{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:GRTQLQQ66N7LMPYSX64VJIWEFN","short_pith_number":"pith:GRTQLQQ6","canonical_record":{"source":{"id":"2402.16914","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-25T17:43:29Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"bda6a36098c4674226d9a9d1377feb8e2eda1e8fa29cb493ad6274fedabbba8f","abstract_canon_sha256":"c8a370c6ad4defb64578ace16991449f7e9fb165295347702d5f33c76067a1e9"},"schema_version":"1.0"},"canonical_sha256":"346705c21ef37eb63f12bfb954a2c42b56abeb2809f7253828124a60f6fd1e68","source":{"kind":"arxiv","id":"2402.16914","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.16914","created_at":"2026-07-05T09:34:11Z"},{"alias_kind":"arxiv_version","alias_value":"2402.16914v3","created_at":"2026-07-05T09:34:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.16914","created_at":"2026-07-05T09:34:11Z"},{"alias_kind":"pith_short_12","alias_value":"GRTQLQQ66N7L","created_at":"2026-07-05T09:34:11Z"},{"alias_kind":"pith_short_16","alias_value":"GRTQLQQ66N7LMPYS","created_at":"2026-07-05T09:34:11Z"},{"alias_kind":"pith_short_8","alias_value":"GRTQLQQ6","created_at":"2026-07-05T09:34:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:GRTQLQQ66N7LMPYSX64VJIWEFN","target":"record","payload":{"canonical_record":{"source":{"id":"2402.16914","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-25T17:43:29Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"bda6a36098c4674226d9a9d1377feb8e2eda1e8fa29cb493ad6274fedabbba8f","abstract_canon_sha256":"c8a370c6ad4defb64578ace16991449f7e9fb165295347702d5f33c76067a1e9"},"schema_version":"1.0"},"canonical_sha256":"346705c21ef37eb63f12bfb954a2c42b56abeb2809f7253828124a60f6fd1e68","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:34:11.757721Z","signature_b64":"gma9odeQFRabCxDjZ5KIOvsh20Np+AlkDFMyajLhhDZG3F6jW5azExeEx1Pf2RvRi75xyKWE/dUUx82UzBQkAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"346705c21ef37eb63f12bfb954a2c42b56abeb2809f7253828124a60f6fd1e68","last_reissued_at":"2026-07-05T09:34:11.757139Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:34:11.757139Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.16914","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:34:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7bR7iGeVLtcB+FZEzjlfYnwgoRvJ8SElMkcOFEhILBH5eyCpSLzIxrlHS7JjaweMpm6roR8700DaVIxNiQGjBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T13:19:49.050114Z"},"content_sha256":"e2a3059677ff1e0affdeb30fe57b52be013ad381248d222a1e91675810d5225d","schema_version":"1.0","event_id":"sha256:e2a3059677ff1e0affdeb30fe57b52be013ad381248d222a1e91675810d5225d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:GRTQLQQ66N7LMPYSX64VJIWEFN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Cho-Jui Hsieh, Minhao Cheng, Ruochen Wang, Tianyi Zhou, Xirui Li","submitted_at":"2024-02-25T17:43:29Z","abstract_excerpt":"The safety alignment of Large Language Models (LLMs) is vulnerable to both manual and automated jailbreak attacks, which adversarially trigger LLMs to output harmful content. However, current methods for jailbreaking LLMs, which nest entire harmful prompts, are not effective at concealing malicious intent and can be easily identified and rejected by well-aligned LLMs. This paper discovers that decomposing a malicious prompt into separated sub-prompts can effectively obscure its underlying malicious intent by presenting it in a fragmented, less detectable form, thereby addressing these limitati"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.16914","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.16914/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:34:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pMXBrYxJrz+Uog1vOeRlYhbuDKe+eyBMyEw9b14DUsHkRp1HK+j7crXatro5ATHE2za2IMeJyjPgyUBNMdruBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T13:19:49.050715Z"},"content_sha256":"7356b9a62770d7c76d50ae8b40d173635869bcec0f58aca5cc8ff592c644d4da","schema_version":"1.0","event_id":"sha256:7356b9a62770d7c76d50ae8b40d173635869bcec0f58aca5cc8ff592c644d4da"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GRTQLQQ66N7LMPYSX64VJIWEFN/bundle.json","state_url":"https://pith.science/pith/GRTQLQQ66N7LMPYSX64VJIWEFN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GRTQLQQ66N7LMPYSX64VJIWEFN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T13:19:49Z","links":{"resolver":"https://pith.science/pith/GRTQLQQ66N7LMPYSX64VJIWEFN","bundle":"https://pith.science/pith/GRTQLQQ66N7LMPYSX64VJIWEFN/bundle.json","state":"https://pith.science/pith/GRTQLQQ66N7LMPYSX64VJIWEFN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GRTQLQQ66N7LMPYSX64VJIWEFN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:GRTQLQQ66N7LMPYSX64VJIWEFN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c8a370c6ad4defb64578ace16991449f7e9fb165295347702d5f33c76067a1e9","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-25T17:43:29Z","title_canon_sha256":"bda6a36098c4674226d9a9d1377feb8e2eda1e8fa29cb493ad6274fedabbba8f"},"schema_version":"1.0","source":{"id":"2402.16914","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.16914","created_at":"2026-07-05T09:34:11Z"},{"alias_kind":"arxiv_version","alias_value":"2402.16914v3","created_at":"2026-07-05T09:34:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.16914","created_at":"2026-07-05T09:34:11Z"},{"alias_kind":"pith_short_12","alias_value":"GRTQLQQ66N7L","created_at":"2026-07-05T09:34:11Z"},{"alias_kind":"pith_short_16","alias_value":"GRTQLQQ66N7LMPYS","created_at":"2026-07-05T09:34:11Z"},{"alias_kind":"pith_short_8","alias_value":"GRTQLQQ6","created_at":"2026-07-05T09:34:11Z"}],"graph_snapshots":[{"event_id":"sha256:7356b9a62770d7c76d50ae8b40d173635869bcec0f58aca5cc8ff592c644d4da","target":"graph","created_at":"2026-07-05T09:34:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.16914/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The safety alignment of Large Language Models (LLMs) is vulnerable to both manual and automated jailbreak attacks, which adversarially trigger LLMs to output harmful content. However, current methods for jailbreaking LLMs, which nest entire harmful prompts, are not effective at concealing malicious intent and can be easily identified and rejected by well-aligned LLMs. This paper discovers that decomposing a malicious prompt into separated sub-prompts can effectively obscure its underlying malicious intent by presenting it in a fragmented, less detectable form, thereby addressing these limitati","authors_text":"Cho-Jui Hsieh, Minhao Cheng, Ruochen Wang, Tianyi Zhou, Xirui Li","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.16914","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e2a3059677ff1e0affdeb30fe57b52be013ad381248d222a1e91675810d5225d","target":"record","created_at":"2026-07-05T09:34:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c8a370c6ad4defb64578ace16991449f7e9fb165295347702d5f33c76067a1e9","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-25T17:43:29Z","title_canon_sha256":"bda6a36098c4674226d9a9d1377feb8e2eda1e8fa29cb493ad6274fedabbba8f"},"schema_version":"1.0","source":{"id":"2402.16914","kind":"arxiv","version":3}},"canonical_sha256":"346705c21ef37eb63f12bfb954a2c42b56abeb2809f7253828124a60f6fd1e68","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"346705c21ef37eb63f12bfb954a2c42b56abeb2809f7253828124a60f6fd1e68","first_computed_at":"2026-07-05T09:34:11.757139Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:34:11.757139Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gma9odeQFRabCxDjZ5KIOvsh20Np+AlkDFMyajLhhDZG3F6jW5azExeEx1Pf2RvRi75xyKWE/dUUx82UzBQkAw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:34:11.757721Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.16914","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e2a3059677ff1e0affdeb30fe57b52be013ad381248d222a1e91675810d5225d","sha256:7356b9a62770d7c76d50ae8b40d173635869bcec0f58aca5cc8ff592c644d4da"],"state_sha256":"e5c4b58bf1db8924e589696415d86f6eb11b55edc7a7427449f1b54909642149"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uumzGkPFWCImnCb12a7OCsGHHXnskPTDQZvOh4CR0itU7sa67L5itnsjX/SsVYKCC5w1qRC8fVabGndICgOLDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T13:19:49.054587Z","bundle_sha256":"45f466ad3485dbeb63d2f84632045f0485c9aef4e691c192d6d0bcb4518340b7"}}