{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:KYJ7I6UP42QGMGLGVOQX7N4FFZ","short_pith_number":"pith:KYJ7I6UP","canonical_record":{"source":{"id":"2402.09091","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-14T11:11:51Z","cross_cats_sorted":["cs.AI","cs.HC"],"title_canon_sha256":"9d93bc8c297943615fe0af9e7c75c7a60ae24f04e7058b4472de1caf87294211","abstract_canon_sha256":"6be4ac0fbc8874087a07035cf12b3272063ea8b189cc29ccb2e87040194af7d7"},"schema_version":"1.0"},"canonical_sha256":"5613f47a8fe6a0661966aba17fb7852e4c74f300675c01f27f6be2fc56666dbd","source":{"kind":"arxiv","id":"2402.09091","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.09091","created_at":"2026-07-05T08:57:36Z"},{"alias_kind":"arxiv_version","alias_value":"2402.09091v2","created_at":"2026-07-05T08:57:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.09091","created_at":"2026-07-05T08:57:36Z"},{"alias_kind":"pith_short_12","alias_value":"KYJ7I6UP42QG","created_at":"2026-07-05T08:57:36Z"},{"alias_kind":"pith_short_16","alias_value":"KYJ7I6UP42QGMGLG","created_at":"2026-07-05T08:57:36Z"},{"alias_kind":"pith_short_8","alias_value":"KYJ7I6UP","created_at":"2026-07-05T08:57:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:KYJ7I6UP42QGMGLGVOQX7N4FFZ","target":"record","payload":{"canonical_record":{"source":{"id":"2402.09091","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-14T11:11:51Z","cross_cats_sorted":["cs.AI","cs.HC"],"title_canon_sha256":"9d93bc8c297943615fe0af9e7c75c7a60ae24f04e7058b4472de1caf87294211","abstract_canon_sha256":"6be4ac0fbc8874087a07035cf12b3272063ea8b189cc29ccb2e87040194af7d7"},"schema_version":"1.0"},"canonical_sha256":"5613f47a8fe6a0661966aba17fb7852e4c74f300675c01f27f6be2fc56666dbd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:57:36.002031Z","signature_b64":"m43n7m1SuUC/5scBVNd62Jp0cLpC8gpiw9hwiDSpA7l0XcebtFRPLNGWT+C5PH1wABK6CiN7LDjFj+PFEhK4BQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5613f47a8fe6a0661966aba17fb7852e4c74f300675c01f27f6be2fc56666dbd","last_reissued_at":"2026-07-05T08:57:36.001538Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:57:36.001538Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.09091","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:57:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"anyMUdQcNjNArzJM6ed6lUuIDe3A02dU72Hbv9ErUijMIySzMEHIczz1+jUVxtBvIdQT/WGq4A2Px2Ct51YNBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T18:24:18.650983Z"},"content_sha256":"e3abd8a115410338c98bf568f1f5d5dbf92ed31976fdb5ec9e2c00be42da2fad","schema_version":"1.0","event_id":"sha256:e3abd8a115410338c98bf568f1f5d5dbf92ed31976fdb5ec9e2c00be42da2fad"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:KYJ7I6UP42QGMGLGVOQX7N4FFZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Play Guessing Game with LLM: Indirect Jailbreak Attack with Implicit Clues","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.HC"],"primary_cat":"cs.CR","authors_text":"Junjie Wang, Mingyang Li, Qing Wang, Yang Liu, Yi Liu, Zhiyuan Chang","submitted_at":"2024-02-14T11:11:51Z","abstract_excerpt":"With the development of LLMs, the security threats of LLMs are getting more and more attention. Numerous jailbreak attacks have been proposed to assess the security defense of LLMs. Current jailbreak attacks primarily utilize scenario camouflage techniques. However their explicitly mention of malicious intent will be easily recognized and defended by LLMs. In this paper, we propose an indirect jailbreak attack approach, Puzzler, which can bypass the LLM's defense strategy and obtain malicious response by implicitly providing LLMs with some clues about the original malicious query. In addition,"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.09091","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.09091/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:57:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mYrmvAcjnR7x0Fe30IJcqsOD1JhazdA1n6yNAaRByaBL3iu8eqleNSjeQ00C9D/dNbVPAFdAyFR8Q+ZfYU/xDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T18:24:18.651958Z"},"content_sha256":"ad10634b9c60ec6021b9a05515842412041685639592c31c4f407a1931424ebd","schema_version":"1.0","event_id":"sha256:ad10634b9c60ec6021b9a05515842412041685639592c31c4f407a1931424ebd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KYJ7I6UP42QGMGLGVOQX7N4FFZ/bundle.json","state_url":"https://pith.science/pith/KYJ7I6UP42QGMGLGVOQX7N4FFZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KYJ7I6UP42QGMGLGVOQX7N4FFZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T18:24:18Z","links":{"resolver":"https://pith.science/pith/KYJ7I6UP42QGMGLGVOQX7N4FFZ","bundle":"https://pith.science/pith/KYJ7I6UP42QGMGLGVOQX7N4FFZ/bundle.json","state":"https://pith.science/pith/KYJ7I6UP42QGMGLGVOQX7N4FFZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KYJ7I6UP42QGMGLGVOQX7N4FFZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:KYJ7I6UP42QGMGLGVOQX7N4FFZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6be4ac0fbc8874087a07035cf12b3272063ea8b189cc29ccb2e87040194af7d7","cross_cats_sorted":["cs.AI","cs.HC"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-14T11:11:51Z","title_canon_sha256":"9d93bc8c297943615fe0af9e7c75c7a60ae24f04e7058b4472de1caf87294211"},"schema_version":"1.0","source":{"id":"2402.09091","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.09091","created_at":"2026-07-05T08:57:36Z"},{"alias_kind":"arxiv_version","alias_value":"2402.09091v2","created_at":"2026-07-05T08:57:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.09091","created_at":"2026-07-05T08:57:36Z"},{"alias_kind":"pith_short_12","alias_value":"KYJ7I6UP42QG","created_at":"2026-07-05T08:57:36Z"},{"alias_kind":"pith_short_16","alias_value":"KYJ7I6UP42QGMGLG","created_at":"2026-07-05T08:57:36Z"},{"alias_kind":"pith_short_8","alias_value":"KYJ7I6UP","created_at":"2026-07-05T08:57:36Z"}],"graph_snapshots":[{"event_id":"sha256:ad10634b9c60ec6021b9a05515842412041685639592c31c4f407a1931424ebd","target":"graph","created_at":"2026-07-05T08:57:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.09091/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the development of LLMs, the security threats of LLMs are getting more and more attention. Numerous jailbreak attacks have been proposed to assess the security defense of LLMs. Current jailbreak attacks primarily utilize scenario camouflage techniques. However their explicitly mention of malicious intent will be easily recognized and defended by LLMs. In this paper, we propose an indirect jailbreak attack approach, Puzzler, which can bypass the LLM's defense strategy and obtain malicious response by implicitly providing LLMs with some clues about the original malicious query. In addition,","authors_text":"Junjie Wang, Mingyang Li, Qing Wang, Yang Liu, Yi Liu, Zhiyuan Chang","cross_cats":["cs.AI","cs.HC"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-14T11:11:51Z","title":"Play Guessing Game with LLM: Indirect Jailbreak Attack with Implicit Clues"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.09091","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e3abd8a115410338c98bf568f1f5d5dbf92ed31976fdb5ec9e2c00be42da2fad","target":"record","created_at":"2026-07-05T08:57:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6be4ac0fbc8874087a07035cf12b3272063ea8b189cc29ccb2e87040194af7d7","cross_cats_sorted":["cs.AI","cs.HC"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-14T11:11:51Z","title_canon_sha256":"9d93bc8c297943615fe0af9e7c75c7a60ae24f04e7058b4472de1caf87294211"},"schema_version":"1.0","source":{"id":"2402.09091","kind":"arxiv","version":2}},"canonical_sha256":"5613f47a8fe6a0661966aba17fb7852e4c74f300675c01f27f6be2fc56666dbd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5613f47a8fe6a0661966aba17fb7852e4c74f300675c01f27f6be2fc56666dbd","first_computed_at":"2026-07-05T08:57:36.001538Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:57:36.001538Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"m43n7m1SuUC/5scBVNd62Jp0cLpC8gpiw9hwiDSpA7l0XcebtFRPLNGWT+C5PH1wABK6CiN7LDjFj+PFEhK4BQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:57:36.002031Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.09091","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e3abd8a115410338c98bf568f1f5d5dbf92ed31976fdb5ec9e2c00be42da2fad","sha256:ad10634b9c60ec6021b9a05515842412041685639592c31c4f407a1931424ebd"],"state_sha256":"e24fe7a2989085a227bdcee7dc1deb91035403a61c9a4eaeab29e17f93b4f06a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vGEvFHtXupPhdvNFk0rN/0uWTdKmydVo0SPhmMVaUaz7Ym8IJWGv1LsSXrStHKf30OcCZ7uD2vr+M5ohViDvAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T18:24:18.658872Z","bundle_sha256":"ca1725803ada6ea976f5eedfde522e09a2f2bd34fdc716ebc7c9af982154b098"}}