{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:M4XVKVT76URFUNTCIE4HE63XZU","short_pith_number":"pith:M4XVKVT7","canonical_record":{"source":{"id":"2502.15806","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-19T07:23:36Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"b899e0fe43e28bfe937753ae628e112a8b79e0290108631fc45e67b5359df4c1","abstract_canon_sha256":"14b8959ebdd90e0b0dae44b12747324451b4e4161617f278f6b0eec5807ef410"},"schema_version":"1.0"},"canonical_sha256":"672f55567ff5225a36624138727b77cd10d6fa166732f6aef8262e53670c7b83","source":{"kind":"arxiv","id":"2502.15806","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.15806","created_at":"2026-07-05T11:14:54Z"},{"alias_kind":"arxiv_version","alias_value":"2502.15806v2","created_at":"2026-07-05T11:14:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.15806","created_at":"2026-07-05T11:14:54Z"},{"alias_kind":"pith_short_12","alias_value":"M4XVKVT76URF","created_at":"2026-07-05T11:14:54Z"},{"alias_kind":"pith_short_16","alias_value":"M4XVKVT76URFUNTC","created_at":"2026-07-05T11:14:54Z"},{"alias_kind":"pith_short_8","alias_value":"M4XVKVT7","created_at":"2026-07-05T11:14:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:M4XVKVT76URFUNTCIE4HE63XZU","target":"record","payload":{"canonical_record":{"source":{"id":"2502.15806","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-19T07:23:36Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"b899e0fe43e28bfe937753ae628e112a8b79e0290108631fc45e67b5359df4c1","abstract_canon_sha256":"14b8959ebdd90e0b0dae44b12747324451b4e4161617f278f6b0eec5807ef410"},"schema_version":"1.0"},"canonical_sha256":"672f55567ff5225a36624138727b77cd10d6fa166732f6aef8262e53670c7b83","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:14:54.150300Z","signature_b64":"WzZyPMBq8Nm8nWZyJJ/O+39e07N0OM7wu4nKeVQYc3Raqppnv+Ffp13SASUacZv1hpxPKEhR+LE94fDcMlBsDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"672f55567ff5225a36624138727b77cd10d6fa166732f6aef8262e53670c7b83","last_reissued_at":"2026-07-05T11:14:54.149835Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:14:54.149835Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.15806","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:14:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"n7Uyc+Fp4pvapxz5Oi8MYGz2Q2NDBzarEEwh7//JFaO9TfdeSa2/EvxDFUjFjvpzgVs6U/gsBi0fkD8n++epDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T13:44:33.836961Z"},"content_sha256":"54cea5b98eb733dfc9f3b365c7dfd82aa66e922ddea98e341953be7e5cf9e198","schema_version":"1.0","event_id":"sha256:54cea5b98eb733dfc9f3b365c7dfd82aa66e922ddea98e341953be7e5cf9e198"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:M4XVKVT76URFUNTCIE4HE63XZU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Mousetrap: Fooling Large Reasoning Models for Jailbreak with Chain of Iterative Chaos","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Liang Liu, Lujundong Li, Ruofan Wang, Xuan Tong, Yang Yao, Yan Teng, Yingchun Wang, Yixu Wang","submitted_at":"2025-02-19T07:23:36Z","abstract_excerpt":"Large Reasoning Models (LRMs) have significantly advanced beyond traditional Large Language Models (LLMs) with their exceptional logical reasoning capabilities, yet these improvements introduce heightened safety risks. When subjected to jailbreak attacks, their ability to generate more targeted and organized content can lead to greater harm. Although some studies claim that reasoning enables safer LRMs against existing LLM attacks, they overlook the inherent flaws within the reasoning process itself. To address this gap, we propose the first jailbreak attack targeting LRMs, exploiting their un"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.15806","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.15806/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:14:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uJqPbGFKS5Mvp07ccSAF51GwG68uZbb1k1UAKDj6nNeCcFwRYXxm1xsgZTtvSofN+Bbyp/dKE7ZejMMyhfmtAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T13:44:33.837484Z"},"content_sha256":"beadf131479365664fca0e6813e8cbcd963449dd08826450cabdc0de40f0e467","schema_version":"1.0","event_id":"sha256:beadf131479365664fca0e6813e8cbcd963449dd08826450cabdc0de40f0e467"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/M4XVKVT76URFUNTCIE4HE63XZU/bundle.json","state_url":"https://pith.science/pith/M4XVKVT76URFUNTCIE4HE63XZU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/M4XVKVT76URFUNTCIE4HE63XZU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T13:44:33Z","links":{"resolver":"https://pith.science/pith/M4XVKVT76URFUNTCIE4HE63XZU","bundle":"https://pith.science/pith/M4XVKVT76URFUNTCIE4HE63XZU/bundle.json","state":"https://pith.science/pith/M4XVKVT76URFUNTCIE4HE63XZU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/M4XVKVT76URFUNTCIE4HE63XZU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:M4XVKVT76URFUNTCIE4HE63XZU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"14b8959ebdd90e0b0dae44b12747324451b4e4161617f278f6b0eec5807ef410","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-19T07:23:36Z","title_canon_sha256":"b899e0fe43e28bfe937753ae628e112a8b79e0290108631fc45e67b5359df4c1"},"schema_version":"1.0","source":{"id":"2502.15806","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.15806","created_at":"2026-07-05T11:14:54Z"},{"alias_kind":"arxiv_version","alias_value":"2502.15806v2","created_at":"2026-07-05T11:14:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.15806","created_at":"2026-07-05T11:14:54Z"},{"alias_kind":"pith_short_12","alias_value":"M4XVKVT76URF","created_at":"2026-07-05T11:14:54Z"},{"alias_kind":"pith_short_16","alias_value":"M4XVKVT76URFUNTC","created_at":"2026-07-05T11:14:54Z"},{"alias_kind":"pith_short_8","alias_value":"M4XVKVT7","created_at":"2026-07-05T11:14:54Z"}],"graph_snapshots":[{"event_id":"sha256:beadf131479365664fca0e6813e8cbcd963449dd08826450cabdc0de40f0e467","target":"graph","created_at":"2026-07-05T11:14:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.15806/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Reasoning Models (LRMs) have significantly advanced beyond traditional Large Language Models (LLMs) with their exceptional logical reasoning capabilities, yet these improvements introduce heightened safety risks. When subjected to jailbreak attacks, their ability to generate more targeted and organized content can lead to greater harm. Although some studies claim that reasoning enables safer LRMs against existing LLM attacks, they overlook the inherent flaws within the reasoning process itself. To address this gap, we propose the first jailbreak attack targeting LRMs, exploiting their un","authors_text":"Liang Liu, Lujundong Li, Ruofan Wang, Xuan Tong, Yang Yao, Yan Teng, Yingchun Wang, Yixu Wang","cross_cats":["cs.AI","cs.CL","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-19T07:23:36Z","title":"A Mousetrap: Fooling Large Reasoning Models for Jailbreak with Chain of Iterative Chaos"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.15806","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:54cea5b98eb733dfc9f3b365c7dfd82aa66e922ddea98e341953be7e5cf9e198","target":"record","created_at":"2026-07-05T11:14:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"14b8959ebdd90e0b0dae44b12747324451b4e4161617f278f6b0eec5807ef410","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-19T07:23:36Z","title_canon_sha256":"b899e0fe43e28bfe937753ae628e112a8b79e0290108631fc45e67b5359df4c1"},"schema_version":"1.0","source":{"id":"2502.15806","kind":"arxiv","version":2}},"canonical_sha256":"672f55567ff5225a36624138727b77cd10d6fa166732f6aef8262e53670c7b83","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"672f55567ff5225a36624138727b77cd10d6fa166732f6aef8262e53670c7b83","first_computed_at":"2026-07-05T11:14:54.149835Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:14:54.149835Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WzZyPMBq8Nm8nWZyJJ/O+39e07N0OM7wu4nKeVQYc3Raqppnv+Ffp13SASUacZv1hpxPKEhR+LE94fDcMlBsDA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:14:54.150300Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.15806","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:54cea5b98eb733dfc9f3b365c7dfd82aa66e922ddea98e341953be7e5cf9e198","sha256:beadf131479365664fca0e6813e8cbcd963449dd08826450cabdc0de40f0e467"],"state_sha256":"9d185af3b38c045dc132b329baa63c5b62f5d6f0a2208f741788478f7a2b49eb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qPvvn5xLKkUYBTGu9leqK8GWqeTbQNshEdpHkXtXRAcOQCG7WBlHBKPPFkHEcnobig4wtzNLmY1dAgYBdhAOAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T13:44:33.841127Z","bundle_sha256":"041fad5217b04e2bd65a03ebcc6dcd7aa3f68b5a0cea1899d5751792abd9930f"}}