{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:P7RPD7556F47DCNWVJZRJ6RNHF","short_pith_number":"pith:P7RPD755","canonical_record":{"source":{"id":"2407.13796","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-16T20:53:00Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"605342979df408373513d6556c8c600b626db6dee3cb0714b96112018b99bd40","abstract_canon_sha256":"fffa82c0df490c2f18c181af3a6e12ff10a80f0c73aa3e36c3902ab59334f37e"},"schema_version":"1.0"},"canonical_sha256":"7fe2f1ffbdf179f189b6aa7314fa2d396bd7752fdf130a5fc021ec34fd47b2ab","source":{"kind":"arxiv","id":"2407.13796","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.13796","created_at":"2026-07-05T08:45:53Z"},{"alias_kind":"arxiv_version","alias_value":"2407.13796v1","created_at":"2026-07-05T08:45:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.13796","created_at":"2026-07-05T08:45:53Z"},{"alias_kind":"pith_short_12","alias_value":"P7RPD7556F47","created_at":"2026-07-05T08:45:53Z"},{"alias_kind":"pith_short_16","alias_value":"P7RPD7556F47DCNW","created_at":"2026-07-05T08:45:53Z"},{"alias_kind":"pith_short_8","alias_value":"P7RPD755","created_at":"2026-07-05T08:45:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:P7RPD7556F47DCNWVJZRJ6RNHF","target":"record","payload":{"canonical_record":{"source":{"id":"2407.13796","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-16T20:53:00Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"605342979df408373513d6556c8c600b626db6dee3cb0714b96112018b99bd40","abstract_canon_sha256":"fffa82c0df490c2f18c181af3a6e12ff10a80f0c73aa3e36c3902ab59334f37e"},"schema_version":"1.0"},"canonical_sha256":"7fe2f1ffbdf179f189b6aa7314fa2d396bd7752fdf130a5fc021ec34fd47b2ab","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:45:53.492843Z","signature_b64":"cBgy7KST1ZP5tms4ODb8txxL6yuP+IT2Pk9vEjHes/7Q+71SY26Q0raswMQdY3/UY1ruQu2bKmR6j0GqnLAaAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7fe2f1ffbdf179f189b6aa7314fa2d396bd7752fdf130a5fc021ec34fd47b2ab","last_reissued_at":"2026-07-05T08:45:53.492377Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:45:53.492377Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.13796","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:45:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3IIkWxcsZL189UbWQleWdhcCneJoyLf/qWohzQIFwBKHHtzmqU5qYNdfsSZ5dZpmpC0EMg09hf0oyT9SZDRzAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T14:48:09.464218Z"},"content_sha256":"981f110ac19a7a41d95bcf49ba2effb0e31bfd00a4cca479e291349438bff8c3","schema_version":"1.0","event_id":"sha256:981f110ac19a7a41d95bcf49ba2effb0e31bfd00a4cca479e291349438bff8c3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:P7RPD7556F47DCNWVJZRJ6RNHF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Continuous Embedding Attacks via Clipped Inputs in Jailbreaking Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Gelei Deng, Kailong Wang, Ling Shi, Stjepan Picek, Yi Liu, Yuekang Li, Zihao Xu","submitted_at":"2024-07-16T20:53:00Z","abstract_excerpt":"Security concerns for large language models (LLMs) have recently escalated, focusing on thwarting jailbreaking attempts in discrete prompts. However, the exploration of jailbreak vulnerabilities arising from continuous embeddings has been limited, as prior approaches primarily involved appending discrete or continuous suffixes to inputs. Our study presents a novel channel for conducting direct attacks on LLM inputs, eliminating the need for suffix addition or specific questions provided that the desired output is predefined. We additionally observe that extensive iterations often lead to overf"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.13796","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.13796/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:45:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IwJMrOOJ+A/a4Faq2VUaz3MbhAzbvIBQ7NXccQTlOYnjir/3Uyx+6qUCvVcqltAt/aNvyI1KVerGmP+8b+gPBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T14:48:09.464743Z"},"content_sha256":"b3238f4fcd283dfba3b2bb8db9db9284d883f282d6bfaf0d344662245fdc7ac0","schema_version":"1.0","event_id":"sha256:b3238f4fcd283dfba3b2bb8db9db9284d883f282d6bfaf0d344662245fdc7ac0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/P7RPD7556F47DCNWVJZRJ6RNHF/bundle.json","state_url":"https://pith.science/pith/P7RPD7556F47DCNWVJZRJ6RNHF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/P7RPD7556F47DCNWVJZRJ6RNHF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T14:48:09Z","links":{"resolver":"https://pith.science/pith/P7RPD7556F47DCNWVJZRJ6RNHF","bundle":"https://pith.science/pith/P7RPD7556F47DCNWVJZRJ6RNHF/bundle.json","state":"https://pith.science/pith/P7RPD7556F47DCNWVJZRJ6RNHF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/P7RPD7556F47DCNWVJZRJ6RNHF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:P7RPD7556F47DCNWVJZRJ6RNHF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fffa82c0df490c2f18c181af3a6e12ff10a80f0c73aa3e36c3902ab59334f37e","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-16T20:53:00Z","title_canon_sha256":"605342979df408373513d6556c8c600b626db6dee3cb0714b96112018b99bd40"},"schema_version":"1.0","source":{"id":"2407.13796","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.13796","created_at":"2026-07-05T08:45:53Z"},{"alias_kind":"arxiv_version","alias_value":"2407.13796v1","created_at":"2026-07-05T08:45:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.13796","created_at":"2026-07-05T08:45:53Z"},{"alias_kind":"pith_short_12","alias_value":"P7RPD7556F47","created_at":"2026-07-05T08:45:53Z"},{"alias_kind":"pith_short_16","alias_value":"P7RPD7556F47DCNW","created_at":"2026-07-05T08:45:53Z"},{"alias_kind":"pith_short_8","alias_value":"P7RPD755","created_at":"2026-07-05T08:45:53Z"}],"graph_snapshots":[{"event_id":"sha256:b3238f4fcd283dfba3b2bb8db9db9284d883f282d6bfaf0d344662245fdc7ac0","target":"graph","created_at":"2026-07-05T08:45:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.13796/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Security concerns for large language models (LLMs) have recently escalated, focusing on thwarting jailbreaking attempts in discrete prompts. However, the exploration of jailbreak vulnerabilities arising from continuous embeddings has been limited, as prior approaches primarily involved appending discrete or continuous suffixes to inputs. Our study presents a novel channel for conducting direct attacks on LLM inputs, eliminating the need for suffix addition or specific questions provided that the desired output is predefined. We additionally observe that extensive iterations often lead to overf","authors_text":"Gelei Deng, Kailong Wang, Ling Shi, Stjepan Picek, Yi Liu, Yuekang Li, Zihao Xu","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-16T20:53:00Z","title":"Continuous Embedding Attacks via Clipped Inputs in Jailbreaking Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.13796","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:981f110ac19a7a41d95bcf49ba2effb0e31bfd00a4cca479e291349438bff8c3","target":"record","created_at":"2026-07-05T08:45:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fffa82c0df490c2f18c181af3a6e12ff10a80f0c73aa3e36c3902ab59334f37e","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-16T20:53:00Z","title_canon_sha256":"605342979df408373513d6556c8c600b626db6dee3cb0714b96112018b99bd40"},"schema_version":"1.0","source":{"id":"2407.13796","kind":"arxiv","version":1}},"canonical_sha256":"7fe2f1ffbdf179f189b6aa7314fa2d396bd7752fdf130a5fc021ec34fd47b2ab","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7fe2f1ffbdf179f189b6aa7314fa2d396bd7752fdf130a5fc021ec34fd47b2ab","first_computed_at":"2026-07-05T08:45:53.492377Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:45:53.492377Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cBgy7KST1ZP5tms4ODb8txxL6yuP+IT2Pk9vEjHes/7Q+71SY26Q0raswMQdY3/UY1ruQu2bKmR6j0GqnLAaAw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:45:53.492843Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.13796","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:981f110ac19a7a41d95bcf49ba2effb0e31bfd00a4cca479e291349438bff8c3","sha256:b3238f4fcd283dfba3b2bb8db9db9284d883f282d6bfaf0d344662245fdc7ac0"],"state_sha256":"58847754b42a8c58373dc5b3aae96eccde88e327c5c908da92d20c3ee9d3556a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1Pw5lR5caWmmpvtI/lD3rl7ySGP+KTEu8VenuTmf+981QUHUjOO7y1FtlklA92iWn82b6hSoRQNDH0+JWTVqCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T14:48:09.469946Z","bundle_sha256":"ebcd2e36d0009776f29adec74091d20eaf1a17e081d6726a920b0b380549d6d5"}}