{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:J6VVBLJTIWRYZ2TO4DQ36QCSD4","short_pith_number":"pith:J6VVBLJT","canonical_record":{"source":{"id":"2505.19773","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-26T09:57:25Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"4708904425d75dd66844d6abaa8e3efe58be7032a49eee5ad9e1fada18daeb2c","abstract_canon_sha256":"e3975646f2c739659fc48ddcfbfe33ee0d735a6f5aa4b7e799a3262c9dc32e9d"},"schema_version":"1.0"},"canonical_sha256":"4fab50ad3345a38cea6ee0e1bf40521f2682b6ba715a4f04717e142d9f02eed6","source":{"kind":"arxiv","id":"2505.19773","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.19773","created_at":"2026-07-05T11:09:35Z"},{"alias_kind":"arxiv_version","alias_value":"2505.19773v1","created_at":"2026-07-05T11:09:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.19773","created_at":"2026-07-05T11:09:35Z"},{"alias_kind":"pith_short_12","alias_value":"J6VVBLJTIWRY","created_at":"2026-07-05T11:09:35Z"},{"alias_kind":"pith_short_16","alias_value":"J6VVBLJTIWRYZ2TO","created_at":"2026-07-05T11:09:35Z"},{"alias_kind":"pith_short_8","alias_value":"J6VVBLJT","created_at":"2026-07-05T11:09:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:J6VVBLJTIWRYZ2TO4DQ36QCSD4","target":"record","payload":{"canonical_record":{"source":{"id":"2505.19773","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-26T09:57:25Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"4708904425d75dd66844d6abaa8e3efe58be7032a49eee5ad9e1fada18daeb2c","abstract_canon_sha256":"e3975646f2c739659fc48ddcfbfe33ee0d735a6f5aa4b7e799a3262c9dc32e9d"},"schema_version":"1.0"},"canonical_sha256":"4fab50ad3345a38cea6ee0e1bf40521f2682b6ba715a4f04717e142d9f02eed6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:09:35.911284Z","signature_b64":"MBYyWHrab0MuRxx0HUbr/2hh+HcINJ24+J24Vb+jnpgbSLClE8z24AYYtNcpHtl+YUTLxXLv91voc07JCT83Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4fab50ad3345a38cea6ee0e1bf40521f2682b6ba715a4f04717e142d9f02eed6","last_reissued_at":"2026-07-05T11:09:35.910783Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:09:35.910783Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.19773","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TMUEh+rLVZGEdGIq2sBm72DLhjnP5h/Y2UjTng1g/JrPM/0ytEenqfTLM2Js4VxbZ7tqvPrkLcpDbhWwxJYeBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T09:26:54.958094Z"},"content_sha256":"8905d5b049a15aa98efe7a76e9647cc2653f5dda2658b310ac0f9386087d43e1","schema_version":"1.0","event_id":"sha256:8905d5b049a15aa98efe7a76e9647cc2653f5dda2658b310ac0f9386087d43e1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:J6VVBLJTIWRYZ2TO4DQ36QCSD4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CL","authors_text":"Kimin Lee, Sangyeop Kim, Yohan Lee, Yongwoo Song","submitted_at":"2025-05-26T09:57:25Z","abstract_excerpt":"We investigate long-context vulnerabilities in Large Language Models (LLMs) through Many-Shot Jailbreaking (MSJ). Our experiments utilize context length of up to 128K tokens. Through comprehensive analysis with various many-shot attack settings with different instruction styles, shot density, topic, and format, we reveal that context length is the primary factor determining attack effectiveness. Critically, we find that successful attacks do not require carefully crafted harmful content. Even repetitive shots or random dummy text can circumvent model safety measures, suggesting fundamental lim"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.19773","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.19773/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:09:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LGqd2qsLp7APPP6atiOANBSqkfiBOG615kEJVrfKABLFGR4tEeJ/tXYbFBaC12SoY9ah/bp+nVgXJaNk7DJPCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T09:26:54.958654Z"},"content_sha256":"4e1b598313bb594313ab541a0f0dd7362192c4d6e789f7db899d5be9ab27d18c","schema_version":"1.0","event_id":"sha256:4e1b598313bb594313ab541a0f0dd7362192c4d6e789f7db899d5be9ab27d18c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/J6VVBLJTIWRYZ2TO4DQ36QCSD4/bundle.json","state_url":"https://pith.science/pith/J6VVBLJTIWRYZ2TO4DQ36QCSD4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/J6VVBLJTIWRYZ2TO4DQ36QCSD4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T09:26:54Z","links":{"resolver":"https://pith.science/pith/J6VVBLJTIWRYZ2TO4DQ36QCSD4","bundle":"https://pith.science/pith/J6VVBLJTIWRYZ2TO4DQ36QCSD4/bundle.json","state":"https://pith.science/pith/J6VVBLJTIWRYZ2TO4DQ36QCSD4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/J6VVBLJTIWRYZ2TO4DQ36QCSD4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:J6VVBLJTIWRYZ2TO4DQ36QCSD4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e3975646f2c739659fc48ddcfbfe33ee0d735a6f5aa4b7e799a3262c9dc32e9d","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-26T09:57:25Z","title_canon_sha256":"4708904425d75dd66844d6abaa8e3efe58be7032a49eee5ad9e1fada18daeb2c"},"schema_version":"1.0","source":{"id":"2505.19773","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.19773","created_at":"2026-07-05T11:09:35Z"},{"alias_kind":"arxiv_version","alias_value":"2505.19773v1","created_at":"2026-07-05T11:09:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.19773","created_at":"2026-07-05T11:09:35Z"},{"alias_kind":"pith_short_12","alias_value":"J6VVBLJTIWRY","created_at":"2026-07-05T11:09:35Z"},{"alias_kind":"pith_short_16","alias_value":"J6VVBLJTIWRYZ2TO","created_at":"2026-07-05T11:09:35Z"},{"alias_kind":"pith_short_8","alias_value":"J6VVBLJT","created_at":"2026-07-05T11:09:35Z"}],"graph_snapshots":[{"event_id":"sha256:4e1b598313bb594313ab541a0f0dd7362192c4d6e789f7db899d5be9ab27d18c","target":"graph","created_at":"2026-07-05T11:09:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.19773/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We investigate long-context vulnerabilities in Large Language Models (LLMs) through Many-Shot Jailbreaking (MSJ). Our experiments utilize context length of up to 128K tokens. Through comprehensive analysis with various many-shot attack settings with different instruction styles, shot density, topic, and format, we reveal that context length is the primary factor determining attack effectiveness. Critically, we find that successful attacks do not require carefully crafted harmful content. Even repetitive shots or random dummy text can circumvent model safety measures, suggesting fundamental lim","authors_text":"Kimin Lee, Sangyeop Kim, Yohan Lee, Yongwoo Song","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.19773","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8905d5b049a15aa98efe7a76e9647cc2653f5dda2658b310ac0f9386087d43e1","target":"record","created_at":"2026-07-05T11:09:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e3975646f2c739659fc48ddcfbfe33ee0d735a6f5aa4b7e799a3262c9dc32e9d","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-26T09:57:25Z","title_canon_sha256":"4708904425d75dd66844d6abaa8e3efe58be7032a49eee5ad9e1fada18daeb2c"},"schema_version":"1.0","source":{"id":"2505.19773","kind":"arxiv","version":1}},"canonical_sha256":"4fab50ad3345a38cea6ee0e1bf40521f2682b6ba715a4f04717e142d9f02eed6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4fab50ad3345a38cea6ee0e1bf40521f2682b6ba715a4f04717e142d9f02eed6","first_computed_at":"2026-07-05T11:09:35.910783Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:09:35.910783Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MBYyWHrab0MuRxx0HUbr/2hh+HcINJ24+J24Vb+jnpgbSLClE8z24AYYtNcpHtl+YUTLxXLv91voc07JCT83Dw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:09:35.911284Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.19773","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8905d5b049a15aa98efe7a76e9647cc2653f5dda2658b310ac0f9386087d43e1","sha256:4e1b598313bb594313ab541a0f0dd7362192c4d6e789f7db899d5be9ab27d18c"],"state_sha256":"e63063e170aacb10ce1a44a4f5bc1473a68fde97eeb33007c039c60c8b16fe3e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+4cjkOAkC24P6AsqShWeUX2jDp/0DUSMZSPUAwQI+BDZqz2uAO5nMR4lARPVYRQNo1pnD2eqpKXfcBvxLgq3DQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T09:26:54.962086Z","bundle_sha256":"5322d21a0bd5cbb903ad79198a2fbf1a62a4f301b05f078da84f1fec62d42ffa"}}