{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:JBS6HFKV6WUZZ3LI75EOOHGCLD","short_pith_number":"pith:JBS6HFKV","canonical_record":{"source":{"id":"2405.19668","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-30T03:38:31Z","cross_cats_sorted":[],"title_canon_sha256":"260bd759ddfce45cc41f278394af895b1815c50f69b2847b51ce5f5fb6b399b7","abstract_canon_sha256":"66f17131dff8438f1760701a936faae7639f9b0195b663066cb5ec8454c9ca9c"},"schema_version":"1.0"},"canonical_sha256":"4865e39555f5a99ced68ff48e71cc258fc8d116ab625b28da49b58e7cfd51d92","source":{"kind":"arxiv","id":"2405.19668","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.19668","created_at":"2026-07-05T08:25:10Z"},{"alias_kind":"arxiv_version","alias_value":"2405.19668v1","created_at":"2026-07-05T08:25:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.19668","created_at":"2026-07-05T08:25:10Z"},{"alias_kind":"pith_short_12","alias_value":"JBS6HFKV6WUZ","created_at":"2026-07-05T08:25:10Z"},{"alias_kind":"pith_short_16","alias_value":"JBS6HFKV6WUZZ3LI","created_at":"2026-07-05T08:25:10Z"},{"alias_kind":"pith_short_8","alias_value":"JBS6HFKV","created_at":"2026-07-05T08:25:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:JBS6HFKV6WUZZ3LI75EOOHGCLD","target":"record","payload":{"canonical_record":{"source":{"id":"2405.19668","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-30T03:38:31Z","cross_cats_sorted":[],"title_canon_sha256":"260bd759ddfce45cc41f278394af895b1815c50f69b2847b51ce5f5fb6b399b7","abstract_canon_sha256":"66f17131dff8438f1760701a936faae7639f9b0195b663066cb5ec8454c9ca9c"},"schema_version":"1.0"},"canonical_sha256":"4865e39555f5a99ced68ff48e71cc258fc8d116ab625b28da49b58e7cfd51d92","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:25:10.933516Z","signature_b64":"PAZ7wIpze/zNAvSDfBjkvaG9BKPUfHx/v83rIlna8SK3668wV41kOzB8SVt67A6o7XqId3fptQaPMT0fcvzADw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4865e39555f5a99ced68ff48e71cc258fc8d116ab625b28da49b58e7cfd51d92","last_reissued_at":"2026-07-05T08:25:10.933016Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:25:10.933016Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.19668","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:25:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u8BIRtITuKx+y/Dbv9epQOvcZgepxRpp9dI+Bii5+6Mux0pHSv6knyCYRrIay7p0yQqH5zPx8kZ4p6VkyB0qAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T21:25:34.576346Z"},"content_sha256":"99819d0edfee4e20a298607a15e03e03a1cd6b71e516341cdd3f58e3c16f8ee0","schema_version":"1.0","event_id":"sha256:99819d0edfee4e20a298607a15e03e03a1cd6b71e516341cdd3f58e3c16f8ee0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:JBS6HFKV6WUZZ3LI75EOOHGCLD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AutoBreach: Universal and Adaptive Jailbreaking with Efficient Wordplay-Guided Optimization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Hang Su, Jiawei Chen, Xiao Yang, Yinpeng Dong, Yu Tian, Zhaoxia Yin, Zhengwei Fang","submitted_at":"2024-05-30T03:38:31Z","abstract_excerpt":"Despite the widespread application of large language models (LLMs) across various tasks, recent studies indicate that they are susceptible to jailbreak attacks, which can render their defense mechanisms ineffective. However, previous jailbreak research has frequently been constrained by limited universality, suboptimal efficiency, and a reliance on manual crafting. In response, we rethink the approach to jailbreaking LLMs and formally define three essential properties from the attacker' s perspective, which contributes to guiding the design of jailbreak methods. We further introduce AutoBreach"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.19668","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.19668/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:25:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mvKnl3IHTBElwoYv2NX739mkd3YagqnTYThdtGPwdfJPVcqYqv9/GQyd8lLtcQhW+Q+dwqIeqPd/SWB6bJP6AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T21:25:34.576868Z"},"content_sha256":"db7e9951d706e3d2816d56193ca16eb1919c170998314cf8d02383241bc9842a","schema_version":"1.0","event_id":"sha256:db7e9951d706e3d2816d56193ca16eb1919c170998314cf8d02383241bc9842a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JBS6HFKV6WUZZ3LI75EOOHGCLD/bundle.json","state_url":"https://pith.science/pith/JBS6HFKV6WUZZ3LI75EOOHGCLD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JBS6HFKV6WUZZ3LI75EOOHGCLD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T21:25:34Z","links":{"resolver":"https://pith.science/pith/JBS6HFKV6WUZZ3LI75EOOHGCLD","bundle":"https://pith.science/pith/JBS6HFKV6WUZZ3LI75EOOHGCLD/bundle.json","state":"https://pith.science/pith/JBS6HFKV6WUZZ3LI75EOOHGCLD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JBS6HFKV6WUZZ3LI75EOOHGCLD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:JBS6HFKV6WUZZ3LI75EOOHGCLD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"66f17131dff8438f1760701a936faae7639f9b0195b663066cb5ec8454c9ca9c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-30T03:38:31Z","title_canon_sha256":"260bd759ddfce45cc41f278394af895b1815c50f69b2847b51ce5f5fb6b399b7"},"schema_version":"1.0","source":{"id":"2405.19668","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.19668","created_at":"2026-07-05T08:25:10Z"},{"alias_kind":"arxiv_version","alias_value":"2405.19668v1","created_at":"2026-07-05T08:25:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.19668","created_at":"2026-07-05T08:25:10Z"},{"alias_kind":"pith_short_12","alias_value":"JBS6HFKV6WUZ","created_at":"2026-07-05T08:25:10Z"},{"alias_kind":"pith_short_16","alias_value":"JBS6HFKV6WUZZ3LI","created_at":"2026-07-05T08:25:10Z"},{"alias_kind":"pith_short_8","alias_value":"JBS6HFKV","created_at":"2026-07-05T08:25:10Z"}],"graph_snapshots":[{"event_id":"sha256:db7e9951d706e3d2816d56193ca16eb1919c170998314cf8d02383241bc9842a","target":"graph","created_at":"2026-07-05T08:25:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.19668/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite the widespread application of large language models (LLMs) across various tasks, recent studies indicate that they are susceptible to jailbreak attacks, which can render their defense mechanisms ineffective. However, previous jailbreak research has frequently been constrained by limited universality, suboptimal efficiency, and a reliance on manual crafting. In response, we rethink the approach to jailbreaking LLMs and formally define three essential properties from the attacker' s perspective, which contributes to guiding the design of jailbreak methods. We further introduce AutoBreach","authors_text":"Hang Su, Jiawei Chen, Xiao Yang, Yinpeng Dong, Yu Tian, Zhaoxia Yin, Zhengwei Fang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-30T03:38:31Z","title":"AutoBreach: Universal and Adaptive Jailbreaking with Efficient Wordplay-Guided Optimization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.19668","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:99819d0edfee4e20a298607a15e03e03a1cd6b71e516341cdd3f58e3c16f8ee0","target":"record","created_at":"2026-07-05T08:25:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"66f17131dff8438f1760701a936faae7639f9b0195b663066cb5ec8454c9ca9c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-05-30T03:38:31Z","title_canon_sha256":"260bd759ddfce45cc41f278394af895b1815c50f69b2847b51ce5f5fb6b399b7"},"schema_version":"1.0","source":{"id":"2405.19668","kind":"arxiv","version":1}},"canonical_sha256":"4865e39555f5a99ced68ff48e71cc258fc8d116ab625b28da49b58e7cfd51d92","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4865e39555f5a99ced68ff48e71cc258fc8d116ab625b28da49b58e7cfd51d92","first_computed_at":"2026-07-05T08:25:10.933016Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:25:10.933016Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PAZ7wIpze/zNAvSDfBjkvaG9BKPUfHx/v83rIlna8SK3668wV41kOzB8SVt67A6o7XqId3fptQaPMT0fcvzADw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:25:10.933516Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.19668","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:99819d0edfee4e20a298607a15e03e03a1cd6b71e516341cdd3f58e3c16f8ee0","sha256:db7e9951d706e3d2816d56193ca16eb1919c170998314cf8d02383241bc9842a"],"state_sha256":"83dbaed02bd434c2709474fa56c077a4efd936321fff8bca7a9f388de134ce92"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZEouoQVFqEOknt/7666sppyfmu1qoD/1cX8PYVbzVsjJGVWX0jivuPqPXmyAnO2UEAxd+M9BfP/sH2E5x4heBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T21:25:34.585153Z","bundle_sha256":"dcefc5fb4d74e4eb9860060035a2802020ab9e08ee9f8545a3e84fe80f5bce7d"}}