{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:HJKOGMMZNXVCZRMMDFDAFGS5YG","short_pith_number":"pith:HJKOGMMZ","canonical_record":{"source":{"id":"2508.15182","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-08-21T02:39:14Z","cross_cats_sorted":[],"title_canon_sha256":"ff423d12a92430564b2f4588b0298c7f1c6cdaa1dfe6646ad85cd4bc148206fb","abstract_canon_sha256":"54d9a5409e511910e14d72826b48aa73938042486ecf47c913ae3a088f3cbf40"},"schema_version":"1.0"},"canonical_sha256":"3a54e331996dea2cc58c1946029a5dc1afbaced5fc44200a2a892716c1f85d66","source":{"kind":"arxiv","id":"2508.15182","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.15182","created_at":"2026-07-05T11:57:07Z"},{"alias_kind":"arxiv_version","alias_value":"2508.15182v1","created_at":"2026-07-05T11:57:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.15182","created_at":"2026-07-05T11:57:07Z"},{"alias_kind":"pith_short_12","alias_value":"HJKOGMMZNXVC","created_at":"2026-07-05T11:57:07Z"},{"alias_kind":"pith_short_16","alias_value":"HJKOGMMZNXVCZRMM","created_at":"2026-07-05T11:57:07Z"},{"alias_kind":"pith_short_8","alias_value":"HJKOGMMZ","created_at":"2026-07-05T11:57:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:HJKOGMMZNXVCZRMMDFDAFGS5YG","target":"record","payload":{"canonical_record":{"source":{"id":"2508.15182","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-08-21T02:39:14Z","cross_cats_sorted":[],"title_canon_sha256":"ff423d12a92430564b2f4588b0298c7f1c6cdaa1dfe6646ad85cd4bc148206fb","abstract_canon_sha256":"54d9a5409e511910e14d72826b48aa73938042486ecf47c913ae3a088f3cbf40"},"schema_version":"1.0"},"canonical_sha256":"3a54e331996dea2cc58c1946029a5dc1afbaced5fc44200a2a892716c1f85d66","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:57:07.804510Z","signature_b64":"eGTx2OAtULf+JaOY3CqUjpLanDystsN/DrYhy+DBmNyWARhUqOrmlkh3+Evc9rYvX7lwPTUazifyNPDezV9yDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3a54e331996dea2cc58c1946029a5dc1afbaced5fc44200a2a892716c1f85d66","last_reissued_at":"2026-07-05T11:57:07.804055Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:57:07.804055Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.15182","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:57:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gB3tEuYTGOJ2vzJE0h6wSMGvW/2DHIbyPuumEJjtxSjZuqhjPVto0zv3IeBQihwJKn6qLaaXuM6FoVFf07C4BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T14:39:09.983623Z"},"content_sha256":"0db895384f53165473286daf7de36be87021b6bdcf608490f00117efb7f42f28","schema_version":"1.0","event_id":"sha256:0db895384f53165473286daf7de36be87021b6bdcf608490f00117efb7f42f28"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:HJKOGMMZNXVCZRMMDFDAFGS5YG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SafeLLM: Unlearning Harmful Outputs from Large Language Models against Jailbreak Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Jianbing Ni, Qi Li, Rongxing Lu, Xiangman Li, Xiaodong Wu","submitted_at":"2025-08-21T02:39:14Z","abstract_excerpt":"Jailbreak attacks pose a serious threat to the safety of Large Language Models (LLMs) by crafting adversarial prompts that bypass alignment mechanisms, causing the models to produce harmful, restricted, or biased content. In this paper, we propose SafeLLM, a novel unlearning-based defense framework that unlearn the harmful knowledge from LLMs while preserving linguistic fluency and general capabilities. SafeLLM employs a three-stage pipeline: (1) dynamic unsafe output detection using a hybrid approach that integrates external classifiers with model-internal evaluations; (2) token-level harmful"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.15182","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.15182/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:57:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Vv3trUIzb+xqG3sbNXFzzE9az8IXG226czvjICUUeHOfJeYfCXkpsw44/CqN9SzUNBXm6Q/7RTwrkdYujNh9Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T14:39:09.984010Z"},"content_sha256":"e6a3d40a595f30f53a9030a6930b3528246ae323b168d1616c710703b05e461b","schema_version":"1.0","event_id":"sha256:e6a3d40a595f30f53a9030a6930b3528246ae323b168d1616c710703b05e461b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HJKOGMMZNXVCZRMMDFDAFGS5YG/bundle.json","state_url":"https://pith.science/pith/HJKOGMMZNXVCZRMMDFDAFGS5YG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HJKOGMMZNXVCZRMMDFDAFGS5YG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T14:39:09Z","links":{"resolver":"https://pith.science/pith/HJKOGMMZNXVCZRMMDFDAFGS5YG","bundle":"https://pith.science/pith/HJKOGMMZNXVCZRMMDFDAFGS5YG/bundle.json","state":"https://pith.science/pith/HJKOGMMZNXVCZRMMDFDAFGS5YG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HJKOGMMZNXVCZRMMDFDAFGS5YG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:HJKOGMMZNXVCZRMMDFDAFGS5YG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"54d9a5409e511910e14d72826b48aa73938042486ecf47c913ae3a088f3cbf40","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-08-21T02:39:14Z","title_canon_sha256":"ff423d12a92430564b2f4588b0298c7f1c6cdaa1dfe6646ad85cd4bc148206fb"},"schema_version":"1.0","source":{"id":"2508.15182","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.15182","created_at":"2026-07-05T11:57:07Z"},{"alias_kind":"arxiv_version","alias_value":"2508.15182v1","created_at":"2026-07-05T11:57:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.15182","created_at":"2026-07-05T11:57:07Z"},{"alias_kind":"pith_short_12","alias_value":"HJKOGMMZNXVC","created_at":"2026-07-05T11:57:07Z"},{"alias_kind":"pith_short_16","alias_value":"HJKOGMMZNXVCZRMM","created_at":"2026-07-05T11:57:07Z"},{"alias_kind":"pith_short_8","alias_value":"HJKOGMMZ","created_at":"2026-07-05T11:57:07Z"}],"graph_snapshots":[{"event_id":"sha256:e6a3d40a595f30f53a9030a6930b3528246ae323b168d1616c710703b05e461b","target":"graph","created_at":"2026-07-05T11:57:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.15182/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Jailbreak attacks pose a serious threat to the safety of Large Language Models (LLMs) by crafting adversarial prompts that bypass alignment mechanisms, causing the models to produce harmful, restricted, or biased content. In this paper, we propose SafeLLM, a novel unlearning-based defense framework that unlearn the harmful knowledge from LLMs while preserving linguistic fluency and general capabilities. SafeLLM employs a three-stage pipeline: (1) dynamic unsafe output detection using a hybrid approach that integrates external classifiers with model-internal evaluations; (2) token-level harmful","authors_text":"Jianbing Ni, Qi Li, Rongxing Lu, Xiangman Li, Xiaodong Wu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-08-21T02:39:14Z","title":"SafeLLM: Unlearning Harmful Outputs from Large Language Models against Jailbreak Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.15182","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0db895384f53165473286daf7de36be87021b6bdcf608490f00117efb7f42f28","target":"record","created_at":"2026-07-05T11:57:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"54d9a5409e511910e14d72826b48aa73938042486ecf47c913ae3a088f3cbf40","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-08-21T02:39:14Z","title_canon_sha256":"ff423d12a92430564b2f4588b0298c7f1c6cdaa1dfe6646ad85cd4bc148206fb"},"schema_version":"1.0","source":{"id":"2508.15182","kind":"arxiv","version":1}},"canonical_sha256":"3a54e331996dea2cc58c1946029a5dc1afbaced5fc44200a2a892716c1f85d66","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3a54e331996dea2cc58c1946029a5dc1afbaced5fc44200a2a892716c1f85d66","first_computed_at":"2026-07-05T11:57:07.804055Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:57:07.804055Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"eGTx2OAtULf+JaOY3CqUjpLanDystsN/DrYhy+DBmNyWARhUqOrmlkh3+Evc9rYvX7lwPTUazifyNPDezV9yDg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:57:07.804510Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.15182","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0db895384f53165473286daf7de36be87021b6bdcf608490f00117efb7f42f28","sha256:e6a3d40a595f30f53a9030a6930b3528246ae323b168d1616c710703b05e461b"],"state_sha256":"7c9c46cfc762a9cf4e837b083f328289cfc9300d04b1ec0d232ab5e23e1773c0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"omPzEEQcu5g/RpgmXLYyEmrpdFJgzC31py2f0pM5zRIHx8PFCOQyfIT0JxcHFqg1B1FE+eFCSWElVbbZSwyyBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T14:39:09.986157Z","bundle_sha256":"433bf461a989040f1690394e612fd18995e423ce874055aa931818e0fb329efc"}}