{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:PQKOL7JGMN2D36BAJKSN6VOG5P","short_pith_number":"pith:PQKOL7JG","canonical_record":{"source":{"id":"2404.07234","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-06T06:17:10Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"d44c4398526dd00e0d5119d626631644cc7271b96bcc2e5ac9cdf5b0e8c74c13","abstract_canon_sha256":"6c65efac227be8c22999367b9e52cf795e9320375b4433259bfe3e2ab6f24a1e"},"schema_version":"1.0"},"canonical_sha256":"7c14e5fd2663743df8204aa4df55c6ebe99b33983741ee47ecc9b2da4b30f8c3","source":{"kind":"arxiv","id":"2404.07234","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.07234","created_at":"2026-07-05T09:33:09Z"},{"alias_kind":"arxiv_version","alias_value":"2404.07234v4","created_at":"2026-07-05T09:33:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.07234","created_at":"2026-07-05T09:33:09Z"},{"alias_kind":"pith_short_12","alias_value":"PQKOL7JGMN2D","created_at":"2026-07-05T09:33:09Z"},{"alias_kind":"pith_short_16","alias_value":"PQKOL7JGMN2D36BA","created_at":"2026-07-05T09:33:09Z"},{"alias_kind":"pith_short_8","alias_value":"PQKOL7JG","created_at":"2026-07-05T09:33:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:PQKOL7JGMN2D36BAJKSN6VOG5P","target":"record","payload":{"canonical_record":{"source":{"id":"2404.07234","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-06T06:17:10Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"d44c4398526dd00e0d5119d626631644cc7271b96bcc2e5ac9cdf5b0e8c74c13","abstract_canon_sha256":"6c65efac227be8c22999367b9e52cf795e9320375b4433259bfe3e2ab6f24a1e"},"schema_version":"1.0"},"canonical_sha256":"7c14e5fd2663743df8204aa4df55c6ebe99b33983741ee47ecc9b2da4b30f8c3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:33:09.146794Z","signature_b64":"H++J53fqZfcGAr5HqUXKprL5Ag/SvgGOOLrfjKieB5JRJjnt9P5obsXe3FZLMBxoSJUmhJv2huq/cMh2uQ8ZDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7c14e5fd2663743df8204aa4df55c6ebe99b33983741ee47ecc9b2da4b30f8c3","last_reissued_at":"2026-07-05T09:33:09.146247Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:33:09.146247Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.07234","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:33:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5EB7yjUvOTeHneO1NtsJZxU6n3NaLW83gCrbLY6+CVuqmxo2GHSXZfy1uiMPD3skN3XFqDkPB6oUwoSumcrPBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T04:08:47.901868Z"},"content_sha256":"398048dd832c1b942fb10079601a9215c320543dd196fb21bd28ea422ba2789a","schema_version":"1.0","event_id":"sha256:398048dd832c1b942fb10079601a9215c320543dd196fb21bd28ea422ba2789a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:PQKOL7JGMN2D36BAJKSN6VOG5P","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Chengzhi Liu, Chong Zhang, Haochen Xue, Mingyu Jin, Qinkai Yu, Xiaobo Jin","submitted_at":"2024-04-06T06:17:10Z","abstract_excerpt":"Current large language models (LLMs) provide a strong foundation for large-scale user-oriented natural language tasks. A large number of users can easily inject adversarial text or instructions through the user interface, thus causing LLMs model security challenges. Although there is currently a large amount of research on prompt injection attacks, most of these black-box attacks use heuristic strategies. It is unclear how these heuristic strategies relate to the success rate of attacks and thus effectively improve model robustness. To solve this problem, we redefine the goal of the attack: to"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.07234","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.07234/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:33:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"whqP+i1Lx2GooFXIsNhW+RmERF8rtm6lbVP9TjeIkPDYatjb0WZO3LirQWmKRgmyrx7q2HLkTb6b3B+RFYyFDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T04:08:47.902425Z"},"content_sha256":"4ba43daf5fc845c7255e4cf7186fcb37bc704fc8cf21e25391b5701da09f9721","schema_version":"1.0","event_id":"sha256:4ba43daf5fc845c7255e4cf7186fcb37bc704fc8cf21e25391b5701da09f9721"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PQKOL7JGMN2D36BAJKSN6VOG5P/bundle.json","state_url":"https://pith.science/pith/PQKOL7JGMN2D36BAJKSN6VOG5P/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PQKOL7JGMN2D36BAJKSN6VOG5P/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T04:08:47Z","links":{"resolver":"https://pith.science/pith/PQKOL7JGMN2D36BAJKSN6VOG5P","bundle":"https://pith.science/pith/PQKOL7JGMN2D36BAJKSN6VOG5P/bundle.json","state":"https://pith.science/pith/PQKOL7JGMN2D36BAJKSN6VOG5P/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PQKOL7JGMN2D36BAJKSN6VOG5P/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:PQKOL7JGMN2D36BAJKSN6VOG5P","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6c65efac227be8c22999367b9e52cf795e9320375b4433259bfe3e2ab6f24a1e","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-06T06:17:10Z","title_canon_sha256":"d44c4398526dd00e0d5119d626631644cc7271b96bcc2e5ac9cdf5b0e8c74c13"},"schema_version":"1.0","source":{"id":"2404.07234","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.07234","created_at":"2026-07-05T09:33:09Z"},{"alias_kind":"arxiv_version","alias_value":"2404.07234v4","created_at":"2026-07-05T09:33:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.07234","created_at":"2026-07-05T09:33:09Z"},{"alias_kind":"pith_short_12","alias_value":"PQKOL7JGMN2D","created_at":"2026-07-05T09:33:09Z"},{"alias_kind":"pith_short_16","alias_value":"PQKOL7JGMN2D36BA","created_at":"2026-07-05T09:33:09Z"},{"alias_kind":"pith_short_8","alias_value":"PQKOL7JG","created_at":"2026-07-05T09:33:09Z"}],"graph_snapshots":[{"event_id":"sha256:4ba43daf5fc845c7255e4cf7186fcb37bc704fc8cf21e25391b5701da09f9721","target":"graph","created_at":"2026-07-05T09:33:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.07234/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Current large language models (LLMs) provide a strong foundation for large-scale user-oriented natural language tasks. A large number of users can easily inject adversarial text or instructions through the user interface, thus causing LLMs model security challenges. Although there is currently a large amount of research on prompt injection attacks, most of these black-box attacks use heuristic strategies. It is unclear how these heuristic strategies relate to the success rate of attacks and thus effectively improve model robustness. To solve this problem, we redefine the goal of the attack: to","authors_text":"Chengzhi Liu, Chong Zhang, Haochen Xue, Mingyu Jin, Qinkai Yu, Xiaobo Jin","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.07234","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:398048dd832c1b942fb10079601a9215c320543dd196fb21bd28ea422ba2789a","target":"record","created_at":"2026-07-05T09:33:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6c65efac227be8c22999367b9e52cf795e9320375b4433259bfe3e2ab6f24a1e","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-06T06:17:10Z","title_canon_sha256":"d44c4398526dd00e0d5119d626631644cc7271b96bcc2e5ac9cdf5b0e8c74c13"},"schema_version":"1.0","source":{"id":"2404.07234","kind":"arxiv","version":4}},"canonical_sha256":"7c14e5fd2663743df8204aa4df55c6ebe99b33983741ee47ecc9b2da4b30f8c3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7c14e5fd2663743df8204aa4df55c6ebe99b33983741ee47ecc9b2da4b30f8c3","first_computed_at":"2026-07-05T09:33:09.146247Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:33:09.146247Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"H++J53fqZfcGAr5HqUXKprL5Ag/SvgGOOLrfjKieB5JRJjnt9P5obsXe3FZLMBxoSJUmhJv2huq/cMh2uQ8ZDA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:33:09.146794Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.07234","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:398048dd832c1b942fb10079601a9215c320543dd196fb21bd28ea422ba2789a","sha256:4ba43daf5fc845c7255e4cf7186fcb37bc704fc8cf21e25391b5701da09f9721"],"state_sha256":"19e924cafb50b4c413e1fe0f7fe5df84b5c8271f9df0dd08125fd65072002ee2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6HZWEzdInKy9/LEA5noG7W5zvlHLOanqzEYiWGr2Ahmjv8IsNQ1JAxbwHiO0ClqJAo17ckMYUCGlqQWSPGzgCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T04:08:47.906214Z","bundle_sha256":"3258fbd6c1d21390889fa763d3d861c29e5a463ace5bf8e2e1f4a4de33da4494"}}