{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:O4U6KDNOXZY7KXBFNFY37JPBUV","short_pith_number":"pith:O4U6KDNO","canonical_record":{"source":{"id":"2411.07494","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-11-12T02:44:49Z","cross_cats_sorted":[],"title_canon_sha256":"99dac75921c0ccfeb9fafa6d937e19b4902529c2b42a3e3e419893494dd5d9d1","abstract_canon_sha256":"ece1ddab9c27a92e1b4b8e09a3459f55d53e878331cac64c50dcce246625f2c9"},"schema_version":"1.0"},"canonical_sha256":"7729e50daebe71f55c256971bfa5e1a56433763b73095d18f2d85930a60a0b6c","source":{"kind":"arxiv","id":"2411.07494","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.07494","created_at":"2026-07-05T09:34:24Z"},{"alias_kind":"arxiv_version","alias_value":"2411.07494v1","created_at":"2026-07-05T09:34:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.07494","created_at":"2026-07-05T09:34:24Z"},{"alias_kind":"pith_short_12","alias_value":"O4U6KDNOXZY7","created_at":"2026-07-05T09:34:24Z"},{"alias_kind":"pith_short_16","alias_value":"O4U6KDNOXZY7KXBF","created_at":"2026-07-05T09:34:24Z"},{"alias_kind":"pith_short_8","alias_value":"O4U6KDNO","created_at":"2026-07-05T09:34:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:O4U6KDNOXZY7KXBFNFY37JPBUV","target":"record","payload":{"canonical_record":{"source":{"id":"2411.07494","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-11-12T02:44:49Z","cross_cats_sorted":[],"title_canon_sha256":"99dac75921c0ccfeb9fafa6d937e19b4902529c2b42a3e3e419893494dd5d9d1","abstract_canon_sha256":"ece1ddab9c27a92e1b4b8e09a3459f55d53e878331cac64c50dcce246625f2c9"},"schema_version":"1.0"},"canonical_sha256":"7729e50daebe71f55c256971bfa5e1a56433763b73095d18f2d85930a60a0b6c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:34:24.652734Z","signature_b64":"HyxHPTfLGoWgY02eUka2IbJev7KXgjN6/P4v/zpmdcwKdIrQUL8K7I8Gb/mX4vyFU3lYVefJrXEl5SYuduBQAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7729e50daebe71f55c256971bfa5e1a56433763b73095d18f2d85930a60a0b6c","last_reissued_at":"2026-07-05T09:34:24.652158Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:34:24.652158Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.07494","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:34:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fW/RhO/xpxAF4IJd0od2yHyfgS6n8YEq4XmDunnYD1Cxvp3bQq0T/k+RCgnAAdpa6/pkcPl0ghHs4Erg6kGHCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T22:25:31.870013Z"},"content_sha256":"79b521d680a9e9edaed44ae1c1320e17d195c9d6600396551e34e3ed096b2447","schema_version":"1.0","event_id":"sha256:79b521d680a9e9edaed44ae1c1320e17d195c9d6600396551e34e3ed096b2447"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:O4U6KDNOXZY7KXBFNFY37JPBUV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Rapid Response: Mitigating LLM Jailbreaks with a Few Examples","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Alwin Peng, Ethan Perez, Henry Sleight, Julian Michael, Mrinank Sharma","submitted_at":"2024-11-12T02:44:49Z","abstract_excerpt":"As large language models (LLMs) grow more powerful, ensuring their safety against misuse becomes crucial. While researchers have focused on developing robust defenses, no method has yet achieved complete invulnerability to attacks. We propose an alternative approach: instead of seeking perfect adversarial robustness, we develop rapid response techniques to look to block whole classes of jailbreaks after observing only a handful of attacks. To study this setting, we develop RapidResponseBench, a benchmark that measures a defense's robustness against various jailbreak strategies after adapting t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.07494","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.07494/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:34:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KVVwq6kbJASkQas9nLD3GAYd6D7/E93gFB0T6HZ8qxQqRhyll+C6NMagKZTcTbJ+kxkw5yv70x0tYU6Qp1RwAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T22:25:31.870860Z"},"content_sha256":"d59e1b42cbf088664428901855c5afc8120fd9fdea083bac0358803733b44279","schema_version":"1.0","event_id":"sha256:d59e1b42cbf088664428901855c5afc8120fd9fdea083bac0358803733b44279"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/O4U6KDNOXZY7KXBFNFY37JPBUV/bundle.json","state_url":"https://pith.science/pith/O4U6KDNOXZY7KXBFNFY37JPBUV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/O4U6KDNOXZY7KXBFNFY37JPBUV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T22:25:31Z","links":{"resolver":"https://pith.science/pith/O4U6KDNOXZY7KXBFNFY37JPBUV","bundle":"https://pith.science/pith/O4U6KDNOXZY7KXBFNFY37JPBUV/bundle.json","state":"https://pith.science/pith/O4U6KDNOXZY7KXBFNFY37JPBUV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/O4U6KDNOXZY7KXBFNFY37JPBUV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:O4U6KDNOXZY7KXBFNFY37JPBUV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ece1ddab9c27a92e1b4b8e09a3459f55d53e878331cac64c50dcce246625f2c9","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-11-12T02:44:49Z","title_canon_sha256":"99dac75921c0ccfeb9fafa6d937e19b4902529c2b42a3e3e419893494dd5d9d1"},"schema_version":"1.0","source":{"id":"2411.07494","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.07494","created_at":"2026-07-05T09:34:24Z"},{"alias_kind":"arxiv_version","alias_value":"2411.07494v1","created_at":"2026-07-05T09:34:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.07494","created_at":"2026-07-05T09:34:24Z"},{"alias_kind":"pith_short_12","alias_value":"O4U6KDNOXZY7","created_at":"2026-07-05T09:34:24Z"},{"alias_kind":"pith_short_16","alias_value":"O4U6KDNOXZY7KXBF","created_at":"2026-07-05T09:34:24Z"},{"alias_kind":"pith_short_8","alias_value":"O4U6KDNO","created_at":"2026-07-05T09:34:24Z"}],"graph_snapshots":[{"event_id":"sha256:d59e1b42cbf088664428901855c5afc8120fd9fdea083bac0358803733b44279","target":"graph","created_at":"2026-07-05T09:34:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.07494/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As large language models (LLMs) grow more powerful, ensuring their safety against misuse becomes crucial. While researchers have focused on developing robust defenses, no method has yet achieved complete invulnerability to attacks. We propose an alternative approach: instead of seeking perfect adversarial robustness, we develop rapid response techniques to look to block whole classes of jailbreaks after observing only a handful of attacks. To study this setting, we develop RapidResponseBench, a benchmark that measures a defense's robustness against various jailbreak strategies after adapting t","authors_text":"Alwin Peng, Ethan Perez, Henry Sleight, Julian Michael, Mrinank Sharma","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-11-12T02:44:49Z","title":"Rapid Response: Mitigating LLM Jailbreaks with a Few Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.07494","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:79b521d680a9e9edaed44ae1c1320e17d195c9d6600396551e34e3ed096b2447","target":"record","created_at":"2026-07-05T09:34:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ece1ddab9c27a92e1b4b8e09a3459f55d53e878331cac64c50dcce246625f2c9","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-11-12T02:44:49Z","title_canon_sha256":"99dac75921c0ccfeb9fafa6d937e19b4902529c2b42a3e3e419893494dd5d9d1"},"schema_version":"1.0","source":{"id":"2411.07494","kind":"arxiv","version":1}},"canonical_sha256":"7729e50daebe71f55c256971bfa5e1a56433763b73095d18f2d85930a60a0b6c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7729e50daebe71f55c256971bfa5e1a56433763b73095d18f2d85930a60a0b6c","first_computed_at":"2026-07-05T09:34:24.652158Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:34:24.652158Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HyxHPTfLGoWgY02eUka2IbJev7KXgjN6/P4v/zpmdcwKdIrQUL8K7I8Gb/mX4vyFU3lYVefJrXEl5SYuduBQAg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:34:24.652734Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.07494","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:79b521d680a9e9edaed44ae1c1320e17d195c9d6600396551e34e3ed096b2447","sha256:d59e1b42cbf088664428901855c5afc8120fd9fdea083bac0358803733b44279"],"state_sha256":"f3660410055235bfffc13ff641fa7db627c119c56d0104be9004187beeb10516"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LHuYtIjtiMU8byMeNsRhYaeDYOhtGltPQThztddfWre+5kZtcg+fZf4TdXAAADys+P0xpBvzcgv2hYRiQvyeAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T22:25:31.875594Z","bundle_sha256":"fda07f75b699f2af44a90203268b34d1009981507791d022e26ca5220c10729a"}}