{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:IQLSTUQ22RBKDWGXDN3WDVA6JN","short_pith_number":"pith:IQLSTUQ2","canonical_record":{"source":{"id":"2502.09723","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-13T19:13:03Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"f899bc618d39fe34bcccdf1567bd6113713d33730791f570502a2df330359163","abstract_canon_sha256":"2ccba5055e29363fce36c78a858b090731283349dbf8c9c6e00898333b648805"},"schema_version":"1.0"},"canonical_sha256":"441729d21ad442a1d8d71b7761d41e4b74207e82857cd15b4881645fb0fdabb7","source":{"kind":"arxiv","id":"2502.09723","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.09723","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"arxiv_version","alias_value":"2502.09723v3","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.09723","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"pith_short_12","alias_value":"IQLSTUQ22RBK","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"pith_short_16","alias_value":"IQLSTUQ22RBKDWGX","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"pith_short_8","alias_value":"IQLSTUQ2","created_at":"2026-07-05T11:09:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:IQLSTUQ22RBKDWGXDN3WDVA6JN","target":"record","payload":{"canonical_record":{"source":{"id":"2502.09723","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-13T19:13:03Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"f899bc618d39fe34bcccdf1567bd6113713d33730791f570502a2df330359163","abstract_canon_sha256":"2ccba5055e29363fce36c78a858b090731283349dbf8c9c6e00898333b648805"},"schema_version":"1.0"},"canonical_sha256":"441729d21ad442a1d8d71b7761d41e4b74207e82857cd15b4881645fb0fdabb7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:09:08.359050Z","signature_b64":"2lHf8miLfY9V2vSnKQZDWgrXnWTeclGpPsybq6QnJA/LjlH2avJK2aBzRLfRmMVE0EomdAIOVqRF2FhoE2rbBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"441729d21ad442a1d8d71b7761d41e4b74207e82857cd15b4881645fb0fdabb7","last_reissued_at":"2026-07-05T11:09:08.358581Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:09:08.358581Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.09723","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E/YPAi6eQxs8/0VfAt4Ts2154b6OCHO29A4eHoZPpOBjXJE67iZlHIyVt99KvvbB5JklE0jhVSX3+rZVP3QOCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T12:25:07.424976Z"},"content_sha256":"ab1203bd45b9b0cccfd7b72c9bccceb56b80f3d083c4f7e64ba154c5d18a9827","schema_version":"1.0","event_id":"sha256:ab1203bd45b9b0cccfd7b72c9bccceb56b80f3d083c4f7e64ba154c5d18a9827"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:IQLSTUQ22RBKDWGXDN3WDVA6JN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Jingyu Xiao, Kuofeng Gao, Li Xu, Qing Li, Qingsong Zou, Ruoyu Li, Wenxuan Wang, Yong Jiang, Yuhang Wang, Zhi Yan","submitted_at":"2025-02-13T19:13:03Z","abstract_excerpt":"Recent advances in large language models (LLMs) have demonstrated remarkable potential in the field of natural language processing. Unfortunately, LLMs face significant security and ethical risks. Although techniques such as safety alignment are developed for defense, prior researches reveal the possibility of bypassing such defenses through well-designed jailbreak attacks. In this paper, we propose QueryAttack, a novel framework to examine the generalizability of safety alignment. By treating LLMs as knowledge databases, we translate malicious queries in natural language into structured non-n"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.09723","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.09723/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oiik08psojhL4NhQalLJMUJcToWtE//vZ+JmA0fr4tUn1E1rorgScMCHZfo51Z6tCxZxJyurAjB4CCVuyyW3Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T12:25:07.425498Z"},"content_sha256":"f13fea47a32e5d10fbc8529cae0925874322f09d8325cc37f506427b48d7fd89","schema_version":"1.0","event_id":"sha256:f13fea47a32e5d10fbc8529cae0925874322f09d8325cc37f506427b48d7fd89"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IQLSTUQ22RBKDWGXDN3WDVA6JN/bundle.json","state_url":"https://pith.science/pith/IQLSTUQ22RBKDWGXDN3WDVA6JN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IQLSTUQ22RBKDWGXDN3WDVA6JN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T12:25:07Z","links":{"resolver":"https://pith.science/pith/IQLSTUQ22RBKDWGXDN3WDVA6JN","bundle":"https://pith.science/pith/IQLSTUQ22RBKDWGXDN3WDVA6JN/bundle.json","state":"https://pith.science/pith/IQLSTUQ22RBKDWGXDN3WDVA6JN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IQLSTUQ22RBKDWGXDN3WDVA6JN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:IQLSTUQ22RBKDWGXDN3WDVA6JN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2ccba5055e29363fce36c78a858b090731283349dbf8c9c6e00898333b648805","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-13T19:13:03Z","title_canon_sha256":"f899bc618d39fe34bcccdf1567bd6113713d33730791f570502a2df330359163"},"schema_version":"1.0","source":{"id":"2502.09723","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.09723","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"arxiv_version","alias_value":"2502.09723v3","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.09723","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"pith_short_12","alias_value":"IQLSTUQ22RBK","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"pith_short_16","alias_value":"IQLSTUQ22RBKDWGX","created_at":"2026-07-05T11:09:08Z"},{"alias_kind":"pith_short_8","alias_value":"IQLSTUQ2","created_at":"2026-07-05T11:09:08Z"}],"graph_snapshots":[{"event_id":"sha256:f13fea47a32e5d10fbc8529cae0925874322f09d8325cc37f506427b48d7fd89","target":"graph","created_at":"2026-07-05T11:09:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.09723/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent advances in large language models (LLMs) have demonstrated remarkable potential in the field of natural language processing. Unfortunately, LLMs face significant security and ethical risks. Although techniques such as safety alignment are developed for defense, prior researches reveal the possibility of bypassing such defenses through well-designed jailbreak attacks. In this paper, we propose QueryAttack, a novel framework to examine the generalizability of safety alignment. By treating LLMs as knowledge databases, we translate malicious queries in natural language into structured non-n","authors_text":"Jingyu Xiao, Kuofeng Gao, Li Xu, Qing Li, Qingsong Zou, Ruoyu Li, Wenxuan Wang, Yong Jiang, Yuhang Wang, Zhi Yan","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-13T19:13:03Z","title":"QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.09723","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ab1203bd45b9b0cccfd7b72c9bccceb56b80f3d083c4f7e64ba154c5d18a9827","target":"record","created_at":"2026-07-05T11:09:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2ccba5055e29363fce36c78a858b090731283349dbf8c9c6e00898333b648805","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-13T19:13:03Z","title_canon_sha256":"f899bc618d39fe34bcccdf1567bd6113713d33730791f570502a2df330359163"},"schema_version":"1.0","source":{"id":"2502.09723","kind":"arxiv","version":3}},"canonical_sha256":"441729d21ad442a1d8d71b7761d41e4b74207e82857cd15b4881645fb0fdabb7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"441729d21ad442a1d8d71b7761d41e4b74207e82857cd15b4881645fb0fdabb7","first_computed_at":"2026-07-05T11:09:08.358581Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:09:08.358581Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2lHf8miLfY9V2vSnKQZDWgrXnWTeclGpPsybq6QnJA/LjlH2avJK2aBzRLfRmMVE0EomdAIOVqRF2FhoE2rbBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:09:08.359050Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.09723","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ab1203bd45b9b0cccfd7b72c9bccceb56b80f3d083c4f7e64ba154c5d18a9827","sha256:f13fea47a32e5d10fbc8529cae0925874322f09d8325cc37f506427b48d7fd89"],"state_sha256":"f25ef4f3e83fe0481450cc3febf1675fc49c23220d10d724e4062a4d5da828ba"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4Yydfv2+qc4mD4XVVXy9CJXwFltHq75S/rpvWcIQYtXjN35EqmKfwEG4/ztqE8sWrn49JCwaQds3uyfhWQqxAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T12:25:07.429123Z","bundle_sha256":"385b8a8606e9b04014077ab079729727339f305e5fa3edf76a34163afd895461"}}