{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:JJBQJMR2S5BQTZYNZ4TUI3JMX7","short_pith_number":"pith:JJBQJMR2","canonical_record":{"source":{"id":"2402.14872","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-02-21T15:13:50Z","cross_cats_sorted":["cs.AI","cs.NE"],"title_canon_sha256":"30b3a078ee7db3d9acc8d6c2df44f7c286f6583eb9c0fa9460db348abc8dfa95","abstract_canon_sha256":"98c2ec71abbece9eafa4f12f132ff8ce2ac4db7880fe5e7026fb4d555c8349bc"},"schema_version":"1.0"},"canonical_sha256":"4a4304b23a974309e70dcf27446d2cbff69b5d9d301238d2cc2510f217b15c1d","source":{"kind":"arxiv","id":"2402.14872","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.14872","created_at":"2026-07-05T07:49:37Z"},{"alias_kind":"arxiv_version","alias_value":"2402.14872v2","created_at":"2026-07-05T07:49:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.14872","created_at":"2026-07-05T07:49:37Z"},{"alias_kind":"pith_short_12","alias_value":"JJBQJMR2S5BQ","created_at":"2026-07-05T07:49:37Z"},{"alias_kind":"pith_short_16","alias_value":"JJBQJMR2S5BQTZYN","created_at":"2026-07-05T07:49:37Z"},{"alias_kind":"pith_short_8","alias_value":"JJBQJMR2","created_at":"2026-07-05T07:49:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:JJBQJMR2S5BQTZYNZ4TUI3JMX7","target":"record","payload":{"canonical_record":{"source":{"id":"2402.14872","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-02-21T15:13:50Z","cross_cats_sorted":["cs.AI","cs.NE"],"title_canon_sha256":"30b3a078ee7db3d9acc8d6c2df44f7c286f6583eb9c0fa9460db348abc8dfa95","abstract_canon_sha256":"98c2ec71abbece9eafa4f12f132ff8ce2ac4db7880fe5e7026fb4d555c8349bc"},"schema_version":"1.0"},"canonical_sha256":"4a4304b23a974309e70dcf27446d2cbff69b5d9d301238d2cc2510f217b15c1d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:49:37.535188Z","signature_b64":"iPbXUy53TSmftU6VMPsShWyqxPNDC9DOtwDLa4nGJxc0e6FKrCp/Mr3GdNUdCGUVQ1kHm2kfDdVhNBdffIGvAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4a4304b23a974309e70dcf27446d2cbff69b5d9d301238d2cc2510f217b15c1d","last_reissued_at":"2026-07-05T07:49:37.534730Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:49:37.534730Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.14872","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:49:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nQHrj1+DlzUqasLa2U1QfE3Y2GxMdy1g6lLTTSOLJGd/R24brhkRa3Iew/L4zIrE1JjNsUjkQqzUvFz1braNDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T23:41:58.962157Z"},"content_sha256":"7e9451fad216107960720a7fd0d1df48b2ceda65993d530f8e4bb0d30d0adf86","schema_version":"1.0","event_id":"sha256:7e9451fad216107960720a7fd0d1df48b2ceda65993d530f8e4bb0d30d0adf86"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:JJBQJMR2S5BQTZYNZ4TUI3JMX7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.NE"],"primary_cat":"cs.CL","authors_text":"Aishan Liu, Ee-Chien Chang, Han Fang, Jiyi Zhang, Siyuan Liang, Xiaoxia Li","submitted_at":"2024-02-21T15:13:50Z","abstract_excerpt":"Large Language Models (LLMs), used in creative writing, code generation, and translation, generate text based on input sequences but are vulnerable to jailbreak attacks, where crafted prompts induce harmful outputs. Most jailbreak prompt methods use a combination of jailbreak templates followed by questions to ask to create jailbreak prompts. However, existing jailbreak prompt designs generally suffer from excessive semantic differences, resulting in an inability to resist defenses that use simple semantic metrics as thresholds. Jailbreak prompts are semantically more varied than the original "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.14872","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.14872/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:49:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"McR+/ulLD6wnRHbjIW5/uRXmrFx8jLZS7g5nfdtk3OSFgPHHuob1EjeD7BHxddFJriuIJPebtnwbMCioskF3DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T23:41:58.962677Z"},"content_sha256":"1ba5dfda68a2a80b19dbf281bf6b46910f1f697ceb999b515d7c19dc309888ec","schema_version":"1.0","event_id":"sha256:1ba5dfda68a2a80b19dbf281bf6b46910f1f697ceb999b515d7c19dc309888ec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JJBQJMR2S5BQTZYNZ4TUI3JMX7/bundle.json","state_url":"https://pith.science/pith/JJBQJMR2S5BQTZYNZ4TUI3JMX7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JJBQJMR2S5BQTZYNZ4TUI3JMX7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-31T23:41:58Z","links":{"resolver":"https://pith.science/pith/JJBQJMR2S5BQTZYNZ4TUI3JMX7","bundle":"https://pith.science/pith/JJBQJMR2S5BQTZYNZ4TUI3JMX7/bundle.json","state":"https://pith.science/pith/JJBQJMR2S5BQTZYNZ4TUI3JMX7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JJBQJMR2S5BQTZYNZ4TUI3JMX7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:JJBQJMR2S5BQTZYNZ4TUI3JMX7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"98c2ec71abbece9eafa4f12f132ff8ce2ac4db7880fe5e7026fb4d555c8349bc","cross_cats_sorted":["cs.AI","cs.NE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-02-21T15:13:50Z","title_canon_sha256":"30b3a078ee7db3d9acc8d6c2df44f7c286f6583eb9c0fa9460db348abc8dfa95"},"schema_version":"1.0","source":{"id":"2402.14872","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.14872","created_at":"2026-07-05T07:49:37Z"},{"alias_kind":"arxiv_version","alias_value":"2402.14872v2","created_at":"2026-07-05T07:49:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.14872","created_at":"2026-07-05T07:49:37Z"},{"alias_kind":"pith_short_12","alias_value":"JJBQJMR2S5BQ","created_at":"2026-07-05T07:49:37Z"},{"alias_kind":"pith_short_16","alias_value":"JJBQJMR2S5BQTZYN","created_at":"2026-07-05T07:49:37Z"},{"alias_kind":"pith_short_8","alias_value":"JJBQJMR2","created_at":"2026-07-05T07:49:37Z"}],"graph_snapshots":[{"event_id":"sha256:1ba5dfda68a2a80b19dbf281bf6b46910f1f697ceb999b515d7c19dc309888ec","target":"graph","created_at":"2026-07-05T07:49:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.14872/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs), used in creative writing, code generation, and translation, generate text based on input sequences but are vulnerable to jailbreak attacks, where crafted prompts induce harmful outputs. Most jailbreak prompt methods use a combination of jailbreak templates followed by questions to ask to create jailbreak prompts. However, existing jailbreak prompt designs generally suffer from excessive semantic differences, resulting in an inability to resist defenses that use simple semantic metrics as thresholds. Jailbreak prompts are semantically more varied than the original ","authors_text":"Aishan Liu, Ee-Chien Chang, Han Fang, Jiyi Zhang, Siyuan Liang, Xiaoxia Li","cross_cats":["cs.AI","cs.NE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-02-21T15:13:50Z","title":"Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.14872","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7e9451fad216107960720a7fd0d1df48b2ceda65993d530f8e4bb0d30d0adf86","target":"record","created_at":"2026-07-05T07:49:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"98c2ec71abbece9eafa4f12f132ff8ce2ac4db7880fe5e7026fb4d555c8349bc","cross_cats_sorted":["cs.AI","cs.NE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-02-21T15:13:50Z","title_canon_sha256":"30b3a078ee7db3d9acc8d6c2df44f7c286f6583eb9c0fa9460db348abc8dfa95"},"schema_version":"1.0","source":{"id":"2402.14872","kind":"arxiv","version":2}},"canonical_sha256":"4a4304b23a974309e70dcf27446d2cbff69b5d9d301238d2cc2510f217b15c1d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4a4304b23a974309e70dcf27446d2cbff69b5d9d301238d2cc2510f217b15c1d","first_computed_at":"2026-07-05T07:49:37.534730Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:49:37.534730Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"iPbXUy53TSmftU6VMPsShWyqxPNDC9DOtwDLa4nGJxc0e6FKrCp/Mr3GdNUdCGUVQ1kHm2kfDdVhNBdffIGvAA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:49:37.535188Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.14872","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7e9451fad216107960720a7fd0d1df48b2ceda65993d530f8e4bb0d30d0adf86","sha256:1ba5dfda68a2a80b19dbf281bf6b46910f1f697ceb999b515d7c19dc309888ec"],"state_sha256":"922e169912ec3a2f90ec3653ab9e6ed7a0df9b87caac64777aff50d34401e1ab"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i6zFCpu1al/IVsYUCmX6CqBwKHtkPiGKkBVELlHvT6HkWSd+FLtB3wQ5BiHtI8Rxe27k3W7GWOlqs4CnlVaRDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-31T23:41:58.967165Z","bundle_sha256":"46ff6c04426cfc514f564a1b0adbf3e4e74e348d973ec97a4439e61a35acfdf1"}}