{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:MVG2FPZMPZYZQBJCVOYB6EDEJU","short_pith_number":"pith:MVG2FPZM","canonical_record":{"source":{"id":"2507.22160","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-29T18:46:56Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"957c94b0d91ff3b29029071dea07ce8dc57b772cf237a49bd5eed8f7123667b5","abstract_canon_sha256":"c762df760924a62abb303cf86a998d05fb0e5cd50409a925a30f2513b51e1023"},"schema_version":"1.0"},"canonical_sha256":"654da2bf2c7e71980522abb01f10644d2beb2ec993ea41766b86deff82e0f125","source":{"kind":"arxiv","id":"2507.22160","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.22160","created_at":"2026-07-05T11:45:17Z"},{"alias_kind":"arxiv_version","alias_value":"2507.22160v1","created_at":"2026-07-05T11:45:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.22160","created_at":"2026-07-05T11:45:17Z"},{"alias_kind":"pith_short_12","alias_value":"MVG2FPZMPZYZ","created_at":"2026-07-05T11:45:17Z"},{"alias_kind":"pith_short_16","alias_value":"MVG2FPZMPZYZQBJC","created_at":"2026-07-05T11:45:17Z"},{"alias_kind":"pith_short_8","alias_value":"MVG2FPZM","created_at":"2026-07-05T11:45:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:MVG2FPZMPZYZQBJCVOYB6EDEJU","target":"record","payload":{"canonical_record":{"source":{"id":"2507.22160","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-29T18:46:56Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"957c94b0d91ff3b29029071dea07ce8dc57b772cf237a49bd5eed8f7123667b5","abstract_canon_sha256":"c762df760924a62abb303cf86a998d05fb0e5cd50409a925a30f2513b51e1023"},"schema_version":"1.0"},"canonical_sha256":"654da2bf2c7e71980522abb01f10644d2beb2ec993ea41766b86deff82e0f125","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:45:17.331093Z","signature_b64":"rrBvlbj9CnAN04patmWByaWhKekpIa/KB/BpODA0I72VRup+z703Gky0YQNz+YhJfbVdH2RWNxy549GNacwECw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"654da2bf2c7e71980522abb01f10644d2beb2ec993ea41766b86deff82e0f125","last_reissued_at":"2026-07-05T11:45:17.330593Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:45:17.330593Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.22160","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:45:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JlaGyXAUUNV48w4VDzcZ/yJZ1t/6Xxe8oMM/bThyiwtCcv6xAjQamnp4RnRkNxejA4MLcPC7U0b62pTOSsvZCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T22:59:54.674819Z"},"content_sha256":"27f634f12ec68dc3de6b6e7d2a72a91100d6fd43148dab5a827090d4b893dd6e","schema_version":"1.0","event_id":"sha256:27f634f12ec68dc3de6b6e7d2a72a91100d6fd43148dab5a827090d4b893dd6e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:MVG2FPZMPZYZQBJCVOYB6EDEJU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Strategic Deflection: Defending LLMs from Logit Manipulation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Amal El Fallah Seghrouchni, Faissal Sehbaoui, Jihad Rbaiti, Yassine Rachidy, Youssef Hmamouche","submitted_at":"2025-07-29T18:46:56Z","abstract_excerpt":"With the growing adoption of Large Language Models (LLMs) in critical areas, ensuring their security against jailbreaking attacks is paramount. While traditional defenses primarily rely on refusing malicious prompts, recent logit-level attacks have demonstrated the ability to bypass these safeguards by directly manipulating the token-selection process during generation. We introduce Strategic Deflection (SDeflection), a defense that redefines the LLM's response to such advanced attacks. Instead of outright refusal, the model produces an answer that is semantically adjacent to the user's reques"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.22160","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.22160/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:45:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Nf7xMASkwqASDFaaHmEkW4uXPwX+3HZJDMpMVNZ9SvcKGUWf5+EZPxUpoiVOWCeRYrMDl55mOWFV2ARA7REdDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T22:59:54.675334Z"},"content_sha256":"1234f887c8b7b86d7739a63c0bee9025a36cf78fa4babfbc2c92c47c4420ec2b","schema_version":"1.0","event_id":"sha256:1234f887c8b7b86d7739a63c0bee9025a36cf78fa4babfbc2c92c47c4420ec2b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MVG2FPZMPZYZQBJCVOYB6EDEJU/bundle.json","state_url":"https://pith.science/pith/MVG2FPZMPZYZQBJCVOYB6EDEJU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MVG2FPZMPZYZQBJCVOYB6EDEJU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T22:59:54Z","links":{"resolver":"https://pith.science/pith/MVG2FPZMPZYZQBJCVOYB6EDEJU","bundle":"https://pith.science/pith/MVG2FPZMPZYZQBJCVOYB6EDEJU/bundle.json","state":"https://pith.science/pith/MVG2FPZMPZYZQBJCVOYB6EDEJU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MVG2FPZMPZYZQBJCVOYB6EDEJU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:MVG2FPZMPZYZQBJCVOYB6EDEJU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c762df760924a62abb303cf86a998d05fb0e5cd50409a925a30f2513b51e1023","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-29T18:46:56Z","title_canon_sha256":"957c94b0d91ff3b29029071dea07ce8dc57b772cf237a49bd5eed8f7123667b5"},"schema_version":"1.0","source":{"id":"2507.22160","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.22160","created_at":"2026-07-05T11:45:17Z"},{"alias_kind":"arxiv_version","alias_value":"2507.22160v1","created_at":"2026-07-05T11:45:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.22160","created_at":"2026-07-05T11:45:17Z"},{"alias_kind":"pith_short_12","alias_value":"MVG2FPZMPZYZ","created_at":"2026-07-05T11:45:17Z"},{"alias_kind":"pith_short_16","alias_value":"MVG2FPZMPZYZQBJC","created_at":"2026-07-05T11:45:17Z"},{"alias_kind":"pith_short_8","alias_value":"MVG2FPZM","created_at":"2026-07-05T11:45:17Z"}],"graph_snapshots":[{"event_id":"sha256:1234f887c8b7b86d7739a63c0bee9025a36cf78fa4babfbc2c92c47c4420ec2b","target":"graph","created_at":"2026-07-05T11:45:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.22160/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the growing adoption of Large Language Models (LLMs) in critical areas, ensuring their security against jailbreaking attacks is paramount. While traditional defenses primarily rely on refusing malicious prompts, recent logit-level attacks have demonstrated the ability to bypass these safeguards by directly manipulating the token-selection process during generation. We introduce Strategic Deflection (SDeflection), a defense that redefines the LLM's response to such advanced attacks. Instead of outright refusal, the model produces an answer that is semantically adjacent to the user's reques","authors_text":"Amal El Fallah Seghrouchni, Faissal Sehbaoui, Jihad Rbaiti, Yassine Rachidy, Youssef Hmamouche","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-29T18:46:56Z","title":"Strategic Deflection: Defending LLMs from Logit Manipulation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.22160","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:27f634f12ec68dc3de6b6e7d2a72a91100d6fd43148dab5a827090d4b893dd6e","target":"record","created_at":"2026-07-05T11:45:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c762df760924a62abb303cf86a998d05fb0e5cd50409a925a30f2513b51e1023","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-29T18:46:56Z","title_canon_sha256":"957c94b0d91ff3b29029071dea07ce8dc57b772cf237a49bd5eed8f7123667b5"},"schema_version":"1.0","source":{"id":"2507.22160","kind":"arxiv","version":1}},"canonical_sha256":"654da2bf2c7e71980522abb01f10644d2beb2ec993ea41766b86deff82e0f125","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"654da2bf2c7e71980522abb01f10644d2beb2ec993ea41766b86deff82e0f125","first_computed_at":"2026-07-05T11:45:17.330593Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:45:17.330593Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"rrBvlbj9CnAN04patmWByaWhKekpIa/KB/BpODA0I72VRup+z703Gky0YQNz+YhJfbVdH2RWNxy549GNacwECw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:45:17.331093Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.22160","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:27f634f12ec68dc3de6b6e7d2a72a91100d6fd43148dab5a827090d4b893dd6e","sha256:1234f887c8b7b86d7739a63c0bee9025a36cf78fa4babfbc2c92c47c4420ec2b"],"state_sha256":"da7d025f3adbee02547ef72b08b38659246ccdd82086fd3f4816163b35f8500d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U7+myFI7UAOHueQzi6FTn0Y1oBAhZDpFDHXg9Cner/Kf7ddxSk9GQZLU5XpcK2RpLgZPXmQ39PoIg01PgTTRCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T22:59:54.679372Z","bundle_sha256":"d196aa16e6120ae758908949f5b3311944d1437330ac07027ec6087dda0bb17c"}}