{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:GGPJ3P3B6DN3FXU4CMVJI2F6XD","short_pith_number":"pith:GGPJ3P3B","canonical_record":{"source":{"id":"2412.15623","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-20T07:29:10Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"bee320a62c6873a0a8fc6ba5088ca646a3a481c10c3ae5ad138864402d5c972d","abstract_canon_sha256":"aff95a802b3fcc5c524b229643e1d235071b4911b05dcc59c6c2208d5fbbe593"},"schema_version":"1.0"},"canonical_sha256":"319e9dbf61f0dbb2de9c132a9468beb8e205d083b27f06c2586d9ddecd93c080","source":{"kind":"arxiv","id":"2412.15623","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.15623","created_at":"2026-07-05T09:52:26Z"},{"alias_kind":"arxiv_version","alias_value":"2412.15623v1","created_at":"2026-07-05T09:52:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.15623","created_at":"2026-07-05T09:52:26Z"},{"alias_kind":"pith_short_12","alias_value":"GGPJ3P3B6DN3","created_at":"2026-07-05T09:52:26Z"},{"alias_kind":"pith_short_16","alias_value":"GGPJ3P3B6DN3FXU4","created_at":"2026-07-05T09:52:26Z"},{"alias_kind":"pith_short_8","alias_value":"GGPJ3P3B","created_at":"2026-07-05T09:52:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:GGPJ3P3B6DN3FXU4CMVJI2F6XD","target":"record","payload":{"canonical_record":{"source":{"id":"2412.15623","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-20T07:29:10Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"bee320a62c6873a0a8fc6ba5088ca646a3a481c10c3ae5ad138864402d5c972d","abstract_canon_sha256":"aff95a802b3fcc5c524b229643e1d235071b4911b05dcc59c6c2208d5fbbe593"},"schema_version":"1.0"},"canonical_sha256":"319e9dbf61f0dbb2de9c132a9468beb8e205d083b27f06c2586d9ddecd93c080","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:52:26.963218Z","signature_b64":"EQQCWHtjnCjAES2vbUrdGTrVS0LD7bZCWQYWdrAJNQanC2HscjONjlQsafDD5x/1WHwAUdWmfvbyANX43nJhDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"319e9dbf61f0dbb2de9c132a9468beb8e205d083b27f06c2586d9ddecd93c080","last_reissued_at":"2026-07-05T09:52:26.962761Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:52:26.962761Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.15623","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:52:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3Y4KTc/VCgL1N8W7sWQEtxGveeMEoB2aC4B4/4c1g4z42+QyLO/zzZY02+fU7DkeNA/Uh2fKMLyzWePL9apQBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-24T00:06:05.131840Z"},"content_sha256":"802a2424a795f66be0d0a642c495167d2f87ecc6d54633818cb0776c0c76f643","schema_version":"1.0","event_id":"sha256:802a2424a795f66be0d0a642c495167d2f87ecc6d54633818cb0776c0c76f643"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:GGPJ3P3B6DN3FXU4CMVJI2F6XD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"JailPO: A Novel Black-box Jailbreak Framework via Preference Optimization against Aligned LLMs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Chu Wang, Hongyi Li, Jiawei Ye, Jie Wu, Tianjie Yan, Zhixin Li","submitted_at":"2024-12-20T07:29:10Z","abstract_excerpt":"Large Language Models (LLMs) aligned with human feedback have recently garnered significant attention. However, it remains vulnerable to jailbreak attacks, where adversaries manipulate prompts to induce harmful outputs. Exploring jailbreak attacks enables us to investigate the vulnerabilities of LLMs and further guides us in enhancing their security. Unfortunately, existing techniques mainly rely on handcrafted templates or generated-based optimization, posing challenges in scalability, efficiency and universality. To address these issues, we present JailPO, a novel black-box jailbreak framewo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.15623","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.15623/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:52:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nZBBNqTcxXYnoFk6sjPMp3QaSSKaiFQPj0hGX6vO2E46M8cSB7TcUAvfv9VhbXg9h0s6iNK+FNqZJSh/fhM8BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-24T00:06:05.132221Z"},"content_sha256":"52a40be66e6479941b513f734c2d3de9b7983fdf9263c7a0f2c171b300c7a525","schema_version":"1.0","event_id":"sha256:52a40be66e6479941b513f734c2d3de9b7983fdf9263c7a0f2c171b300c7a525"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GGPJ3P3B6DN3FXU4CMVJI2F6XD/bundle.json","state_url":"https://pith.science/pith/GGPJ3P3B6DN3FXU4CMVJI2F6XD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GGPJ3P3B6DN3FXU4CMVJI2F6XD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-24T00:06:05Z","links":{"resolver":"https://pith.science/pith/GGPJ3P3B6DN3FXU4CMVJI2F6XD","bundle":"https://pith.science/pith/GGPJ3P3B6DN3FXU4CMVJI2F6XD/bundle.json","state":"https://pith.science/pith/GGPJ3P3B6DN3FXU4CMVJI2F6XD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GGPJ3P3B6DN3FXU4CMVJI2F6XD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:GGPJ3P3B6DN3FXU4CMVJI2F6XD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"aff95a802b3fcc5c524b229643e1d235071b4911b05dcc59c6c2208d5fbbe593","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-20T07:29:10Z","title_canon_sha256":"bee320a62c6873a0a8fc6ba5088ca646a3a481c10c3ae5ad138864402d5c972d"},"schema_version":"1.0","source":{"id":"2412.15623","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.15623","created_at":"2026-07-05T09:52:26Z"},{"alias_kind":"arxiv_version","alias_value":"2412.15623v1","created_at":"2026-07-05T09:52:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.15623","created_at":"2026-07-05T09:52:26Z"},{"alias_kind":"pith_short_12","alias_value":"GGPJ3P3B6DN3","created_at":"2026-07-05T09:52:26Z"},{"alias_kind":"pith_short_16","alias_value":"GGPJ3P3B6DN3FXU4","created_at":"2026-07-05T09:52:26Z"},{"alias_kind":"pith_short_8","alias_value":"GGPJ3P3B","created_at":"2026-07-05T09:52:26Z"}],"graph_snapshots":[{"event_id":"sha256:52a40be66e6479941b513f734c2d3de9b7983fdf9263c7a0f2c171b300c7a525","target":"graph","created_at":"2026-07-05T09:52:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.15623/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) aligned with human feedback have recently garnered significant attention. However, it remains vulnerable to jailbreak attacks, where adversaries manipulate prompts to induce harmful outputs. Exploring jailbreak attacks enables us to investigate the vulnerabilities of LLMs and further guides us in enhancing their security. Unfortunately, existing techniques mainly rely on handcrafted templates or generated-based optimization, posing challenges in scalability, efficiency and universality. To address these issues, we present JailPO, a novel black-box jailbreak framewo","authors_text":"Chu Wang, Hongyi Li, Jiawei Ye, Jie Wu, Tianjie Yan, Zhixin Li","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-20T07:29:10Z","title":"JailPO: A Novel Black-box Jailbreak Framework via Preference Optimization against Aligned LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.15623","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:802a2424a795f66be0d0a642c495167d2f87ecc6d54633818cb0776c0c76f643","target":"record","created_at":"2026-07-05T09:52:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"aff95a802b3fcc5c524b229643e1d235071b4911b05dcc59c6c2208d5fbbe593","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-20T07:29:10Z","title_canon_sha256":"bee320a62c6873a0a8fc6ba5088ca646a3a481c10c3ae5ad138864402d5c972d"},"schema_version":"1.0","source":{"id":"2412.15623","kind":"arxiv","version":1}},"canonical_sha256":"319e9dbf61f0dbb2de9c132a9468beb8e205d083b27f06c2586d9ddecd93c080","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"319e9dbf61f0dbb2de9c132a9468beb8e205d083b27f06c2586d9ddecd93c080","first_computed_at":"2026-07-05T09:52:26.962761Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:52:26.962761Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EQQCWHtjnCjAES2vbUrdGTrVS0LD7bZCWQYWdrAJNQanC2HscjONjlQsafDD5x/1WHwAUdWmfvbyANX43nJhDw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:52:26.963218Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.15623","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:802a2424a795f66be0d0a642c495167d2f87ecc6d54633818cb0776c0c76f643","sha256:52a40be66e6479941b513f734c2d3de9b7983fdf9263c7a0f2c171b300c7a525"],"state_sha256":"d9185f5e28da0c6242591c7536542416e99eb58498db49547a5ccf5fa6e155a6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"d17kpR05Qo2AUVapL4UVIWhDwrk27G+J/YGhVqijR3LlHFDTTd1UMvOMprW0VHEJxrJbHNhSI5/eAmVJtJy+DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-24T00:06:05.134833Z","bundle_sha256":"40c5135bf6db3c21e2a7f5b16e193dd97ddd67ff21a3414a21b5e211c38d3a1c"}}