{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:P64XX3GKOB5TKZI2LJVAOZWBTZ","short_pith_number":"pith:P64XX3GK","canonical_record":{"source":{"id":"2407.01902","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-02T02:58:29Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"ecd1fbf84f539c3b1f91fe45b2dc683b68335425375e3c77808a4ae6a53360b5","abstract_canon_sha256":"065d82ca54b48764278ef5a540177ca03c93903870088a427a8d55a1c80ccf6e"},"schema_version":"1.0"},"canonical_sha256":"7fb97becca707b35651a5a6a0766c19e6b4610e7df39298b1b23d37ba60bfa34","source":{"kind":"arxiv","id":"2407.01902","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.01902","created_at":"2026-07-05T10:22:01Z"},{"alias_kind":"arxiv_version","alias_value":"2407.01902v2","created_at":"2026-07-05T10:22:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.01902","created_at":"2026-07-05T10:22:01Z"},{"alias_kind":"pith_short_12","alias_value":"P64XX3GKOB5T","created_at":"2026-07-05T10:22:01Z"},{"alias_kind":"pith_short_16","alias_value":"P64XX3GKOB5TKZI2","created_at":"2026-07-05T10:22:01Z"},{"alias_kind":"pith_short_8","alias_value":"P64XX3GK","created_at":"2026-07-05T10:22:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:P64XX3GKOB5TKZI2LJVAOZWBTZ","target":"record","payload":{"canonical_record":{"source":{"id":"2407.01902","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-02T02:58:29Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"ecd1fbf84f539c3b1f91fe45b2dc683b68335425375e3c77808a4ae6a53360b5","abstract_canon_sha256":"065d82ca54b48764278ef5a540177ca03c93903870088a427a8d55a1c80ccf6e"},"schema_version":"1.0"},"canonical_sha256":"7fb97becca707b35651a5a6a0766c19e6b4610e7df39298b1b23d37ba60bfa34","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:22:01.800155Z","signature_b64":"0/0GOnTbgZXO5/261z1J20t9B9XWpDARdWK8y7gmi/bsaj4xHFkiprCuOsQ+X5nr1bcbwoLnLsjbcr/s3WkoDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7fb97becca707b35651a5a6a0766c19e6b4610e7df39298b1b23d37ba60bfa34","last_reissued_at":"2026-07-05T10:22:01.799613Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:22:01.799613Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.01902","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:22:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"03k4a2+hjCkX9AIT0cD1yjnlIB7WnfO0MW0d5G+xFCzzobkz5LGoU3ZeC9YcdNywYPy3fz9mLM0vOqiwo9uHBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T06:54:39.693695Z"},"content_sha256":"54677b9e3c78783d22bae0346519cc592c8bab15f7529fa061b69e99d1a6804f","schema_version":"1.0","event_id":"sha256:54677b9e3c78783d22bae0346519cc592c8bab15f7529fa061b69e99d1a6804f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:P64XX3GKOB5TKZI2LJVAOZWBTZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SeqAR: Jailbreak LLMs with Sequential Auto-Generated Characters","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Guanhua Chen, Hailiang Huang, Hongru Wang, Xin Lu, Xuetao Wei, Yan Yang, Yun Chen, Zeguan Xiao","submitted_at":"2024-07-02T02:58:29Z","abstract_excerpt":"The widespread applications of large language models (LLMs) have brought about concerns regarding their potential misuse. Although aligned with human preference data before release, LLMs remain vulnerable to various malicious attacks. In this paper, we adopt a red-teaming strategy to enhance LLM safety and introduce SeqAR, a simple yet effective framework to design jailbreak prompts automatically. The SeqAR framework generates and optimizes multiple jailbreak characters and then applies sequential jailbreak characters in a single query to bypass the guardrails of the target LLM. Different from"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.01902","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.01902/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:22:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wqv4dfeCMBHpeYYbjc+hXsyUzTYxrahwerLYNpOdim/az5w784bVS8MM57FUQBhbOHAoV9oGgw3ZI+qbOZjPAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T06:54:39.694233Z"},"content_sha256":"d1a8f6836233929e19368990e64e36a946250dd03b8451d041f4b0b381e2cc3b","schema_version":"1.0","event_id":"sha256:d1a8f6836233929e19368990e64e36a946250dd03b8451d041f4b0b381e2cc3b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/P64XX3GKOB5TKZI2LJVAOZWBTZ/bundle.json","state_url":"https://pith.science/pith/P64XX3GKOB5TKZI2LJVAOZWBTZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/P64XX3GKOB5TKZI2LJVAOZWBTZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T06:54:39Z","links":{"resolver":"https://pith.science/pith/P64XX3GKOB5TKZI2LJVAOZWBTZ","bundle":"https://pith.science/pith/P64XX3GKOB5TKZI2LJVAOZWBTZ/bundle.json","state":"https://pith.science/pith/P64XX3GKOB5TKZI2LJVAOZWBTZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/P64XX3GKOB5TKZI2LJVAOZWBTZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:P64XX3GKOB5TKZI2LJVAOZWBTZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"065d82ca54b48764278ef5a540177ca03c93903870088a427a8d55a1c80ccf6e","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-02T02:58:29Z","title_canon_sha256":"ecd1fbf84f539c3b1f91fe45b2dc683b68335425375e3c77808a4ae6a53360b5"},"schema_version":"1.0","source":{"id":"2407.01902","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.01902","created_at":"2026-07-05T10:22:01Z"},{"alias_kind":"arxiv_version","alias_value":"2407.01902v2","created_at":"2026-07-05T10:22:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.01902","created_at":"2026-07-05T10:22:01Z"},{"alias_kind":"pith_short_12","alias_value":"P64XX3GKOB5T","created_at":"2026-07-05T10:22:01Z"},{"alias_kind":"pith_short_16","alias_value":"P64XX3GKOB5TKZI2","created_at":"2026-07-05T10:22:01Z"},{"alias_kind":"pith_short_8","alias_value":"P64XX3GK","created_at":"2026-07-05T10:22:01Z"}],"graph_snapshots":[{"event_id":"sha256:d1a8f6836233929e19368990e64e36a946250dd03b8451d041f4b0b381e2cc3b","target":"graph","created_at":"2026-07-05T10:22:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.01902/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The widespread applications of large language models (LLMs) have brought about concerns regarding their potential misuse. Although aligned with human preference data before release, LLMs remain vulnerable to various malicious attacks. In this paper, we adopt a red-teaming strategy to enhance LLM safety and introduce SeqAR, a simple yet effective framework to design jailbreak prompts automatically. The SeqAR framework generates and optimizes multiple jailbreak characters and then applies sequential jailbreak characters in a single query to bypass the guardrails of the target LLM. Different from","authors_text":"Guanhua Chen, Hailiang Huang, Hongru Wang, Xin Lu, Xuetao Wei, Yan Yang, Yun Chen, Zeguan Xiao","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-02T02:58:29Z","title":"SeqAR: Jailbreak LLMs with Sequential Auto-Generated Characters"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.01902","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:54677b9e3c78783d22bae0346519cc592c8bab15f7529fa061b69e99d1a6804f","target":"record","created_at":"2026-07-05T10:22:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"065d82ca54b48764278ef5a540177ca03c93903870088a427a8d55a1c80ccf6e","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-02T02:58:29Z","title_canon_sha256":"ecd1fbf84f539c3b1f91fe45b2dc683b68335425375e3c77808a4ae6a53360b5"},"schema_version":"1.0","source":{"id":"2407.01902","kind":"arxiv","version":2}},"canonical_sha256":"7fb97becca707b35651a5a6a0766c19e6b4610e7df39298b1b23d37ba60bfa34","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7fb97becca707b35651a5a6a0766c19e6b4610e7df39298b1b23d37ba60bfa34","first_computed_at":"2026-07-05T10:22:01.799613Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:22:01.799613Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0/0GOnTbgZXO5/261z1J20t9B9XWpDARdWK8y7gmi/bsaj4xHFkiprCuOsQ+X5nr1bcbwoLnLsjbcr/s3WkoDA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:22:01.800155Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.01902","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:54677b9e3c78783d22bae0346519cc592c8bab15f7529fa061b69e99d1a6804f","sha256:d1a8f6836233929e19368990e64e36a946250dd03b8451d041f4b0b381e2cc3b"],"state_sha256":"822b0a73f3241d235a0846303482114811dc7d8f5aa328401560279c26defa22"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8F10BV6EcxHr6NTVk1Wczv4lnZvgIl/OyWZJa/rUIHLEBzoNYKXRDK9bQ7qthVGgmwkDMADWAtpkagoZgMqfCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T06:54:39.698751Z","bundle_sha256":"fc4a5309bb81a39ae66762829addb631d386edbbaa164e072a0bb04f81e219ba"}}