{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:NGGK6I5ECC26F2ZKAKBMWU7BBD","short_pith_number":"pith:NGGK6I5E","canonical_record":{"source":{"id":"2307.10719","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2023-07-20T09:25:02Z","cross_cats_sorted":["cs.CL","cs.CR","cs.LG"],"title_canon_sha256":"978018f9fb5019e659aca3f497f96b7eb8d19336e16367037da9fe383ea64aa1","abstract_canon_sha256":"8f121d6f8c4ad55b6aae4907bff8727c661e0de60cc217f38ae625c830742f7a"},"schema_version":"1.0"},"canonical_sha256":"698caf23a410b5e2eb2a0282cb53e108c334bafff8c1ee95e14da6b72abcd3fe","source":{"kind":"arxiv","id":"2307.10719","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.10719","created_at":"2026-07-05T06:33:34Z"},{"alias_kind":"arxiv_version","alias_value":"2307.10719v1","created_at":"2026-07-05T06:33:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.10719","created_at":"2026-07-05T06:33:34Z"},{"alias_kind":"pith_short_12","alias_value":"NGGK6I5ECC26","created_at":"2026-07-05T06:33:34Z"},{"alias_kind":"pith_short_16","alias_value":"NGGK6I5ECC26F2ZK","created_at":"2026-07-05T06:33:34Z"},{"alias_kind":"pith_short_8","alias_value":"NGGK6I5E","created_at":"2026-07-05T06:33:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:NGGK6I5ECC26F2ZKAKBMWU7BBD","target":"record","payload":{"canonical_record":{"source":{"id":"2307.10719","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2023-07-20T09:25:02Z","cross_cats_sorted":["cs.CL","cs.CR","cs.LG"],"title_canon_sha256":"978018f9fb5019e659aca3f497f96b7eb8d19336e16367037da9fe383ea64aa1","abstract_canon_sha256":"8f121d6f8c4ad55b6aae4907bff8727c661e0de60cc217f38ae625c830742f7a"},"schema_version":"1.0"},"canonical_sha256":"698caf23a410b5e2eb2a0282cb53e108c334bafff8c1ee95e14da6b72abcd3fe","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:33:34.242067Z","signature_b64":"fEj7e50/gO0RdqOseUctIb9dquLsZb2vGKXVCqtyXnK80A7uw2cTi0xGo1cMRTU0lUt3VK6GFNpvbngVcm6FBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"698caf23a410b5e2eb2a0282cb53e108c334bafff8c1ee95e14da6b72abcd3fe","last_reissued_at":"2026-07-05T06:33:34.241626Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:33:34.241626Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.10719","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:33:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uYzwBMR+IjFSg4STbxi123nWjfWSQ1mIdMaIUzVBUwSoOujQpKQv9gN1m33q2ZhnEevotggr/61HNN8sR7LmDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T08:10:25.558965Z"},"content_sha256":"bbbf2c5c61e0f62efa9b3d78fe8891510d60e7bef50031bf5c9c1831a0a14b0e","schema_version":"1.0","event_id":"sha256:bbbf2c5c61e0f62efa9b3d78fe8891510d60e7bef50031bf5c9c1831a0a14b0e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:NGGK6I5ECC26F2ZKAKBMWU7BBD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LLM Censorship: A Machine Learning Challenge or a Computer Security Problem?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL","cs.CR","cs.LG"],"primary_cat":"cs.AI","authors_text":"David Glukhov, Ilia Shumailov, Nicolas Papernot, Vardan Papyan, Yarin Gal","submitted_at":"2023-07-20T09:25:02Z","abstract_excerpt":"Large language models (LLMs) have exhibited impressive capabilities in comprehending complex instructions. However, their blind adherence to provided instructions has led to concerns regarding risks of malicious use. Existing defence mechanisms, such as model fine-tuning or output censorship using LLMs, have proven to be fallible, as LLMs can still generate problematic responses. Commonly employed censorship approaches treat the issue as a machine learning problem and rely on another LM to detect undesirable content in LLM outputs. In this paper, we present the theoretical limitations of such "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.10719","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.10719/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:33:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GZ7Db1LMJn9Sq2brx1aLYwNF/554BVYFUu2ADv+7WZRwkThTp0VdKVNYAp/8EX2iBr/GhYJcIX+kax6F72mVDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T08:10:25.559605Z"},"content_sha256":"20df3dff0e8c9b748378dae32d2ef9bf24093b2a45fb63f4e0759eabc26e8573","schema_version":"1.0","event_id":"sha256:20df3dff0e8c9b748378dae32d2ef9bf24093b2a45fb63f4e0759eabc26e8573"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NGGK6I5ECC26F2ZKAKBMWU7BBD/bundle.json","state_url":"https://pith.science/pith/NGGK6I5ECC26F2ZKAKBMWU7BBD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NGGK6I5ECC26F2ZKAKBMWU7BBD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T08:10:25Z","links":{"resolver":"https://pith.science/pith/NGGK6I5ECC26F2ZKAKBMWU7BBD","bundle":"https://pith.science/pith/NGGK6I5ECC26F2ZKAKBMWU7BBD/bundle.json","state":"https://pith.science/pith/NGGK6I5ECC26F2ZKAKBMWU7BBD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NGGK6I5ECC26F2ZKAKBMWU7BBD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:NGGK6I5ECC26F2ZKAKBMWU7BBD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8f121d6f8c4ad55b6aae4907bff8727c661e0de60cc217f38ae625c830742f7a","cross_cats_sorted":["cs.CL","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2023-07-20T09:25:02Z","title_canon_sha256":"978018f9fb5019e659aca3f497f96b7eb8d19336e16367037da9fe383ea64aa1"},"schema_version":"1.0","source":{"id":"2307.10719","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.10719","created_at":"2026-07-05T06:33:34Z"},{"alias_kind":"arxiv_version","alias_value":"2307.10719v1","created_at":"2026-07-05T06:33:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.10719","created_at":"2026-07-05T06:33:34Z"},{"alias_kind":"pith_short_12","alias_value":"NGGK6I5ECC26","created_at":"2026-07-05T06:33:34Z"},{"alias_kind":"pith_short_16","alias_value":"NGGK6I5ECC26F2ZK","created_at":"2026-07-05T06:33:34Z"},{"alias_kind":"pith_short_8","alias_value":"NGGK6I5E","created_at":"2026-07-05T06:33:34Z"}],"graph_snapshots":[{"event_id":"sha256:20df3dff0e8c9b748378dae32d2ef9bf24093b2a45fb63f4e0759eabc26e8573","target":"graph","created_at":"2026-07-05T06:33:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.10719/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have exhibited impressive capabilities in comprehending complex instructions. However, their blind adherence to provided instructions has led to concerns regarding risks of malicious use. Existing defence mechanisms, such as model fine-tuning or output censorship using LLMs, have proven to be fallible, as LLMs can still generate problematic responses. Commonly employed censorship approaches treat the issue as a machine learning problem and rely on another LM to detect undesirable content in LLM outputs. In this paper, we present the theoretical limitations of such ","authors_text":"David Glukhov, Ilia Shumailov, Nicolas Papernot, Vardan Papyan, Yarin Gal","cross_cats":["cs.CL","cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2023-07-20T09:25:02Z","title":"LLM Censorship: A Machine Learning Challenge or a Computer Security Problem?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.10719","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bbbf2c5c61e0f62efa9b3d78fe8891510d60e7bef50031bf5c9c1831a0a14b0e","target":"record","created_at":"2026-07-05T06:33:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8f121d6f8c4ad55b6aae4907bff8727c661e0de60cc217f38ae625c830742f7a","cross_cats_sorted":["cs.CL","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2023-07-20T09:25:02Z","title_canon_sha256":"978018f9fb5019e659aca3f497f96b7eb8d19336e16367037da9fe383ea64aa1"},"schema_version":"1.0","source":{"id":"2307.10719","kind":"arxiv","version":1}},"canonical_sha256":"698caf23a410b5e2eb2a0282cb53e108c334bafff8c1ee95e14da6b72abcd3fe","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"698caf23a410b5e2eb2a0282cb53e108c334bafff8c1ee95e14da6b72abcd3fe","first_computed_at":"2026-07-05T06:33:34.241626Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:33:34.241626Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fEj7e50/gO0RdqOseUctIb9dquLsZb2vGKXVCqtyXnK80A7uw2cTi0xGo1cMRTU0lUt3VK6GFNpvbngVcm6FBg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:33:34.242067Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.10719","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bbbf2c5c61e0f62efa9b3d78fe8891510d60e7bef50031bf5c9c1831a0a14b0e","sha256:20df3dff0e8c9b748378dae32d2ef9bf24093b2a45fb63f4e0759eabc26e8573"],"state_sha256":"d54dabf21d0f3bad6a09d04fa8ae83a736741a833c541d46ee0cf62c0d7e9340"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"h5mUUYXHM3ycuUs8iJfF9rn+Q4f9/4sXpctMhWy3rL2wIJthWgc1GQVT1dfOqmXBCvrwkwpGMxFXBJ8u8ENbAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T08:10:25.563682Z","bundle_sha256":"2d1e3a55950bf4c61f249919a3eea2291b92f8987ba832409ea0bb64c47824f9"}}