{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:JINEQKUTW5F5AHAQIFE5CD6CE3","short_pith_number":"pith:JINEQKUT","canonical_record":{"source":{"id":"2410.01606","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-02T14:47:05Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"f7302572c7dbda419650ff079ca30f147a2a307b3722c5129d2342c0b8e4611f","abstract_canon_sha256":"05ff4c7e73aeafab5a10bc8ec42a4bf7081b3f04de9af2d05614a9c9d79b28f0"},"schema_version":"1.0"},"canonical_sha256":"4a1a482a93b74bd01c104149d10fc226ceacfd6571e910974c6e4cd3593f0a41","source":{"kind":"arxiv","id":"2410.01606","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.01606","created_at":"2026-07-05T09:14:49Z"},{"alias_kind":"arxiv_version","alias_value":"2410.01606v1","created_at":"2026-07-05T09:14:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.01606","created_at":"2026-07-05T09:14:49Z"},{"alias_kind":"pith_short_12","alias_value":"JINEQKUTW5F5","created_at":"2026-07-05T09:14:49Z"},{"alias_kind":"pith_short_16","alias_value":"JINEQKUTW5F5AHAQ","created_at":"2026-07-05T09:14:49Z"},{"alias_kind":"pith_short_8","alias_value":"JINEQKUT","created_at":"2026-07-05T09:14:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:JINEQKUTW5F5AHAQIFE5CD6CE3","target":"record","payload":{"canonical_record":{"source":{"id":"2410.01606","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-02T14:47:05Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"f7302572c7dbda419650ff079ca30f147a2a307b3722c5129d2342c0b8e4611f","abstract_canon_sha256":"05ff4c7e73aeafab5a10bc8ec42a4bf7081b3f04de9af2d05614a9c9d79b28f0"},"schema_version":"1.0"},"canonical_sha256":"4a1a482a93b74bd01c104149d10fc226ceacfd6571e910974c6e4cd3593f0a41","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:14:49.896379Z","signature_b64":"1tg/VM6cIYly1uJ1qm5Kic4idtmnCxt1bsnXRABaJYI43sEQTJW94NfGl4nDRrwwVJffGMB2fLgdiai+A1dvDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4a1a482a93b74bd01c104149d10fc226ceacfd6571e910974c6e4cd3593f0a41","last_reissued_at":"2026-07-05T09:14:49.895931Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:14:49.895931Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.01606","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:14:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"K/K5nwSBIHWPinZY63Pgrm1SPNKOvP5s2rXHiODhCtuzbJKbrVOgcAXMbFKom0RXZK5TCJyPhdNAltOCeAbMBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T17:42:28.922735Z"},"content_sha256":"3b0ea9f4694038764742020bc6984065750f97e4c7e41774af855a75a6b32612","schema_version":"1.0","event_id":"sha256:3b0ea9f4694038764742020bc6984065750f97e4c7e41774af855a75a6b32612"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:JINEQKUTW5F5AHAQIFE5CD6CE3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Automated Red Teaming with GOAT: the Generative Offensive Agent Tester","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Aaron Grattafiori, Cristian Canton Ferrer, Erik Brinkman, Hailey Nguyen, Ivan Evtimov, Joanna Bitton, Joe Li, Krithika Iyer, Maya Pavlova, Vitor Albiero","submitted_at":"2024-10-02T14:47:05Z","abstract_excerpt":"Red teaming assesses how large language models (LLMs) can produce content that violates norms, policies, and rules set during their safety training. However, most existing automated methods in the literature are not representative of the way humans tend to interact with AI models. Common users of AI models may not have advanced knowledge of adversarial machine learning methods or access to model internals, and they do not spend a lot of time crafting a single highly effective adversarial prompt. Instead, they are likely to make use of techniques commonly shared online and exploit the multiturn"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.01606","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.01606/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:14:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/G8NHEBqWR8hYFOXCQhVXoXadhuHelXrfLrU+upMCroSYmmaZaWChEDmRHlf4ZNh6ma72srylOehBvw5HV2UBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T17:42:28.923149Z"},"content_sha256":"3473368391deb06f57aad62fb5518f5384337eb3df81d14986bce02902901749","schema_version":"1.0","event_id":"sha256:3473368391deb06f57aad62fb5518f5384337eb3df81d14986bce02902901749"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JINEQKUTW5F5AHAQIFE5CD6CE3/bundle.json","state_url":"https://pith.science/pith/JINEQKUTW5F5AHAQIFE5CD6CE3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JINEQKUTW5F5AHAQIFE5CD6CE3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T17:42:28Z","links":{"resolver":"https://pith.science/pith/JINEQKUTW5F5AHAQIFE5CD6CE3","bundle":"https://pith.science/pith/JINEQKUTW5F5AHAQIFE5CD6CE3/bundle.json","state":"https://pith.science/pith/JINEQKUTW5F5AHAQIFE5CD6CE3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JINEQKUTW5F5AHAQIFE5CD6CE3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:JINEQKUTW5F5AHAQIFE5CD6CE3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"05ff4c7e73aeafab5a10bc8ec42a4bf7081b3f04de9af2d05614a9c9d79b28f0","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-02T14:47:05Z","title_canon_sha256":"f7302572c7dbda419650ff079ca30f147a2a307b3722c5129d2342c0b8e4611f"},"schema_version":"1.0","source":{"id":"2410.01606","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.01606","created_at":"2026-07-05T09:14:49Z"},{"alias_kind":"arxiv_version","alias_value":"2410.01606v1","created_at":"2026-07-05T09:14:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.01606","created_at":"2026-07-05T09:14:49Z"},{"alias_kind":"pith_short_12","alias_value":"JINEQKUTW5F5","created_at":"2026-07-05T09:14:49Z"},{"alias_kind":"pith_short_16","alias_value":"JINEQKUTW5F5AHAQ","created_at":"2026-07-05T09:14:49Z"},{"alias_kind":"pith_short_8","alias_value":"JINEQKUT","created_at":"2026-07-05T09:14:49Z"}],"graph_snapshots":[{"event_id":"sha256:3473368391deb06f57aad62fb5518f5384337eb3df81d14986bce02902901749","target":"graph","created_at":"2026-07-05T09:14:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.01606/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Red teaming assesses how large language models (LLMs) can produce content that violates norms, policies, and rules set during their safety training. However, most existing automated methods in the literature are not representative of the way humans tend to interact with AI models. Common users of AI models may not have advanced knowledge of adversarial machine learning methods or access to model internals, and they do not spend a lot of time crafting a single highly effective adversarial prompt. Instead, they are likely to make use of techniques commonly shared online and exploit the multiturn","authors_text":"Aaron Grattafiori, Cristian Canton Ferrer, Erik Brinkman, Hailey Nguyen, Ivan Evtimov, Joanna Bitton, Joe Li, Krithika Iyer, Maya Pavlova, Vitor Albiero","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-02T14:47:05Z","title":"Automated Red Teaming with GOAT: the Generative Offensive Agent Tester"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.01606","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3b0ea9f4694038764742020bc6984065750f97e4c7e41774af855a75a6b32612","target":"record","created_at":"2026-07-05T09:14:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"05ff4c7e73aeafab5a10bc8ec42a4bf7081b3f04de9af2d05614a9c9d79b28f0","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-02T14:47:05Z","title_canon_sha256":"f7302572c7dbda419650ff079ca30f147a2a307b3722c5129d2342c0b8e4611f"},"schema_version":"1.0","source":{"id":"2410.01606","kind":"arxiv","version":1}},"canonical_sha256":"4a1a482a93b74bd01c104149d10fc226ceacfd6571e910974c6e4cd3593f0a41","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4a1a482a93b74bd01c104149d10fc226ceacfd6571e910974c6e4cd3593f0a41","first_computed_at":"2026-07-05T09:14:49.895931Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:14:49.895931Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1tg/VM6cIYly1uJ1qm5Kic4idtmnCxt1bsnXRABaJYI43sEQTJW94NfGl4nDRrwwVJffGMB2fLgdiai+A1dvDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:14:49.896379Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.01606","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3b0ea9f4694038764742020bc6984065750f97e4c7e41774af855a75a6b32612","sha256:3473368391deb06f57aad62fb5518f5384337eb3df81d14986bce02902901749"],"state_sha256":"6a88ab20b9ba538b6d2f267658b3f36316b2a4140bf6c2672c93188af145df8e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eKuz2EI70pakAwJJG0/tVS8pbZxRTkpD9/bNTxDQeeyuWk+V6Jfhv9O+8pVKdPJOuylmxBVDstZ711Kviu2OCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T17:42:28.927026Z","bundle_sha256":"d206e91514ade8a330a84db2ce1c627b490167dcf3bc641eef4de677706c3b8d"}}