{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:KWXXUUHVN4PWYPCSTL4AIG7ZP3","short_pith_number":"pith:KWXXUUHV","canonical_record":{"source":{"id":"2502.05223","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-05T21:50:34Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"ad2e7f86bbaa185a0221757ead825e70c34e5ffc20a97036302f5b932ccc3447","abstract_canon_sha256":"880bfda745cf82e9f0fdfc322ebe6056fce2cebab67d35606b56fba15912d5d5"},"schema_version":"1.0"},"canonical_sha256":"55af7a50f56f1f6c3c529af8041bf97ed10fcf7f6387833d9bab8ab7e598735a","source":{"kind":"arxiv","id":"2502.05223","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.05223","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"arxiv_version","alias_value":"2502.05223v1","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.05223","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"pith_short_12","alias_value":"KWXXUUHVN4PW","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"pith_short_16","alias_value":"KWXXUUHVN4PWYPCS","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"pith_short_8","alias_value":"KWXXUUHV","created_at":"2026-07-05T10:11:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:KWXXUUHVN4PWYPCSTL4AIG7ZP3","target":"record","payload":{"canonical_record":{"source":{"id":"2502.05223","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-05T21:50:34Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"ad2e7f86bbaa185a0221757ead825e70c34e5ffc20a97036302f5b932ccc3447","abstract_canon_sha256":"880bfda745cf82e9f0fdfc322ebe6056fce2cebab67d35606b56fba15912d5d5"},"schema_version":"1.0"},"canonical_sha256":"55af7a50f56f1f6c3c529af8041bf97ed10fcf7f6387833d9bab8ab7e598735a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:11:34.349931Z","signature_b64":"cKcZgfrQCvaZ6Y92JdrUk6JJDGMVei0ylbFNjjgtW2LA29kAYZ9z4sDuRV9OyUAdp8ysgQ8mMs40pTCGTZHFCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"55af7a50f56f1f6c3c529af8041bf97ed10fcf7f6387833d9bab8ab7e598735a","last_reissued_at":"2026-07-05T10:11:34.349561Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:11:34.349561Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.05223","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:11:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"33/YJ59K0GPAfvWEbQQKeU+J8zUvmMInOIfvK2uItikPRA7U+wpwqd5Po9g9d4CMnPkEOEegDktDORpVdYoYAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T16:28:13.106117Z"},"content_sha256":"ef58a089f9a1210896f849952ee931118d72a13c662310235c9af97807f696ef","schema_version":"1.0","event_id":"sha256:ef58a089f9a1210896f849952ee931118d72a13c662310235c9af97807f696ef"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:KWXXUUHVN4PWYPCSTL4AIG7ZP3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Buyun Liang, Darshan Thaker, Jinqi Luo, Kwan Ho Ryan Chan, Ren\\'e Vidal","submitted_at":"2025-02-05T21:50:34Z","abstract_excerpt":"Jailbreak attacks exploit specific prompts to bypass LLM safeguards, causing the LLM to generate harmful, inappropriate, and misaligned content. Current jailbreaking methods rely heavily on carefully designed system prompts and numerous queries to achieve a single successful attack, which is costly and impractical for large-scale red-teaming. To address this challenge, we propose to distill the knowledge of an ensemble of SOTA attackers into a single open-source model, called Knowledge-Distilled Attacker (KDA), which is finetuned to automatically generate coherent and diverse attack prompts wi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.05223","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.05223/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:11:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XbV4ESHKk3QO70iUzqppEOgKSlrOKOXSnYEAnGFFJy6uwewYgCDvKy0Teha5crEzUmKf6GibOMcbhJuUvvDNAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T16:28:13.107048Z"},"content_sha256":"0835f5736b22e9a5f81089ecb69005f2ed6047e336c9d388963cd546f8a14bcd","schema_version":"1.0","event_id":"sha256:0835f5736b22e9a5f81089ecb69005f2ed6047e336c9d388963cd546f8a14bcd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KWXXUUHVN4PWYPCSTL4AIG7ZP3/bundle.json","state_url":"https://pith.science/pith/KWXXUUHVN4PWYPCSTL4AIG7ZP3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KWXXUUHVN4PWYPCSTL4AIG7ZP3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T16:28:13Z","links":{"resolver":"https://pith.science/pith/KWXXUUHVN4PWYPCSTL4AIG7ZP3","bundle":"https://pith.science/pith/KWXXUUHVN4PWYPCSTL4AIG7ZP3/bundle.json","state":"https://pith.science/pith/KWXXUUHVN4PWYPCSTL4AIG7ZP3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KWXXUUHVN4PWYPCSTL4AIG7ZP3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:KWXXUUHVN4PWYPCSTL4AIG7ZP3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"880bfda745cf82e9f0fdfc322ebe6056fce2cebab67d35606b56fba15912d5d5","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-05T21:50:34Z","title_canon_sha256":"ad2e7f86bbaa185a0221757ead825e70c34e5ffc20a97036302f5b932ccc3447"},"schema_version":"1.0","source":{"id":"2502.05223","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.05223","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"arxiv_version","alias_value":"2502.05223v1","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.05223","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"pith_short_12","alias_value":"KWXXUUHVN4PW","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"pith_short_16","alias_value":"KWXXUUHVN4PWYPCS","created_at":"2026-07-05T10:11:34Z"},{"alias_kind":"pith_short_8","alias_value":"KWXXUUHV","created_at":"2026-07-05T10:11:34Z"}],"graph_snapshots":[{"event_id":"sha256:0835f5736b22e9a5f81089ecb69005f2ed6047e336c9d388963cd546f8a14bcd","target":"graph","created_at":"2026-07-05T10:11:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.05223/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Jailbreak attacks exploit specific prompts to bypass LLM safeguards, causing the LLM to generate harmful, inappropriate, and misaligned content. Current jailbreaking methods rely heavily on carefully designed system prompts and numerous queries to achieve a single successful attack, which is costly and impractical for large-scale red-teaming. To address this challenge, we propose to distill the knowledge of an ensemble of SOTA attackers into a single open-source model, called Knowledge-Distilled Attacker (KDA), which is finetuned to automatically generate coherent and diverse attack prompts wi","authors_text":"Buyun Liang, Darshan Thaker, Jinqi Luo, Kwan Ho Ryan Chan, Ren\\'e Vidal","cross_cats":["cs.AI","cs.CL","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-05T21:50:34Z","title":"KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.05223","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ef58a089f9a1210896f849952ee931118d72a13c662310235c9af97807f696ef","target":"record","created_at":"2026-07-05T10:11:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"880bfda745cf82e9f0fdfc322ebe6056fce2cebab67d35606b56fba15912d5d5","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-05T21:50:34Z","title_canon_sha256":"ad2e7f86bbaa185a0221757ead825e70c34e5ffc20a97036302f5b932ccc3447"},"schema_version":"1.0","source":{"id":"2502.05223","kind":"arxiv","version":1}},"canonical_sha256":"55af7a50f56f1f6c3c529af8041bf97ed10fcf7f6387833d9bab8ab7e598735a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"55af7a50f56f1f6c3c529af8041bf97ed10fcf7f6387833d9bab8ab7e598735a","first_computed_at":"2026-07-05T10:11:34.349561Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:11:34.349561Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cKcZgfrQCvaZ6Y92JdrUk6JJDGMVei0ylbFNjjgtW2LA29kAYZ9z4sDuRV9OyUAdp8ysgQ8mMs40pTCGTZHFCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:11:34.349931Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.05223","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ef58a089f9a1210896f849952ee931118d72a13c662310235c9af97807f696ef","sha256:0835f5736b22e9a5f81089ecb69005f2ed6047e336c9d388963cd546f8a14bcd"],"state_sha256":"de2fe3bb79c13fc5fe9880568974a6ad2591b1fd2fe7c83d7ac55f173b760419"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7q9FJfz3GVAy1cZ7LwrHprmHrUUVhKYDz/w038/OJzmFWP4Bv3/sbR6fi0pX15nU/+NkXtTbMjmfrZh4LPdNAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T16:28:13.112983Z","bundle_sha256":"e8a1b411deeccdac4e28b09528b6ffcc0c7f9bd4b09c94152649025cf24db048"}}