/EZLQNH6QHTQ54MK3YSBHS5ZSJO","bundle":"https://pith.science/pith/EZLQNH6QHTQ54MK3YSBHS5ZSJO/bundle.json","state":"https://pith.science/pith/EZLQNH6QHTQ54MK3YSBHS5ZSJO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EZLQNH6QHTQ54MK3YSBHS5ZSJO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:EZLQNH6QHTQ54MK3YSBHS5ZSJO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"aa432fc7b46baba1383b7a40df086426e7b9dbee299eed5e7a846f3f44e0f21c","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-02-27T07:11:59Z","title_canon_sha256":"8767433b2056fc6193d909bc2c2ba6e5a07f862ad8d7a2b44e70c28427470ee2"},"schema_version":"1.0","source":{"id":"2402.17262","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.17262","created_at":"2026-07-05T09:28:10Z"},{"alias_kind":"arxiv_version","alias_value":"2402.17262v2","created_at":"2026-07-05T09:28:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.17262","created_at":"2026-07-05T09:28:10Z"},{"alias_kind":"pith_short_12","alias_value":"EZLQNH6QHTQ5","created_at":"2026-07-05T09:28:10Z"},{"alias_kind":"pith_short_16","alias_value":"EZLQNH6QHTQ54MK3","created_at":"2026-07-05T09:28:10Z"},{"alias_kind":"pith_short_8","alias_value":"EZLQNH6Q","created_at":"2026-07-05T09:28:10Z"}],"graph_snapshots":[{"event_id":"sha256:aa26993606c9b388a61fdd3832d403a8eebf4b8bc04a9282b163f6994f6244f5","target":"graph","created_at":"2026-07-05T09:28:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.17262/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have been demonstrated to generate illegal or unethical responses, particularly when subjected to \"jailbreak.\" Research on jailbreak has highlighted the safety issues of LLMs. However, prior studies have predominantly focused on single-turn dialogue, ignoring the potential complexities and risks presented by multi-turn dialogue, a crucial mode through which humans derive information from LLMs. In this paper, we argue that humans could exploit multi-turn dialogue to induce LLMs into generating harmful information. LLMs may not intend to reject cautionary or borderli","authors_text":"Haopeng Chen, Jiuyang Xiang, Quan Liu, Sen Su, Zhenhong Zhou, Zherui Li","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-02-27T07:11:59Z","title":"Speak Out of Turn: Safety Vulnerability of Large Language Models in Multi-turn Dialogue"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.17262","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0a2918131df7728fa6a761cb3a630b6aabb8fd2277b18f8e4b55823b31e8efdf","target":"record","created_at":"2026-07-05T09:28:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"aa432fc7b46baba1383b7a40df086426e7b9dbee299eed5e7a846f3f44e0f21c","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-02-27T07:11:59Z","title_canon_sha256":"8767433b2056fc6193d909bc2c2ba6e5a07f862ad8d7a2b44e70c28427470ee2"},"schema_version":"1.0","source":{"id":"2402.17262","kind":"arxiv","version":2}},"canonical_sha256":"2657069fd03ce1de315bc4827977324b9d70474d6a0e7a939fc52f803f588725","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2657069fd03ce1de315bc4827977324b9d70474d6a0e7a939fc52f803f588725","first_computed_at":"2026-07-05T09:28:10.954298Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:28:10.954298Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0N6YTBonzh6RTwbKJPoFEiqeB3e5mYU8Bpg630UsgyPuIKQNNwxNRTp+SbPaaJDQSAVu4blFg9qMTQdeERBcAA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:28:10.954724Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.17262","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0a2918131df7728fa6a761cb3a630b6aabb8fd2277b18f8e4b55823b31e8efdf","sha256:aa26993606c9b388a61fdd3832d403a8eebf4b8bc04a9282b163f6994f6244f5"],"state_sha256":"13b829a9e6e1e2837aac809eb2281dcb9d36ccb6a40f214f9168d88ceeb8fe4a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AERTvJLHLU0BVsuD+xSZE8EyIVT2QGaTlgPsWTP0z7qMaX2sGax//dE+dhdxZ5nFfX3OTRRYW+QmPUv9iiIWDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T08:10:23.234682Z","bundle_sha256":"d3e2263939e0b88e15dde91012c1b85b3afffd886bf4fbb18782c5892fb087eb"}}