{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:F2HGAKBRV7XIAUDRI7MTAYES5Y","short_pith_number":"pith:F2HGAKBR","canonical_record":{"source":{"id":"2501.04931","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-09T02:47:01Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"ed8bd6495c959ac39f1035c3e1a9bc94b14b1bdfed628cecbe94e07a2593930a","abstract_canon_sha256":"15b73bb2752996a7eff5123f312e85ad48b5c162e77f08b2fbf37bf6385ab0e2"},"schema_version":"1.0"},"canonical_sha256":"2e8e602831afee80507147d9306092ee1294cf3f30bb672e04dcfd0432b041a8","source":{"kind":"arxiv","id":"2501.04931","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.04931","created_at":"2026-07-05T11:28:13Z"},{"alias_kind":"arxiv_version","alias_value":"2501.04931v2","created_at":"2026-07-05T11:28:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.04931","created_at":"2026-07-05T11:28:13Z"},{"alias_kind":"pith_short_12","alias_value":"F2HGAKBRV7XI","created_at":"2026-07-05T11:28:13Z"},{"alias_kind":"pith_short_16","alias_value":"F2HGAKBRV7XIAUDR","created_at":"2026-07-05T11:28:13Z"},{"alias_kind":"pith_short_8","alias_value":"F2HGAKBR","created_at":"2026-07-05T11:28:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:F2HGAKBRV7XIAUDRI7MTAYES5Y","target":"record","payload":{"canonical_record":{"source":{"id":"2501.04931","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-09T02:47:01Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"ed8bd6495c959ac39f1035c3e1a9bc94b14b1bdfed628cecbe94e07a2593930a","abstract_canon_sha256":"15b73bb2752996a7eff5123f312e85ad48b5c162e77f08b2fbf37bf6385ab0e2"},"schema_version":"1.0"},"canonical_sha256":"2e8e602831afee80507147d9306092ee1294cf3f30bb672e04dcfd0432b041a8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:28:13.460544Z","signature_b64":"1e1fV528rcozpGYRwCF9/ss5jdUJTthNgnseeorG4+0+hbf9djHZh/0VjOhxIUXPHABVQReGQrnPxIVtm1LtDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2e8e602831afee80507147d9306092ee1294cf3f30bb672e04dcfd0432b041a8","last_reissued_at":"2026-07-05T11:28:13.460024Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:28:13.460024Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.04931","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:28:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cXXFv5f0nFfSwSjFqWtikHKHO/b97NKLM0SR7KhwCrigqk1v29a8avGp9qA6PA1vGIiek5FViPid/S09ZKS1AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-19T19:33:31.993003Z"},"content_sha256":"bca372a23bc1c921e12b076000156cd216d3bc5d0a60a906b7a2ec10a519a396","schema_version":"1.0","event_id":"sha256:bca372a23bc1c921e12b076000156cd216d3bc5d0a60a906b7a2ec10a519a396"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:F2HGAKBRV7XIAUDRI7MTAYES5Y","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Caixin Kang, Chi Chen, Fengxiang Wang, Hui Xue, Jialing Tao, Ranjie Duan, Shiji Zhao, Shouwei Ruan, Xingxing Wei, Yuefeng Chen","submitted_at":"2025-01-09T02:47:01Z","abstract_excerpt":"Multimodal Large Language Models (MLLMs) have achieved impressive performance and have been put into practical use in commercial applications, but they still have potential safety mechanism vulnerabilities. Jailbreak attacks are red teaming methods that aim to bypass safety mechanisms and discover MLLMs' potential risks. Existing MLLMs' jailbreak methods often bypass the model's safety mechanism through complex optimization methods or carefully designed image and text prompts. Despite achieving some progress, they have a low attack success rate on commercial closed-source MLLMs. Unlike previou"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.04931","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.04931/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:28:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"b8jEgnCEbQGguLVTtjNca/DLXsRKFabd88faapd13gfPFF5QsjhaQhxmbH0rvPT99h4E6p4LDZ6UUy4V9FI8AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-19T19:33:31.993379Z"},"content_sha256":"0935230358ad9bc8b7e4c904aff1af294bb7dab0f908866dd6fed58e090ff542","schema_version":"1.0","event_id":"sha256:0935230358ad9bc8b7e4c904aff1af294bb7dab0f908866dd6fed58e090ff542"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/F2HGAKBRV7XIAUDRI7MTAYES5Y/bundle.json","state_url":"https://pith.science/pith/F2HGAKBRV7XIAUDRI7MTAYES5Y/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/F2HGAKBRV7XIAUDRI7MTAYES5Y/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-19T19:33:31Z","links":{"resolver":"https://pith.science/pith/F2HGAKBRV7XIAUDRI7MTAYES5Y","bundle":"https://pith.science/pith/F2HGAKBRV7XIAUDRI7MTAYES5Y/bundle.json","state":"https://pith.science/pith/F2HGAKBRV7XIAUDRI7MTAYES5Y/state.json","well_known_bundle":"https://pith.science/.well-known/pith/F2HGAKBRV7XIAUDRI7MTAYES5Y/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:F2HGAKBRV7XIAUDRI7MTAYES5Y","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"15b73bb2752996a7eff5123f312e85ad48b5c162e77f08b2fbf37bf6385ab0e2","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-09T02:47:01Z","title_canon_sha256":"ed8bd6495c959ac39f1035c3e1a9bc94b14b1bdfed628cecbe94e07a2593930a"},"schema_version":"1.0","source":{"id":"2501.04931","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.04931","created_at":"2026-07-05T11:28:13Z"},{"alias_kind":"arxiv_version","alias_value":"2501.04931v2","created_at":"2026-07-05T11:28:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.04931","created_at":"2026-07-05T11:28:13Z"},{"alias_kind":"pith_short_12","alias_value":"F2HGAKBRV7XI","created_at":"2026-07-05T11:28:13Z"},{"alias_kind":"pith_short_16","alias_value":"F2HGAKBRV7XIAUDR","created_at":"2026-07-05T11:28:13Z"},{"alias_kind":"pith_short_8","alias_value":"F2HGAKBR","created_at":"2026-07-05T11:28:13Z"}],"graph_snapshots":[{"event_id":"sha256:0935230358ad9bc8b7e4c904aff1af294bb7dab0f908866dd6fed58e090ff542","target":"graph","created_at":"2026-07-05T11:28:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.04931/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal Large Language Models (MLLMs) have achieved impressive performance and have been put into practical use in commercial applications, but they still have potential safety mechanism vulnerabilities. Jailbreak attacks are red teaming methods that aim to bypass safety mechanisms and discover MLLMs' potential risks. Existing MLLMs' jailbreak methods often bypass the model's safety mechanism through complex optimization methods or carefully designed image and text prompts. Despite achieving some progress, they have a low attack success rate on commercial closed-source MLLMs. Unlike previou","authors_text":"Caixin Kang, Chi Chen, Fengxiang Wang, Hui Xue, Jialing Tao, Ranjie Duan, Shiji Zhao, Shouwei Ruan, Xingxing Wei, Yuefeng Chen","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-09T02:47:01Z","title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.04931","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bca372a23bc1c921e12b076000156cd216d3bc5d0a60a906b7a2ec10a519a396","target":"record","created_at":"2026-07-05T11:28:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"15b73bb2752996a7eff5123f312e85ad48b5c162e77f08b2fbf37bf6385ab0e2","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-01-09T02:47:01Z","title_canon_sha256":"ed8bd6495c959ac39f1035c3e1a9bc94b14b1bdfed628cecbe94e07a2593930a"},"schema_version":"1.0","source":{"id":"2501.04931","kind":"arxiv","version":2}},"canonical_sha256":"2e8e602831afee80507147d9306092ee1294cf3f30bb672e04dcfd0432b041a8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2e8e602831afee80507147d9306092ee1294cf3f30bb672e04dcfd0432b041a8","first_computed_at":"2026-07-05T11:28:13.460024Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:28:13.460024Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1e1fV528rcozpGYRwCF9/ss5jdUJTthNgnseeorG4+0+hbf9djHZh/0VjOhxIUXPHABVQReGQrnPxIVtm1LtDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:28:13.460544Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.04931","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bca372a23bc1c921e12b076000156cd216d3bc5d0a60a906b7a2ec10a519a396","sha256:0935230358ad9bc8b7e4c904aff1af294bb7dab0f908866dd6fed58e090ff542"],"state_sha256":"11e0cbb355f8589ed2abbb4b12d8ceea9a399f9ad15856e4d5b18fd4d7ad9e4b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OdMex1G5vxLrfaN6UWufKfgduOT3BcXhvlVgCiWS6hO1FdhpRA3/Y/m/FGmXEnZkSqidZkH+pqZpu4ItqXrcCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-19T19:33:31.995844Z","bundle_sha256":"0a851d504381e024907f2379beca581136d7721add6ba7b981a50c48096a943f"}}