{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:O4RRCGWVTWZGMNCZJ4LLPD5L4K","short_pith_number":"pith:O4RRCGWV","canonical_record":{"source":{"id":"2603.03919","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-03-04T10:27:09Z","cross_cats_sorted":[],"title_canon_sha256":"c70b6fd1fd63ebae86188e5c664631f5956ec9a7724b3366e2a03104abcd243c","abstract_canon_sha256":"e1d246cd8346e928fa217d6fc414b418c5fb71a989c77207c1933abef0db0712"},"schema_version":"1.0"},"canonical_sha256":"7723111ad59db26634594f16b78fabe2bd2c73316d958bae7becc645f6f1172e","source":{"kind":"arxiv","id":"2603.03919","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2603.03919","created_at":"2026-08-03T01:14:03Z"},{"alias_kind":"arxiv_version","alias_value":"2603.03919v2","created_at":"2026-08-03T01:14:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2603.03919","created_at":"2026-08-03T01:14:03Z"},{"alias_kind":"pith_short_12","alias_value":"O4RRCGWVTWZG","created_at":"2026-08-03T01:14:03Z"},{"alias_kind":"pith_short_16","alias_value":"O4RRCGWVTWZGMNCZ","created_at":"2026-08-03T01:14:03Z"},{"alias_kind":"pith_short_8","alias_value":"O4RRCGWV","created_at":"2026-08-03T01:14:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:O4RRCGWVTWZGMNCZJ4LLPD5L4K","target":"record","payload":{"canonical_record":{"source":{"id":"2603.03919","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-03-04T10:27:09Z","cross_cats_sorted":[],"title_canon_sha256":"c70b6fd1fd63ebae86188e5c664631f5956ec9a7724b3366e2a03104abcd243c","abstract_canon_sha256":"e1d246cd8346e928fa217d6fc414b418c5fb71a989c77207c1933abef0db0712"},"schema_version":"1.0"},"canonical_sha256":"7723111ad59db26634594f16b78fabe2bd2c73316d958bae7becc645f6f1172e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-03T01:14:03.089686Z","signature_b64":"jkF65fDkSy7S3yWCcYWF0sjYF5kKOB3VM2YAoCt0pzFJFtvGu/ZC+YWHwU4tinAqjmdPDsIDZziWyk7P3RSdDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7723111ad59db26634594f16b78fabe2bd2c73316d958bae7becc645f6f1172e","last_reissued_at":"2026-08-03T01:14:03.088046Z","signature_status":"signed_v1","first_computed_at":"2026-08-03T01:14:03.088046Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2603.03919","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-03T01:14:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"miJkuXDx6TvR+xz8P1WbKr8JWMhyYxSyFNPssDkJHOGIk+Br0xdjl4H4x33m+3SjdUP3B3y1t0HUOXa3g7VbCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T23:08:03.306422Z"},"content_sha256":"eba4fa4180843ee1a32fc0a971dd2738d3f700dc0d688ec32aab0e15d7dbf06f","schema_version":"1.0","event_id":"sha256:eba4fa4180843ee1a32fc0a971dd2738d3f700dc0d688ec32aab0e15d7dbf06f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:O4RRCGWVTWZGMNCZJ4LLPD5L4K","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"When Safety Becomes a Vulnerability: Exploiting LLM Alignment Homogeneity for Transferable Blocking in RAG","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chao Qi, Di Liang, Haibo Shi, Junchen Li, Liang Xu, Qizhi Chen, Rongzheng Wang, Shihao He, Shuang Liang","submitted_at":"2026-03-04T10:27:09Z","abstract_excerpt":"Retrieval-Augmented Generation (RAG) systems are vulnerable to blocking attacks, in which poisoned documents cause large language models (LLMs) to refuse benign queries. Existing attacks rely on adversarial suffixes or explicit instructions, which are increasingly ineffective against modern LLMs, susceptible to prompt injection filtering, or require feedback from the target system. We observe overlapping risk categories and refusal criteria across safety-aligned LLMs, a phenomenon we term alignment homogeneity. This shared attack surface makes refusal-inducing context transferable across model"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2603.03919","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2603.03919/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-03T01:14:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VNYIVwY0Tw0GO2ODTuH8hAg7TwADpUR7dBJTNWj2fiMTsEmUCxV9j2ZHU+hMpsqfuP3J6+vNL/QspE4lw9DOAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T23:08:03.306929Z"},"content_sha256":"918729d3f1ce259ad4161bf13675eb91aa8285aa6314ea791876b15a51c99c34","schema_version":"1.0","event_id":"sha256:918729d3f1ce259ad4161bf13675eb91aa8285aa6314ea791876b15a51c99c34"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/O4RRCGWVTWZGMNCZJ4LLPD5L4K/bundle.json","state_url":"https://pith.science/pith/O4RRCGWVTWZGMNCZJ4LLPD5L4K/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/O4RRCGWVTWZGMNCZJ4LLPD5L4K/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T23:08:03Z","links":{"resolver":"https://pith.science/pith/O4RRCGWVTWZGMNCZJ4LLPD5L4K","bundle":"https://pith.science/pith/O4RRCGWVTWZGMNCZJ4LLPD5L4K/bundle.json","state":"https://pith.science/pith/O4RRCGWVTWZGMNCZJ4LLPD5L4K/state.json","well_known_bundle":"https://pith.science/.well-known/pith/O4RRCGWVTWZGMNCZJ4LLPD5L4K/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:O4RRCGWVTWZGMNCZJ4LLPD5L4K","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e1d246cd8346e928fa217d6fc414b418c5fb71a989c77207c1933abef0db0712","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-03-04T10:27:09Z","title_canon_sha256":"c70b6fd1fd63ebae86188e5c664631f5956ec9a7724b3366e2a03104abcd243c"},"schema_version":"1.0","source":{"id":"2603.03919","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2603.03919","created_at":"2026-08-03T01:14:03Z"},{"alias_kind":"arxiv_version","alias_value":"2603.03919v2","created_at":"2026-08-03T01:14:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2603.03919","created_at":"2026-08-03T01:14:03Z"},{"alias_kind":"pith_short_12","alias_value":"O4RRCGWVTWZG","created_at":"2026-08-03T01:14:03Z"},{"alias_kind":"pith_short_16","alias_value":"O4RRCGWVTWZGMNCZ","created_at":"2026-08-03T01:14:03Z"},{"alias_kind":"pith_short_8","alias_value":"O4RRCGWV","created_at":"2026-08-03T01:14:03Z"}],"graph_snapshots":[{"event_id":"sha256:918729d3f1ce259ad4161bf13675eb91aa8285aa6314ea791876b15a51c99c34","target":"graph","created_at":"2026-08-03T01:14:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2603.03919/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Retrieval-Augmented Generation (RAG) systems are vulnerable to blocking attacks, in which poisoned documents cause large language models (LLMs) to refuse benign queries. Existing attacks rely on adversarial suffixes or explicit instructions, which are increasingly ineffective against modern LLMs, susceptible to prompt injection filtering, or require feedback from the target system. We observe overlapping risk categories and refusal criteria across safety-aligned LLMs, a phenomenon we term alignment homogeneity. This shared attack surface makes refusal-inducing context transferable across model","authors_text":"Chao Qi, Di Liang, Haibo Shi, Junchen Li, Liang Xu, Qizhi Chen, Rongzheng Wang, Shihao He, Shuang Liang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-03-04T10:27:09Z","title":"When Safety Becomes a Vulnerability: Exploiting LLM Alignment Homogeneity for Transferable Blocking in RAG"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2603.03919","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:eba4fa4180843ee1a32fc0a971dd2738d3f700dc0d688ec32aab0e15d7dbf06f","target":"record","created_at":"2026-08-03T01:14:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e1d246cd8346e928fa217d6fc414b418c5fb71a989c77207c1933abef0db0712","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-03-04T10:27:09Z","title_canon_sha256":"c70b6fd1fd63ebae86188e5c664631f5956ec9a7724b3366e2a03104abcd243c"},"schema_version":"1.0","source":{"id":"2603.03919","kind":"arxiv","version":2}},"canonical_sha256":"7723111ad59db26634594f16b78fabe2bd2c73316d958bae7becc645f6f1172e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7723111ad59db26634594f16b78fabe2bd2c73316d958bae7becc645f6f1172e","first_computed_at":"2026-08-03T01:14:03.088046Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-03T01:14:03.088046Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jkF65fDkSy7S3yWCcYWF0sjYF5kKOB3VM2YAoCt0pzFJFtvGu/ZC+YWHwU4tinAqjmdPDsIDZziWyk7P3RSdDQ==","signature_status":"signed_v1","signed_at":"2026-08-03T01:14:03.089686Z","signed_message":"canonical_sha256_bytes"},"source_id":"2603.03919","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:eba4fa4180843ee1a32fc0a971dd2738d3f700dc0d688ec32aab0e15d7dbf06f","sha256:918729d3f1ce259ad4161bf13675eb91aa8285aa6314ea791876b15a51c99c34"],"state_sha256":"1840d62d30ee383996ae07281577428ec0cd975f0d5926d22d25b3929bf87dd5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Azyyx4dNvuqcGRLW5n74et1XxJvz263Pxl96jbQTNQcBIHcGL8hdXYWpsfES61SQQi8K5ovnkKjZaCcZYz96AQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T23:08:03.310687Z","bundle_sha256":"a7d8b03e9189fc5501b28ec9b5c621a99df5756332fcf24ff3e3971aa0e2da11"}}