{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:PJCI3UBBMYHAHBI5VFSJ2VVP7V","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"915e0551d05bd58447b93ad8690201b87cb777c444179801f9bbee356cc28f00","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-10-03T13:38:56Z","title_canon_sha256":"4437114b5056b56eb902eb6ba7fcf796f15c94b75354586ead893caeb204c309"},"schema_version":"1.0","source":{"id":"2510.02999","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2510.02999","created_at":"2026-07-09T00:19:36Z"},{"alias_kind":"arxiv_version","alias_value":"2510.02999v5","created_at":"2026-07-09T00:19:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2510.02999","created_at":"2026-07-09T00:19:36Z"},{"alias_kind":"pith_short_12","alias_value":"PJCI3UBBMYHA","created_at":"2026-07-09T00:19:36Z"},{"alias_kind":"pith_short_16","alias_value":"PJCI3UBBMYHAHBI5","created_at":"2026-07-09T00:19:36Z"},{"alias_kind":"pith_short_8","alias_value":"PJCI3UBB","created_at":"2026-07-09T00:19:36Z"}],"graph_snapshots":[{"event_id":"sha256:e32c1f3e85459bd38b8ad45b1e2eb66cde2c0ca94ccd5f2615f32ac5312328d5","target":"graph","created_at":"2026-07-09T00:19:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2510.02999/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Existing gradient-based jailbreak attacks on Large Language Models (LLMs) typically optimize adversarial suffixes to align the LLM output with predefined target responses. However, restricting the objective as inducing fixed targets inherently constrains the adversarial search space, limiting the overall attack efficacy. Furthermore, existing methods typically require numerous optimization iterations to fulfill the large gap between the fixed target and the original LLM output, resulting in low attack efficiency. To overcome these limitations, we propose NonTextual Target Attack (NTA), the fir","authors_text":"Di Wang, Hongsheng Hu, KeDong Xiu, Kui Ren, Tianhang Zheng, Wenjing Hu, Xiaojun Jia, Xinzhe Huang, Zhan Qin","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-10-03T13:38:56Z","title":"NonTextual Target Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2510.02999","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:40cf11d985c8636bf14ac5eb6ca7406f713c6c44fb1c7ee0943495a5344ac8c6","target":"record","created_at":"2026-07-09T00:19:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"915e0551d05bd58447b93ad8690201b87cb777c444179801f9bbee356cc28f00","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-10-03T13:38:56Z","title_canon_sha256":"4437114b5056b56eb902eb6ba7fcf796f15c94b75354586ead893caeb204c309"},"schema_version":"1.0","source":{"id":"2510.02999","kind":"arxiv","version":5}},"canonical_sha256":"7a448dd021660e03851da9649d56affd596a815ba2324c2ef31985144627caf2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7a448dd021660e03851da9649d56affd596a815ba2324c2ef31985144627caf2","first_computed_at":"2026-07-09T00:19:36.155702Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-09T00:19:36.155702Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"i+KkvzPeQ5wVvj54r5oCPH/nw3143T9T+AbIZvdsZKD5ePEJUUydiQbA0Uil7ircLmUYGEy2NXIwfeesxAonBA==","signature_status":"signed_v1","signed_at":"2026-07-09T00:19:36.156134Z","signed_message":"canonical_sha256_bytes"},"source_id":"2510.02999","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:40cf11d985c8636bf14ac5eb6ca7406f713c6c44fb1c7ee0943495a5344ac8c6","sha256:e32c1f3e85459bd38b8ad45b1e2eb66cde2c0ca94ccd5f2615f32ac5312328d5"],"state_sha256":"d2310dcba01fe1350dc70112480ac5f63c07374f90b2f50bfab78c2c937e4b2c"}