{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:IMEHZRJQQ3Q34UETWDOATJMDSM","short_pith_number":"pith:IMEHZRJQ","canonical_record":{"source":{"id":"2310.04445","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-10-02T23:29:23Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"7c86fa4b069238a9a11b2bcc49f916ded7ded27a0103d64e40312e21894621df","abstract_canon_sha256":"505e053b659146e3cc3dab32e51d91ed817ca716f3c68a6ee45b12d4d7527bf1"},"schema_version":"1.0"},"canonical_sha256":"43087cc53086e1be5093b0dc09a58393326e839826e812bf9da3a62e6c33d8fd","source":{"kind":"arxiv","id":"2310.04445","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.04445","created_at":"2026-07-05T07:03:31Z"},{"alias_kind":"arxiv_version","alias_value":"2310.04445v2","created_at":"2026-07-05T07:03:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.04445","created_at":"2026-07-05T07:03:31Z"},{"alias_kind":"pith_short_12","alias_value":"IMEHZRJQQ3Q3","created_at":"2026-07-05T07:03:31Z"},{"alias_kind":"pith_short_16","alias_value":"IMEHZRJQQ3Q34UET","created_at":"2026-07-05T07:03:31Z"},{"alias_kind":"pith_short_8","alias_value":"IMEHZRJQ","created_at":"2026-07-05T07:03:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:IMEHZRJQQ3Q34UETWDOATJMDSM","target":"record","payload":{"canonical_record":{"source":{"id":"2310.04445","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-10-02T23:29:23Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"7c86fa4b069238a9a11b2bcc49f916ded7ded27a0103d64e40312e21894621df","abstract_canon_sha256":"505e053b659146e3cc3dab32e51d91ed817ca716f3c68a6ee45b12d4d7527bf1"},"schema_version":"1.0"},"canonical_sha256":"43087cc53086e1be5093b0dc09a58393326e839826e812bf9da3a62e6c33d8fd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:03:31.744173Z","signature_b64":"t08ZwYSdTuKWh0QgtaJqbDMV2aeHz0qzZh3/f5XSccLR9hJomW6/immxTjMDcVLBXC/XXUeRte/WdMJ5D2SKBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"43087cc53086e1be5093b0dc09a58393326e839826e812bf9da3a62e6c33d8fd","last_reissued_at":"2026-07-05T07:03:31.743730Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:03:31.743730Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.04445","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:03:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DdKJJAnWGXqG7SsAecljKRZQwBhcm47pq7Fi/VipDaxXob2B+CrPpuE7Kar556xnPhoguVZqw8BBc1nJUYyzCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T12:34:01.593174Z"},"content_sha256":"ba803154a3196c951ea7e6f15020860067ec8ac8b0956e0cd340c0166d7beb76","schema_version":"1.0","event_id":"sha256:ba803154a3196c951ea7e6f15020860067ec8ac8b0956e0cd340c0166d7beb76"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:IMEHZRJQQ3Q34UETWDOATJMDSM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LoFT: Local Proxy Fine-tuning For Improving Transferability Of Adversarial Attacks Against Large Language Model","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CL","authors_text":"Ankit Shah, Bhiksha Raj, Dareen Alharthi, Hazim T Bukhari, Hira Dhamyal, Joseph Konan, Massa Baali, Michael Kuhlmann, Muhammad Ahmed Shah, Raphael Olivier, Rita Singh, Roshan Sharma, Soham Deshmukh","submitted_at":"2023-10-02T23:29:23Z","abstract_excerpt":"It has been shown that Large Language Model (LLM) alignments can be circumvented by appending specially crafted attack suffixes with harmful queries to elicit harmful responses. To conduct attacks against private target models whose characterization is unknown, public models can be used as proxies to fashion the attack, with successful attacks being transferred from public proxies to private target models. The success rate of attack depends on how closely the proxy model approximates the private model. We hypothesize that for attacks to be transferrable, it is sufficient if the proxy can appro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.04445","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.04445/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:03:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LMrgAFcqvT4qxBmDuSSqBFqR8d5AM+WNj7FCdQVfMhvVaFWeTSiIM9puYPrYLW9fdsJsxUtwZcvQJ8svGN94Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T12:34:01.594071Z"},"content_sha256":"42706c8561fbe921186bf142466848dda4ea693d4c67fa3323cf488069afc59d","schema_version":"1.0","event_id":"sha256:42706c8561fbe921186bf142466848dda4ea693d4c67fa3323cf488069afc59d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IMEHZRJQQ3Q34UETWDOATJMDSM/bundle.json","state_url":"https://pith.science/pith/IMEHZRJQQ3Q34UETWDOATJMDSM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IMEHZRJQQ3Q34UETWDOATJMDSM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T12:34:01Z","links":{"resolver":"https://pith.science/pith/IMEHZRJQQ3Q34UETWDOATJMDSM","bundle":"https://pith.science/pith/IMEHZRJQQ3Q34UETWDOATJMDSM/bundle.json","state":"https://pith.science/pith/IMEHZRJQQ3Q34UETWDOATJMDSM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IMEHZRJQQ3Q34UETWDOATJMDSM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:IMEHZRJQQ3Q34UETWDOATJMDSM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"505e053b659146e3cc3dab32e51d91ed817ca716f3c68a6ee45b12d4d7527bf1","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-10-02T23:29:23Z","title_canon_sha256":"7c86fa4b069238a9a11b2bcc49f916ded7ded27a0103d64e40312e21894621df"},"schema_version":"1.0","source":{"id":"2310.04445","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.04445","created_at":"2026-07-05T07:03:31Z"},{"alias_kind":"arxiv_version","alias_value":"2310.04445v2","created_at":"2026-07-05T07:03:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.04445","created_at":"2026-07-05T07:03:31Z"},{"alias_kind":"pith_short_12","alias_value":"IMEHZRJQQ3Q3","created_at":"2026-07-05T07:03:31Z"},{"alias_kind":"pith_short_16","alias_value":"IMEHZRJQQ3Q34UET","created_at":"2026-07-05T07:03:31Z"},{"alias_kind":"pith_short_8","alias_value":"IMEHZRJQ","created_at":"2026-07-05T07:03:31Z"}],"graph_snapshots":[{"event_id":"sha256:42706c8561fbe921186bf142466848dda4ea693d4c67fa3323cf488069afc59d","target":"graph","created_at":"2026-07-05T07:03:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.04445/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"It has been shown that Large Language Model (LLM) alignments can be circumvented by appending specially crafted attack suffixes with harmful queries to elicit harmful responses. To conduct attacks against private target models whose characterization is unknown, public models can be used as proxies to fashion the attack, with successful attacks being transferred from public proxies to private target models. The success rate of attack depends on how closely the proxy model approximates the private model. We hypothesize that for attacks to be transferrable, it is sufficient if the proxy can appro","authors_text":"Ankit Shah, Bhiksha Raj, Dareen Alharthi, Hazim T Bukhari, Hira Dhamyal, Joseph Konan, Massa Baali, Michael Kuhlmann, Muhammad Ahmed Shah, Raphael Olivier, Rita Singh, Roshan Sharma, Soham Deshmukh","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-10-02T23:29:23Z","title":"LoFT: Local Proxy Fine-tuning For Improving Transferability Of Adversarial Attacks Against Large Language Model"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.04445","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ba803154a3196c951ea7e6f15020860067ec8ac8b0956e0cd340c0166d7beb76","target":"record","created_at":"2026-07-05T07:03:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"505e053b659146e3cc3dab32e51d91ed817ca716f3c68a6ee45b12d4d7527bf1","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-10-02T23:29:23Z","title_canon_sha256":"7c86fa4b069238a9a11b2bcc49f916ded7ded27a0103d64e40312e21894621df"},"schema_version":"1.0","source":{"id":"2310.04445","kind":"arxiv","version":2}},"canonical_sha256":"43087cc53086e1be5093b0dc09a58393326e839826e812bf9da3a62e6c33d8fd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"43087cc53086e1be5093b0dc09a58393326e839826e812bf9da3a62e6c33d8fd","first_computed_at":"2026-07-05T07:03:31.743730Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:03:31.743730Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"t08ZwYSdTuKWh0QgtaJqbDMV2aeHz0qzZh3/f5XSccLR9hJomW6/immxTjMDcVLBXC/XXUeRte/WdMJ5D2SKBg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:03:31.744173Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.04445","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ba803154a3196c951ea7e6f15020860067ec8ac8b0956e0cd340c0166d7beb76","sha256:42706c8561fbe921186bf142466848dda4ea693d4c67fa3323cf488069afc59d"],"state_sha256":"4e71a0ed7a12abf4d9c86a064ed27ee8730b23fa70a7d4e81f841026714a657e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Gsxt/aOOTdtZ7T+8FCyhAc3XMDZ3UyH5TaWCDY59cVmK0qxgK+wGBRSdJNoKenbOYAZKTnngBeKHvxl5R38vCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T12:34:01.599559Z","bundle_sha256":"bc277115b28b9a7e764f4b57c1ce2c3361c0736f5b95af0b60bb7858cf8431c3"}}