{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:LQFKJS6GISR5VN6FIRXCSOEHY4","short_pith_number":"pith:LQFKJS6G","canonical_record":{"source":{"id":"2501.11183","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-19T21:49:42Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"b1ffb984caa88624b532a4d8b44d774d5acee6a2ff97ff67ef9bc7e5794d99b8","abstract_canon_sha256":"83e745680026e043b94daee070ad5be32a4f3ca17ee3de8c861b85461a60cd1f"},"schema_version":"1.0"},"canonical_sha256":"5c0aa4cbc644a3dab7c5446e293887c727b12aabe00bddae0c49ab1d1f3eb3a0","source":{"kind":"arxiv","id":"2501.11183","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.11183","created_at":"2026-07-05T10:03:04Z"},{"alias_kind":"arxiv_version","alias_value":"2501.11183v1","created_at":"2026-07-05T10:03:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.11183","created_at":"2026-07-05T10:03:04Z"},{"alias_kind":"pith_short_12","alias_value":"LQFKJS6GISR5","created_at":"2026-07-05T10:03:04Z"},{"alias_kind":"pith_short_16","alias_value":"LQFKJS6GISR5VN6F","created_at":"2026-07-05T10:03:04Z"},{"alias_kind":"pith_short_8","alias_value":"LQFKJS6G","created_at":"2026-07-05T10:03:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:LQFKJS6GISR5VN6FIRXCSOEHY4","target":"record","payload":{"canonical_record":{"source":{"id":"2501.11183","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-19T21:49:42Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"b1ffb984caa88624b532a4d8b44d774d5acee6a2ff97ff67ef9bc7e5794d99b8","abstract_canon_sha256":"83e745680026e043b94daee070ad5be32a4f3ca17ee3de8c861b85461a60cd1f"},"schema_version":"1.0"},"canonical_sha256":"5c0aa4cbc644a3dab7c5446e293887c727b12aabe00bddae0c49ab1d1f3eb3a0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:03:04.735282Z","signature_b64":"pQFXseQu05gMwYXrE4Etw0BQhv+b72AMpKRBmKMpNd4RXPi2nudo9aI7lJQD8rw2KqAGu1h8m5isqxMNNQq4CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5c0aa4cbc644a3dab7c5446e293887c727b12aabe00bddae0c49ab1d1f3eb3a0","last_reissued_at":"2026-07-05T10:03:04.734903Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:03:04.734903Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.11183","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:03:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"x79PPzMzvAM2lDo/3lQ9jxw6Jxpn4jaGB9JmcBvgblP5RIJxMrn9pIZMdF3IwSR2tos75lmhA/v0RetSHYnwBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T09:04:54.258572Z"},"content_sha256":"c84a9e05ca980b38c90a566671b9e04b9c3abafe25f679347947cb022f134585","schema_version":"1.0","event_id":"sha256:c84a9e05ca980b38c90a566671b9e04b9c3abafe25f679347947cb022f134585"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:LQFKJS6GISR5VN6FIRXCSOEHY4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Can Safety Fine-Tuning Be More Principled? Lessons Learned from Cybersecurity","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Adam Oberman, David Williams-King, Linh Le, Yoshua Bengio","submitted_at":"2025-01-19T21:49:42Z","abstract_excerpt":"As LLMs develop increasingly advanced capabilities, there is an increased need to minimize the harm that could be caused to society by certain model outputs; hence, most LLMs have safety guardrails added, for example via fine-tuning. In this paper, we argue the position that current safety fine-tuning is very similar to a traditional cat-and-mouse game (or arms race) between attackers and defenders in cybersecurity. Model jailbreaks and attacks are patched with bandaids to target the specific attack mechanism, but many similar attack vectors might remain. When defenders are not proactively com"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.11183","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.11183/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:03:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F7wthiOXkEm+uRpCQbhiNabb95QeF/XcEnqJxhDedt4TyfU5R5jUILw9ofwL3HpM1vCctxbutKw7aa85V9xqAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T09:04:54.259105Z"},"content_sha256":"dd7654b1233dcf1bb14d4fa4f22438c46c5fbb38a77ce25dd9ceb78223e1fa4a","schema_version":"1.0","event_id":"sha256:dd7654b1233dcf1bb14d4fa4f22438c46c5fbb38a77ce25dd9ceb78223e1fa4a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LQFKJS6GISR5VN6FIRXCSOEHY4/bundle.json","state_url":"https://pith.science/pith/LQFKJS6GISR5VN6FIRXCSOEHY4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LQFKJS6GISR5VN6FIRXCSOEHY4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T09:04:54Z","links":{"resolver":"https://pith.science/pith/LQFKJS6GISR5VN6FIRXCSOEHY4","bundle":"https://pith.science/pith/LQFKJS6GISR5VN6FIRXCSOEHY4/bundle.json","state":"https://pith.science/pith/LQFKJS6GISR5VN6FIRXCSOEHY4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LQFKJS6GISR5VN6FIRXCSOEHY4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:LQFKJS6GISR5VN6FIRXCSOEHY4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"83e745680026e043b94daee070ad5be32a4f3ca17ee3de8c861b85461a60cd1f","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-19T21:49:42Z","title_canon_sha256":"b1ffb984caa88624b532a4d8b44d774d5acee6a2ff97ff67ef9bc7e5794d99b8"},"schema_version":"1.0","source":{"id":"2501.11183","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.11183","created_at":"2026-07-05T10:03:04Z"},{"alias_kind":"arxiv_version","alias_value":"2501.11183v1","created_at":"2026-07-05T10:03:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.11183","created_at":"2026-07-05T10:03:04Z"},{"alias_kind":"pith_short_12","alias_value":"LQFKJS6GISR5","created_at":"2026-07-05T10:03:04Z"},{"alias_kind":"pith_short_16","alias_value":"LQFKJS6GISR5VN6F","created_at":"2026-07-05T10:03:04Z"},{"alias_kind":"pith_short_8","alias_value":"LQFKJS6G","created_at":"2026-07-05T10:03:04Z"}],"graph_snapshots":[{"event_id":"sha256:dd7654b1233dcf1bb14d4fa4f22438c46c5fbb38a77ce25dd9ceb78223e1fa4a","target":"graph","created_at":"2026-07-05T10:03:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.11183/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As LLMs develop increasingly advanced capabilities, there is an increased need to minimize the harm that could be caused to society by certain model outputs; hence, most LLMs have safety guardrails added, for example via fine-tuning. In this paper, we argue the position that current safety fine-tuning is very similar to a traditional cat-and-mouse game (or arms race) between attackers and defenders in cybersecurity. Model jailbreaks and attacks are patched with bandaids to target the specific attack mechanism, but many similar attack vectors might remain. When defenders are not proactively com","authors_text":"Adam Oberman, David Williams-King, Linh Le, Yoshua Bengio","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-19T21:49:42Z","title":"Can Safety Fine-Tuning Be More Principled? Lessons Learned from Cybersecurity"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.11183","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c84a9e05ca980b38c90a566671b9e04b9c3abafe25f679347947cb022f134585","target":"record","created_at":"2026-07-05T10:03:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"83e745680026e043b94daee070ad5be32a4f3ca17ee3de8c861b85461a60cd1f","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-19T21:49:42Z","title_canon_sha256":"b1ffb984caa88624b532a4d8b44d774d5acee6a2ff97ff67ef9bc7e5794d99b8"},"schema_version":"1.0","source":{"id":"2501.11183","kind":"arxiv","version":1}},"canonical_sha256":"5c0aa4cbc644a3dab7c5446e293887c727b12aabe00bddae0c49ab1d1f3eb3a0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5c0aa4cbc644a3dab7c5446e293887c727b12aabe00bddae0c49ab1d1f3eb3a0","first_computed_at":"2026-07-05T10:03:04.734903Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:03:04.734903Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"pQFXseQu05gMwYXrE4Etw0BQhv+b72AMpKRBmKMpNd4RXPi2nudo9aI7lJQD8rw2KqAGu1h8m5isqxMNNQq4CA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:03:04.735282Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.11183","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c84a9e05ca980b38c90a566671b9e04b9c3abafe25f679347947cb022f134585","sha256:dd7654b1233dcf1bb14d4fa4f22438c46c5fbb38a77ce25dd9ceb78223e1fa4a"],"state_sha256":"cd5d65352f534adb8a4255dfce38a46c6856428fb9204a2b8ace2819cb40baaf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+1aRdXf8Xgxy8RcJcJCPx449zgkyD4CLyA/e0AHNlBQ2bejekueRUPTRV/nOZzbyyKYvILu5K/9vuDPQVefJCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T09:04:54.263914Z","bundle_sha256":"42d0dcaa9dddcad40865c597f930cc3790202423b199c74686b9f5bda086bd80"}}