{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:MJMQSQE5RPCWQMP42YESCZZE4P","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5d36e2c8ff240619ce34a3886209d2aa1cb8c5d5861f4fa145b022dc99089942","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-25T17:17:18Z","title_canon_sha256":"ea6196bf1fcc96d336b3b18734bcfa5f4d65f5557fac82b555b339d832d559f6"},"schema_version":"1.0","source":{"id":"2405.20773","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.20773","created_at":"2026-07-05T08:30:33Z"},{"alias_kind":"arxiv_version","alias_value":"2405.20773v2","created_at":"2026-07-05T08:30:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.20773","created_at":"2026-07-05T08:30:33Z"},{"alias_kind":"pith_short_12","alias_value":"MJMQSQE5RPCW","created_at":"2026-07-05T08:30:33Z"},{"alias_kind":"pith_short_16","alias_value":"MJMQSQE5RPCWQMP4","created_at":"2026-07-05T08:30:33Z"},{"alias_kind":"pith_short_8","alias_value":"MJMQSQE5","created_at":"2026-07-05T08:30:33Z"}],"graph_snapshots":[{"event_id":"sha256:9a25b779978b9679675ce6cbacf8d1141ffdae9f13788184618a5c8c6363a3af","target":"graph","created_at":"2026-07-05T08:30:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.20773/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the advent and widespread deployment of Multimodal Large Language Models (MLLMs), ensuring their safety has become increasingly critical. To achieve this objective, it requires us to proactively discover the vulnerability of MLLMs by exploring the attack methods. Thus, structure-based jailbreak attacks, where harmful semantic content is embedded within images, have been proposed to mislead the models. However, previous structure-based jailbreak methods mainly focus on transforming the format of malicious queries, such as converting harmful content into images through typography, which lac","authors_text":"Siyuan Ma, Weidi Luo, Xiaogeng Liu, Yu Wang","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-25T17:17:18Z","title":"Visual-RolePlay: Universal Jailbreak Attack on MultiModal Large Language Models via Role-playing Image Character"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.20773","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:850ef1a8fcc8e5955653af5f7563fc7d30460844f9d0845b29e3fd1b71c5d7fe","target":"record","created_at":"2026-07-05T08:30:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5d36e2c8ff240619ce34a3886209d2aa1cb8c5d5861f4fa145b022dc99089942","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-25T17:17:18Z","title_canon_sha256":"ea6196bf1fcc96d336b3b18734bcfa5f4d65f5557fac82b555b339d832d559f6"},"schema_version":"1.0","source":{"id":"2405.20773","kind":"arxiv","version":2}},"canonical_sha256":"625909409d8bc56831fcd609216724e3ce872b3c1b8bd37e7ef889628fa3f998","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"625909409d8bc56831fcd609216724e3ce872b3c1b8bd37e7ef889628fa3f998","first_computed_at":"2026-07-05T08:30:33.845933Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:30:33.845933Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jTWE6zAbwU4W23ZTCJb4N0RVDv9kA1RzaRHy1uUjEWRJkODyw/ZOpdxSGF3TnYqcJxlqHU5+O39I2W8dGMWwDw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:30:33.846445Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.20773","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:850ef1a8fcc8e5955653af5f7563fc7d30460844f9d0845b29e3fd1b71c5d7fe","sha256:9a25b779978b9679675ce6cbacf8d1141ffdae9f13788184618a5c8c6363a3af"],"state_sha256":"05d03771fab37e2cb006e474b03ca9e853594818221237b6bca9a6096cd5fd7b"}