{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:GNPVSJP2O532I5S4KOORZRH7PZ","short_pith_number":"pith:GNPVSJP2","canonical_record":{"source":{"id":"2407.18213","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-07-25T17:26:41Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"title_canon_sha256":"4dc78674efa53b51271e53dc78cd61ab2163ab95486edce7bd3112bf32d947bc","abstract_canon_sha256":"789b1ff349e312c2f382e91571569dcb4701175386a67561564f55ecba7c5e38"},"schema_version":"1.0"},"canonical_sha256":"335f5925fa7777a4765c539d1cc4ff7e639dbe698d72f9b99d63a2fb11f0d7d4","source":{"kind":"arxiv","id":"2407.18213","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.18213","created_at":"2026-07-05T11:16:02Z"},{"alias_kind":"arxiv_version","alias_value":"2407.18213v5","created_at":"2026-07-05T11:16:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.18213","created_at":"2026-07-05T11:16:02Z"},{"alias_kind":"pith_short_12","alias_value":"GNPVSJP2O532","created_at":"2026-07-05T11:16:02Z"},{"alias_kind":"pith_short_16","alias_value":"GNPVSJP2O532I5S4","created_at":"2026-07-05T11:16:02Z"},{"alias_kind":"pith_short_8","alias_value":"GNPVSJP2","created_at":"2026-07-05T11:16:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:GNPVSJP2O532I5S4KOORZRH7PZ","target":"record","payload":{"canonical_record":{"source":{"id":"2407.18213","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-07-25T17:26:41Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"title_canon_sha256":"4dc78674efa53b51271e53dc78cd61ab2163ab95486edce7bd3112bf32d947bc","abstract_canon_sha256":"789b1ff349e312c2f382e91571569dcb4701175386a67561564f55ecba7c5e38"},"schema_version":"1.0"},"canonical_sha256":"335f5925fa7777a4765c539d1cc4ff7e639dbe698d72f9b99d63a2fb11f0d7d4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:16:02.805237Z","signature_b64":"CI2fzkc575K5fO65mUQP1IMAGOSAFp8UnshGGJx42KTmHGCGvq5gwTBxViNIxt7kJHBlrMaG0A3ngf1OgSjhAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"335f5925fa7777a4765c539d1cc4ff7e639dbe698d72f9b99d63a2fb11f0d7d4","last_reissued_at":"2026-07-05T11:16:02.804746Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:16:02.804746Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.18213","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:16:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jh/tOzzqW0fdItx+D9NHCEry0IINThpjxaGqSFq9yOd9cQiXC8JAutCUTK0ujS2iAi4hURQxNbbLtfqxBNSbAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T09:16:34.509460Z"},"content_sha256":"52e01d2c1694cf601414f4f7e5b5e31bc589e30b74c6791e1529aabb159aad58","schema_version":"1.0","event_id":"sha256:52e01d2c1694cf601414f4f7e5b5e31bc589e30b74c6791e1529aabb159aad58"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:GNPVSJP2O532I5S4KOORZRH7PZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Scaling Trends in Language Model Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Aaron Tucker, Adam Gleave, Ian McKenzie, Micha{\\l} Zajac, Nikolaus Howe, Oskar Hollinsworth, Pierre-Luc Bacon, Tom Tseng","submitted_at":"2024-07-25T17:26:41Z","abstract_excerpt":"Increasing model size has unlocked a dazzling array of capabilities in modern language models. At the same time, even frontier models remain vulnerable to jailbreaks and prompt injections, despite concerted efforts to make them robust. As both attack and defense gain access to more compute, and as models become larger, what happens to robustness? We argue that to answer this question requires a \\emph{scaling} approach, which we employ in an extensive study of language model robustness across several classification tasks, model families, and adversarial attacks. We find that in the absence of e"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.18213","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.18213/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:16:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qii4HcaFWtIbwyQlOKaWKo/mSEoSAdI6yMS6xUOBNt2Agkckvqsg2ACTC+8x/aM9DNkHGwTOuF1BMzhpHrFEAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T09:16:34.509973Z"},"content_sha256":"af9cad61beb826f9d65ececcc84cb4e56c67aefdf5cba6928990688ba7d8aec3","schema_version":"1.0","event_id":"sha256:af9cad61beb826f9d65ececcc84cb4e56c67aefdf5cba6928990688ba7d8aec3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GNPVSJP2O532I5S4KOORZRH7PZ/bundle.json","state_url":"https://pith.science/pith/GNPVSJP2O532I5S4KOORZRH7PZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GNPVSJP2O532I5S4KOORZRH7PZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T09:16:34Z","links":{"resolver":"https://pith.science/pith/GNPVSJP2O532I5S4KOORZRH7PZ","bundle":"https://pith.science/pith/GNPVSJP2O532I5S4KOORZRH7PZ/bundle.json","state":"https://pith.science/pith/GNPVSJP2O532I5S4KOORZRH7PZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GNPVSJP2O532I5S4KOORZRH7PZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:GNPVSJP2O532I5S4KOORZRH7PZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"789b1ff349e312c2f382e91571569dcb4701175386a67561564f55ecba7c5e38","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-07-25T17:26:41Z","title_canon_sha256":"4dc78674efa53b51271e53dc78cd61ab2163ab95486edce7bd3112bf32d947bc"},"schema_version":"1.0","source":{"id":"2407.18213","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.18213","created_at":"2026-07-05T11:16:02Z"},{"alias_kind":"arxiv_version","alias_value":"2407.18213v5","created_at":"2026-07-05T11:16:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.18213","created_at":"2026-07-05T11:16:02Z"},{"alias_kind":"pith_short_12","alias_value":"GNPVSJP2O532","created_at":"2026-07-05T11:16:02Z"},{"alias_kind":"pith_short_16","alias_value":"GNPVSJP2O532I5S4","created_at":"2026-07-05T11:16:02Z"},{"alias_kind":"pith_short_8","alias_value":"GNPVSJP2","created_at":"2026-07-05T11:16:02Z"}],"graph_snapshots":[{"event_id":"sha256:af9cad61beb826f9d65ececcc84cb4e56c67aefdf5cba6928990688ba7d8aec3","target":"graph","created_at":"2026-07-05T11:16:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.18213/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Increasing model size has unlocked a dazzling array of capabilities in modern language models. At the same time, even frontier models remain vulnerable to jailbreaks and prompt injections, despite concerted efforts to make them robust. As both attack and defense gain access to more compute, and as models become larger, what happens to robustness? We argue that to answer this question requires a \\emph{scaling} approach, which we employ in an extensive study of language model robustness across several classification tasks, model families, and adversarial attacks. We find that in the absence of e","authors_text":"Aaron Tucker, Adam Gleave, Ian McKenzie, Micha{\\l} Zajac, Nikolaus Howe, Oskar Hollinsworth, Pierre-Luc Bacon, Tom Tseng","cross_cats":["cs.AI","cs.CL","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-07-25T17:26:41Z","title":"Scaling Trends in Language Model Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.18213","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:52e01d2c1694cf601414f4f7e5b5e31bc589e30b74c6791e1529aabb159aad58","target":"record","created_at":"2026-07-05T11:16:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"789b1ff349e312c2f382e91571569dcb4701175386a67561564f55ecba7c5e38","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-07-25T17:26:41Z","title_canon_sha256":"4dc78674efa53b51271e53dc78cd61ab2163ab95486edce7bd3112bf32d947bc"},"schema_version":"1.0","source":{"id":"2407.18213","kind":"arxiv","version":5}},"canonical_sha256":"335f5925fa7777a4765c539d1cc4ff7e639dbe698d72f9b99d63a2fb11f0d7d4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"335f5925fa7777a4765c539d1cc4ff7e639dbe698d72f9b99d63a2fb11f0d7d4","first_computed_at":"2026-07-05T11:16:02.804746Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:16:02.804746Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CI2fzkc575K5fO65mUQP1IMAGOSAFp8UnshGGJx42KTmHGCGvq5gwTBxViNIxt7kJHBlrMaG0A3ngf1OgSjhAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:16:02.805237Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.18213","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:52e01d2c1694cf601414f4f7e5b5e31bc589e30b74c6791e1529aabb159aad58","sha256:af9cad61beb826f9d65ececcc84cb4e56c67aefdf5cba6928990688ba7d8aec3"],"state_sha256":"0a03d9b677d03aa6d6049dfb8698344fac61d12e685396af754be4ab2899edf5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"d3mdV83I/T3Xncle2z/bz7YitDeL/cE2C8T3NKHbOTrVHfGdZ/0fwGtygUmpFqZJIReq84VSYS/f12gyjiU1Cw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T09:16:34.553800Z","bundle_sha256":"d504ef4e1f63b62c3538db43fd577d9775a8f8f99ab7c40e270be2ec5328ace0"}}