{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:OOL2AAXTOGBJ343AIT2CO5KG5Z","short_pith_number":"pith:OOL2AAXT","canonical_record":{"source":{"id":"2305.14965","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-05-24T09:57:37Z","cross_cats_sorted":[],"title_canon_sha256":"4999a96535b1ced05dde3495dd692f47ce01dd7c75720bf1ce8fd4dec63df9e5","abstract_canon_sha256":"eb9a46eec941630a4da7347c207f65cfc4664bc403145f49e6f59b4881d9fd34"},"schema_version":"1.0"},"canonical_sha256":"7397a002f371829df36044f4277546ee4ee47b871fd77a104d7de8e83a77ef4c","source":{"kind":"arxiv","id":"2305.14965","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.14965","created_at":"2026-07-05T08:00:59Z"},{"alias_kind":"arxiv_version","alias_value":"2305.14965v4","created_at":"2026-07-05T08:00:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.14965","created_at":"2026-07-05T08:00:59Z"},{"alias_kind":"pith_short_12","alias_value":"OOL2AAXTOGBJ","created_at":"2026-07-05T08:00:59Z"},{"alias_kind":"pith_short_16","alias_value":"OOL2AAXTOGBJ343A","created_at":"2026-07-05T08:00:59Z"},{"alias_kind":"pith_short_8","alias_value":"OOL2AAXT","created_at":"2026-07-05T08:00:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:OOL2AAXTOGBJ343AIT2CO5KG5Z","target":"record","payload":{"canonical_record":{"source":{"id":"2305.14965","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-05-24T09:57:37Z","cross_cats_sorted":[],"title_canon_sha256":"4999a96535b1ced05dde3495dd692f47ce01dd7c75720bf1ce8fd4dec63df9e5","abstract_canon_sha256":"eb9a46eec941630a4da7347c207f65cfc4664bc403145f49e6f59b4881d9fd34"},"schema_version":"1.0"},"canonical_sha256":"7397a002f371829df36044f4277546ee4ee47b871fd77a104d7de8e83a77ef4c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:00:59.390884Z","signature_b64":"3QDxrjjN/1/AsD00ZBXyPGPrzjSzvZXpwbDoXwJh4iuHENKcAOrcM/Wz8xo2myiIFOR15hZZvMk5mBt8900AAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7397a002f371829df36044f4277546ee4ee47b871fd77a104d7de8e83a77ef4c","last_reissued_at":"2026-07-05T08:00:59.390404Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:00:59.390404Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.14965","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:00:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fp7Es8fzWRXzN/DceHLAn6a7tzgsmNl4UFxeBnH6dGuw3UwX8htiht9eAP4iV/ckNNihYUDvV+u4BqBKeFHkBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T22:47:30.544451Z"},"content_sha256":"e4aeb39affb304ed8636eaabfd79b8184a2864aeb28598377841ceed860c6343","schema_version":"1.0","event_id":"sha256:e4aeb39affb304ed8636eaabfd79b8184a2864aeb28598377841ceed860c6343"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:OOL2AAXTOGBJ343AIT2CO5KG5Z","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Abhinav Rao, Atharva Naik, Monojit Choudhury, Sachin Vashistha, Somak Aditya","submitted_at":"2023-05-24T09:57:37Z","abstract_excerpt":"Recent explorations with commercial Large Language Models (LLMs) have shown that non-expert users can jailbreak LLMs by simply manipulating their prompts; resulting in degenerate output behavior, privacy and security breaches, offensive outputs, and violations of content regulator policies. Limited studies have been conducted to formalize and analyze these attacks and their mitigations. We bridge this gap by proposing a formalism and a taxonomy of known (and possible) jailbreaks. We survey existing jailbreak methods and their effectiveness on open-source and commercial LLMs (such as GPT-based "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.14965","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.14965/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:00:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xddo9tIsWoV/pWpQqz9orS9o7WPjLqxWgLwRdxXRI1K/aBJ3YtOjQM0JXpHUl3rdobwFyQBXvgY6KWVkNEvYBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T22:47:30.544929Z"},"content_sha256":"bb8558607ae6d7e558bb2bc390fc833a7df307f39ea05f85c3ccbf901f1dfda5","schema_version":"1.0","event_id":"sha256:bb8558607ae6d7e558bb2bc390fc833a7df307f39ea05f85c3ccbf901f1dfda5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OOL2AAXTOGBJ343AIT2CO5KG5Z/bundle.json","state_url":"https://pith.science/pith/OOL2AAXTOGBJ343AIT2CO5KG5Z/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OOL2AAXTOGBJ343AIT2CO5KG5Z/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T22:47:30Z","links":{"resolver":"https://pith.science/pith/OOL2AAXTOGBJ343AIT2CO5KG5Z","bundle":"https://pith.science/pith/OOL2AAXTOGBJ343AIT2CO5KG5Z/bundle.json","state":"https://pith.science/pith/OOL2AAXTOGBJ343AIT2CO5KG5Z/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OOL2AAXTOGBJ343AIT2CO5KG5Z/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:OOL2AAXTOGBJ343AIT2CO5KG5Z","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"eb9a46eec941630a4da7347c207f65cfc4664bc403145f49e6f59b4881d9fd34","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-05-24T09:57:37Z","title_canon_sha256":"4999a96535b1ced05dde3495dd692f47ce01dd7c75720bf1ce8fd4dec63df9e5"},"schema_version":"1.0","source":{"id":"2305.14965","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.14965","created_at":"2026-07-05T08:00:59Z"},{"alias_kind":"arxiv_version","alias_value":"2305.14965v4","created_at":"2026-07-05T08:00:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.14965","created_at":"2026-07-05T08:00:59Z"},{"alias_kind":"pith_short_12","alias_value":"OOL2AAXTOGBJ","created_at":"2026-07-05T08:00:59Z"},{"alias_kind":"pith_short_16","alias_value":"OOL2AAXTOGBJ343A","created_at":"2026-07-05T08:00:59Z"},{"alias_kind":"pith_short_8","alias_value":"OOL2AAXT","created_at":"2026-07-05T08:00:59Z"}],"graph_snapshots":[{"event_id":"sha256:bb8558607ae6d7e558bb2bc390fc833a7df307f39ea05f85c3ccbf901f1dfda5","target":"graph","created_at":"2026-07-05T08:00:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.14965/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent explorations with commercial Large Language Models (LLMs) have shown that non-expert users can jailbreak LLMs by simply manipulating their prompts; resulting in degenerate output behavior, privacy and security breaches, offensive outputs, and violations of content regulator policies. Limited studies have been conducted to formalize and analyze these attacks and their mitigations. We bridge this gap by proposing a formalism and a taxonomy of known (and possible) jailbreaks. We survey existing jailbreak methods and their effectiveness on open-source and commercial LLMs (such as GPT-based ","authors_text":"Abhinav Rao, Atharva Naik, Monojit Choudhury, Sachin Vashistha, Somak Aditya","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.14965","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e4aeb39affb304ed8636eaabfd79b8184a2864aeb28598377841ceed860c6343","target":"record","created_at":"2026-07-05T08:00:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"eb9a46eec941630a4da7347c207f65cfc4664bc403145f49e6f59b4881d9fd34","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-05-24T09:57:37Z","title_canon_sha256":"4999a96535b1ced05dde3495dd692f47ce01dd7c75720bf1ce8fd4dec63df9e5"},"schema_version":"1.0","source":{"id":"2305.14965","kind":"arxiv","version":4}},"canonical_sha256":"7397a002f371829df36044f4277546ee4ee47b871fd77a104d7de8e83a77ef4c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7397a002f371829df36044f4277546ee4ee47b871fd77a104d7de8e83a77ef4c","first_computed_at":"2026-07-05T08:00:59.390404Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:00:59.390404Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3QDxrjjN/1/AsD00ZBXyPGPrzjSzvZXpwbDoXwJh4iuHENKcAOrcM/Wz8xo2myiIFOR15hZZvMk5mBt8900AAw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:00:59.390884Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.14965","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e4aeb39affb304ed8636eaabfd79b8184a2864aeb28598377841ceed860c6343","sha256:bb8558607ae6d7e558bb2bc390fc833a7df307f39ea05f85c3ccbf901f1dfda5"],"state_sha256":"91c3d8cf6c7464081ee2b695397737a88789a3f72036541030d4c8306983389f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YmslWkEBA/HEELzN+JoJe4YBrliGg6Y4SzU8+i06Ax6qa5Pltb0c7OkP7BpNyhOoW1MKWuKF908t6NePJYFDCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T22:47:30.548230Z","bundle_sha256":"2a46bc7fb4081fdb638a85ee4afc1a01a953f816418e23866d435a82d6f01bb0"}}