{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:OURRL5KLF7J3NN2VRIYADDDWLA","short_pith_number":"pith:OURRL5KL","canonical_record":{"source":{"id":"2404.07242","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-09T18:29:42Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"3ed514eefb21191fe9bea77db6e8cd54eecff623a64ea97f696b964f1e9d68a5","abstract_canon_sha256":"7751e576f696f1bd359c3f66283b7be69dcc5736e6844e8298f0ba75aed177f0"},"schema_version":"1.0"},"canonical_sha256":"752315f54b2fd3b6b7558a30018c765816e8caad6757c4a3a39a3f20ca28abcb","source":{"kind":"arxiv","id":"2404.07242","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.07242","created_at":"2026-07-05T09:23:04Z"},{"alias_kind":"arxiv_version","alias_value":"2404.07242v1","created_at":"2026-07-05T09:23:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.07242","created_at":"2026-07-05T09:23:04Z"},{"alias_kind":"pith_short_12","alias_value":"OURRL5KLF7J3","created_at":"2026-07-05T09:23:04Z"},{"alias_kind":"pith_short_16","alias_value":"OURRL5KLF7J3NN2V","created_at":"2026-07-05T09:23:04Z"},{"alias_kind":"pith_short_8","alias_value":"OURRL5KL","created_at":"2026-07-05T09:23:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:OURRL5KLF7J3NN2VRIYADDDWLA","target":"record","payload":{"canonical_record":{"source":{"id":"2404.07242","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-09T18:29:42Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"3ed514eefb21191fe9bea77db6e8cd54eecff623a64ea97f696b964f1e9d68a5","abstract_canon_sha256":"7751e576f696f1bd359c3f66283b7be69dcc5736e6844e8298f0ba75aed177f0"},"schema_version":"1.0"},"canonical_sha256":"752315f54b2fd3b6b7558a30018c765816e8caad6757c4a3a39a3f20ca28abcb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:23:04.765414Z","signature_b64":"tFajs1OSmw0m5IC8FdnQjzzj0+qd3v2s2MP8Oqygi8ps3AAa56VAK16/dlP+H1W0RbmpU8IFPJZsMG80RaRjDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"752315f54b2fd3b6b7558a30018c765816e8caad6757c4a3a39a3f20ca28abcb","last_reissued_at":"2026-07-05T09:23:04.764970Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:23:04.764970Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.07242","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:23:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jcyCZ7ZUYncy0iBRV0m/hpuQzgTrqzAX1kh07ZnbPpCnSZYVJMKkBCCYWWpWWLEYDEfOganxL8MsdD/ESr7fCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T08:06:27.488807Z"},"content_sha256":"04453b969c9116d907248e44625b052812fe78b4aab892100ff0c82afd36574b","schema_version":"1.0","event_id":"sha256:04453b969c9116d907248e44625b052812fe78b4aab892100ff0c82afd36574b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:OURRL5KLF7J3NN2VRIYADDDWLA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Sandwich attack: Multi-language Mixture Adaptive Attack on LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Bibek Upadhayay, Vahid Behzadan","submitted_at":"2024-04-09T18:29:42Z","abstract_excerpt":"Large Language Models (LLMs) are increasingly being developed and applied, but their widespread use faces challenges. These include aligning LLMs' responses with human values to prevent harmful outputs, which is addressed through safety training methods. Even so, bad actors and malicious users have succeeded in attempts to manipulate the LLMs to generate misaligned responses for harmful questions such as methods to create a bomb in school labs, recipes for harmful drugs, and ways to evade privacy rights. Another challenge is the multilingual capabilities of LLMs, which enable the model to unde"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.07242","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.07242/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:23:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wZsGFxO2i2tgUv+Ulf4pYgO9hapWKdUseRdahTjBx9vdp+i2w0MrXpx5WAfubIoarksnKVh3Z4lKdXCm2r0ICA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T08:06:27.489313Z"},"content_sha256":"555b0e2d313740dabd886e7f2763bbb12b520dc78c1171abace1348384371e1e","schema_version":"1.0","event_id":"sha256:555b0e2d313740dabd886e7f2763bbb12b520dc78c1171abace1348384371e1e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OURRL5KLF7J3NN2VRIYADDDWLA/bundle.json","state_url":"https://pith.science/pith/OURRL5KLF7J3NN2VRIYADDDWLA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OURRL5KLF7J3NN2VRIYADDDWLA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T08:06:27Z","links":{"resolver":"https://pith.science/pith/OURRL5KLF7J3NN2VRIYADDDWLA","bundle":"https://pith.science/pith/OURRL5KLF7J3NN2VRIYADDDWLA/bundle.json","state":"https://pith.science/pith/OURRL5KLF7J3NN2VRIYADDDWLA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OURRL5KLF7J3NN2VRIYADDDWLA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:OURRL5KLF7J3NN2VRIYADDDWLA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7751e576f696f1bd359c3f66283b7be69dcc5736e6844e8298f0ba75aed177f0","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-09T18:29:42Z","title_canon_sha256":"3ed514eefb21191fe9bea77db6e8cd54eecff623a64ea97f696b964f1e9d68a5"},"schema_version":"1.0","source":{"id":"2404.07242","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.07242","created_at":"2026-07-05T09:23:04Z"},{"alias_kind":"arxiv_version","alias_value":"2404.07242v1","created_at":"2026-07-05T09:23:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.07242","created_at":"2026-07-05T09:23:04Z"},{"alias_kind":"pith_short_12","alias_value":"OURRL5KLF7J3","created_at":"2026-07-05T09:23:04Z"},{"alias_kind":"pith_short_16","alias_value":"OURRL5KLF7J3NN2V","created_at":"2026-07-05T09:23:04Z"},{"alias_kind":"pith_short_8","alias_value":"OURRL5KL","created_at":"2026-07-05T09:23:04Z"}],"graph_snapshots":[{"event_id":"sha256:555b0e2d313740dabd886e7f2763bbb12b520dc78c1171abace1348384371e1e","target":"graph","created_at":"2026-07-05T09:23:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.07242/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) are increasingly being developed and applied, but their widespread use faces challenges. These include aligning LLMs' responses with human values to prevent harmful outputs, which is addressed through safety training methods. Even so, bad actors and malicious users have succeeded in attempts to manipulate the LLMs to generate misaligned responses for harmful questions such as methods to create a bomb in school labs, recipes for harmful drugs, and ways to evade privacy rights. Another challenge is the multilingual capabilities of LLMs, which enable the model to unde","authors_text":"Bibek Upadhayay, Vahid Behzadan","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-09T18:29:42Z","title":"Sandwich attack: Multi-language Mixture Adaptive Attack on LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.07242","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:04453b969c9116d907248e44625b052812fe78b4aab892100ff0c82afd36574b","target":"record","created_at":"2026-07-05T09:23:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7751e576f696f1bd359c3f66283b7be69dcc5736e6844e8298f0ba75aed177f0","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-09T18:29:42Z","title_canon_sha256":"3ed514eefb21191fe9bea77db6e8cd54eecff623a64ea97f696b964f1e9d68a5"},"schema_version":"1.0","source":{"id":"2404.07242","kind":"arxiv","version":1}},"canonical_sha256":"752315f54b2fd3b6b7558a30018c765816e8caad6757c4a3a39a3f20ca28abcb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"752315f54b2fd3b6b7558a30018c765816e8caad6757c4a3a39a3f20ca28abcb","first_computed_at":"2026-07-05T09:23:04.764970Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:23:04.764970Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tFajs1OSmw0m5IC8FdnQjzzj0+qd3v2s2MP8Oqygi8ps3AAa56VAK16/dlP+H1W0RbmpU8IFPJZsMG80RaRjDg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:23:04.765414Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.07242","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:04453b969c9116d907248e44625b052812fe78b4aab892100ff0c82afd36574b","sha256:555b0e2d313740dabd886e7f2763bbb12b520dc78c1171abace1348384371e1e"],"state_sha256":"3b676d3d513dc0891a340fd55f9a1dbe5bc096d91ceefec979bd554390d1a68d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"00bKfVEh9LtC/ABILjA+LFyexufYNA5KNSN8XIgj57MV+dD7R39GFa3MHoCSlFdlHGUC70qBGixJAwAIgZzcBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T08:06:27.493537Z","bundle_sha256":"2ba4f5ae97c8467af9dcd5c65490da9b738f9f70ccd902c2bdd94e1b9a3c2b96"}}