{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:KMOWH25PVCCYZAW2HANYUYYVGH","short_pith_number":"pith:KMOWH25P","canonical_record":{"source":{"id":"2410.03869","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-04T19:04:43Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","cs.MM"],"title_canon_sha256":"4ce4f350715e58a5ada8167bf5ed509ee71ca99d6c0b300c8528a64f6378466a","abstract_canon_sha256":"12458f5a5d2f33350d987f6fa070b7b8447fd241e958998ca35f2423c2d7c251"},"schema_version":"1.0"},"canonical_sha256":"531d63ebafa8858c82da381b8a631531f4eb7eddd56aaf1f1f687c93e5222155","source":{"kind":"arxiv","id":"2410.03869","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.03869","created_at":"2026-07-05T11:14:49Z"},{"alias_kind":"arxiv_version","alias_value":"2410.03869v2","created_at":"2026-07-05T11:14:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.03869","created_at":"2026-07-05T11:14:49Z"},{"alias_kind":"pith_short_12","alias_value":"KMOWH25PVCCY","created_at":"2026-07-05T11:14:49Z"},{"alias_kind":"pith_short_16","alias_value":"KMOWH25PVCCYZAW2","created_at":"2026-07-05T11:14:49Z"},{"alias_kind":"pith_short_8","alias_value":"KMOWH25P","created_at":"2026-07-05T11:14:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:KMOWH25PVCCYZAW2HANYUYYVGH","target":"record","payload":{"canonical_record":{"source":{"id":"2410.03869","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-04T19:04:43Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","cs.MM"],"title_canon_sha256":"4ce4f350715e58a5ada8167bf5ed509ee71ca99d6c0b300c8528a64f6378466a","abstract_canon_sha256":"12458f5a5d2f33350d987f6fa070b7b8447fd241e958998ca35f2423c2d7c251"},"schema_version":"1.0"},"canonical_sha256":"531d63ebafa8858c82da381b8a631531f4eb7eddd56aaf1f1f687c93e5222155","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:14:49.572851Z","signature_b64":"gq4DSBwCH0L6xce4lMnpw8cgw4CUgtNSZgZCOxeT4/nQ0Q/lSRHbKP1YwIn8b1P/UeSkyhLdpeqNug6zFc5QBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"531d63ebafa8858c82da381b8a631531f4eb7eddd56aaf1f1f687c93e5222155","last_reissued_at":"2026-07-05T11:14:49.572454Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:14:49.572454Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.03869","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:14:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kepvbK/lMyJVpk1lqpyQDxJEwnhQJjU4s6p/UvDfPNMLWff3/ndtQtfLprd1dY1kj1N4zaYRWb8NhzuU6R1IDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T00:43:38.373829Z"},"content_sha256":"f3f5233a2617931448f415bfe1f51cba28ea74260daa9e20efd187b520893dfb","schema_version":"1.0","event_id":"sha256:f3f5233a2617931448f415bfe1f51cba28ea74260daa9e20efd187b520893dfb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:KMOWH25PVCCYZAW2HANYUYYVGH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Chain-of-Jailbreak Attack for Image Generation Models via Editing Step by Step","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.CV","cs.MM"],"primary_cat":"cs.CL","authors_text":"Jen-tse Huang, Kuiyi Gao, Qiuzhi Liu, Shuai Wang, Wenxiang Jiao, Wenxuan Wang, Youliang Yuan, Zhaopeng Tu","submitted_at":"2024-10-04T19:04:43Z","abstract_excerpt":"Text-based image generation models, such as Stable Diffusion and DALL-E 3, hold significant potential in content creation and publishing workflows, making them the focus in recent years. Despite their remarkable capability to generate diverse and vivid images, considerable efforts are being made to prevent the generation of harmful content, such as abusive, violent, or pornographic material. To assess the safety of existing models, we introduce a novel jailbreaking method called Chain-of-Jailbreak (CoJ) attack, which compromises image generation models through a step-by-step editing process. S"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.03869","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.03869/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:14:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9d/JZUFnMD/aXr9umT1xx1gpQjTqK5b+i88bKlR2DdBAaRDXNPhstyVThuP6iUjQfBV1khFCOGPVsBdmTDObBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T00:43:38.374372Z"},"content_sha256":"26a29a760035f1cee2a156a344b9621709660bbca44d4dbf24b074dfd5ab0b0e","schema_version":"1.0","event_id":"sha256:26a29a760035f1cee2a156a344b9621709660bbca44d4dbf24b074dfd5ab0b0e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KMOWH25PVCCYZAW2HANYUYYVGH/bundle.json","state_url":"https://pith.science/pith/KMOWH25PVCCYZAW2HANYUYYVGH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KMOWH25PVCCYZAW2HANYUYYVGH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T00:43:38Z","links":{"resolver":"https://pith.science/pith/KMOWH25PVCCYZAW2HANYUYYVGH","bundle":"https://pith.science/pith/KMOWH25PVCCYZAW2HANYUYYVGH/bundle.json","state":"https://pith.science/pith/KMOWH25PVCCYZAW2HANYUYYVGH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KMOWH25PVCCYZAW2HANYUYYVGH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:KMOWH25PVCCYZAW2HANYUYYVGH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"12458f5a5d2f33350d987f6fa070b7b8447fd241e958998ca35f2423c2d7c251","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","cs.MM"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-04T19:04:43Z","title_canon_sha256":"4ce4f350715e58a5ada8167bf5ed509ee71ca99d6c0b300c8528a64f6378466a"},"schema_version":"1.0","source":{"id":"2410.03869","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.03869","created_at":"2026-07-05T11:14:49Z"},{"alias_kind":"arxiv_version","alias_value":"2410.03869v2","created_at":"2026-07-05T11:14:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.03869","created_at":"2026-07-05T11:14:49Z"},{"alias_kind":"pith_short_12","alias_value":"KMOWH25PVCCY","created_at":"2026-07-05T11:14:49Z"},{"alias_kind":"pith_short_16","alias_value":"KMOWH25PVCCYZAW2","created_at":"2026-07-05T11:14:49Z"},{"alias_kind":"pith_short_8","alias_value":"KMOWH25P","created_at":"2026-07-05T11:14:49Z"}],"graph_snapshots":[{"event_id":"sha256:26a29a760035f1cee2a156a344b9621709660bbca44d4dbf24b074dfd5ab0b0e","target":"graph","created_at":"2026-07-05T11:14:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.03869/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Text-based image generation models, such as Stable Diffusion and DALL-E 3, hold significant potential in content creation and publishing workflows, making them the focus in recent years. Despite their remarkable capability to generate diverse and vivid images, considerable efforts are being made to prevent the generation of harmful content, such as abusive, violent, or pornographic material. To assess the safety of existing models, we introduce a novel jailbreaking method called Chain-of-Jailbreak (CoJ) attack, which compromises image generation models through a step-by-step editing process. S","authors_text":"Jen-tse Huang, Kuiyi Gao, Qiuzhi Liu, Shuai Wang, Wenxiang Jiao, Wenxuan Wang, Youliang Yuan, Zhaopeng Tu","cross_cats":["cs.AI","cs.CR","cs.CV","cs.MM"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-04T19:04:43Z","title":"Chain-of-Jailbreak Attack for Image Generation Models via Editing Step by Step"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.03869","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f3f5233a2617931448f415bfe1f51cba28ea74260daa9e20efd187b520893dfb","target":"record","created_at":"2026-07-05T11:14:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"12458f5a5d2f33350d987f6fa070b7b8447fd241e958998ca35f2423c2d7c251","cross_cats_sorted":["cs.AI","cs.CR","cs.CV","cs.MM"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-04T19:04:43Z","title_canon_sha256":"4ce4f350715e58a5ada8167bf5ed509ee71ca99d6c0b300c8528a64f6378466a"},"schema_version":"1.0","source":{"id":"2410.03869","kind":"arxiv","version":2}},"canonical_sha256":"531d63ebafa8858c82da381b8a631531f4eb7eddd56aaf1f1f687c93e5222155","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"531d63ebafa8858c82da381b8a631531f4eb7eddd56aaf1f1f687c93e5222155","first_computed_at":"2026-07-05T11:14:49.572454Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:14:49.572454Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gq4DSBwCH0L6xce4lMnpw8cgw4CUgtNSZgZCOxeT4/nQ0Q/lSRHbKP1YwIn8b1P/UeSkyhLdpeqNug6zFc5QBw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:14:49.572851Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.03869","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f3f5233a2617931448f415bfe1f51cba28ea74260daa9e20efd187b520893dfb","sha256:26a29a760035f1cee2a156a344b9621709660bbca44d4dbf24b074dfd5ab0b0e"],"state_sha256":"13537c14e5aaabd8fa459113539c54d3d995b0fde6991ba06ec1786b30bf592e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V1Eh37BoiQWgi9NK1XtrbH153b5CRYnHrcoXmtKvP32ObqyAYW5oxHIkQJicV5+MQO0CJaO4G0ahjkGx0fNaAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T00:43:38.377811Z","bundle_sha256":"6235dea595f38ab9df13a6c58de81524cedcd9e4814a1f97250170b48486fef8"}}