{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:QBW76FOVIHXAJTMLDQFPNJZDGL","short_pith_number":"pith:QBW76FOV","canonical_record":{"source":{"id":"2409.14729","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-23T06:08:32Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"e46d8081e8f4b234d94c1ffb9afce387fdaccb75fccec0e1fe51402e8a079843","abstract_canon_sha256":"92cbad0996a52ed77ae8b79638bee28480406f7dc18acb46cea9137b6a19fb7e"},"schema_version":"1.0"},"canonical_sha256":"806dff15d541ee04cd8b1c0af6a72332c78cea808acbb0eb2516a5c01b4ac374","source":{"kind":"arxiv","id":"2409.14729","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.14729","created_at":"2026-07-05T10:44:16Z"},{"alias_kind":"arxiv_version","alias_value":"2409.14729v2","created_at":"2026-07-05T10:44:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.14729","created_at":"2026-07-05T10:44:16Z"},{"alias_kind":"pith_short_12","alias_value":"QBW76FOVIHXA","created_at":"2026-07-05T10:44:16Z"},{"alias_kind":"pith_short_16","alias_value":"QBW76FOVIHXAJTML","created_at":"2026-07-05T10:44:16Z"},{"alias_kind":"pith_short_8","alias_value":"QBW76FOV","created_at":"2026-07-05T10:44:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:QBW76FOVIHXAJTMLDQFPNJZDGL","target":"record","payload":{"canonical_record":{"source":{"id":"2409.14729","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-23T06:08:32Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"e46d8081e8f4b234d94c1ffb9afce387fdaccb75fccec0e1fe51402e8a079843","abstract_canon_sha256":"92cbad0996a52ed77ae8b79638bee28480406f7dc18acb46cea9137b6a19fb7e"},"schema_version":"1.0"},"canonical_sha256":"806dff15d541ee04cd8b1c0af6a72332c78cea808acbb0eb2516a5c01b4ac374","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:44:16.577964Z","signature_b64":"QQ5XJguyh13zwSkxmXBSLfjpAUposcOPQte4eIoSqIpcanRvKQTeSxmQI3zuo40milRi+gsgzyLFb4An8JSACg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"806dff15d541ee04cd8b1c0af6a72332c78cea808acbb0eb2516a5c01b4ac374","last_reissued_at":"2026-07-05T10:44:16.577457Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:44:16.577457Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.14729","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:44:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1TQqc+jn2OtvCrVgj2mZScdxjPzmjh7st2kcoDlMrNH3fYS1IQrakoO72EOsuWs32os0o1nRQnc/zRcab7hQCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-27T13:18:25.653027Z"},"content_sha256":"343f7c898dfaa56782eb94bbef99885b6526dc2c2a9d5081c364038311442649","schema_version":"1.0","event_id":"sha256:343f7c898dfaa56782eb94bbef99885b6526dc2c2a9d5081c364038311442649"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:QBW76FOVIHXAJTMLDQFPNJZDGL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PROMPTFUZZ: Harnessing Fuzzing Techniques for Robust Testing of Prompt Injection in LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Hanwen Miao, Jiahao Yu, Junzheng Shi, Yangguang Shao","submitted_at":"2024-09-23T06:08:32Z","abstract_excerpt":"Large Language Models (LLMs) have gained widespread use in various applications due to their powerful capability to generate human-like text. However, prompt injection attacks, which involve overwriting a model's original instructions with malicious prompts to manipulate the generated text, have raised significant concerns about the security and reliability of LLMs. Ensuring that LLMs are robust against such attacks is crucial for their deployment in real-world applications, particularly in critical tasks.\n  In this paper, we propose PROMPTFUZZ, a novel testing framework that leverages fuzzing"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.14729","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.14729/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:44:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HvIMnQY+0PvWpMvwpVnAgMnNS54PwYS0ipc3/0vA0u0RqNLL1vnjAjsIThyQXCnKTRNtNUsa3fi9fTswQUEBCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-27T13:18:25.653430Z"},"content_sha256":"428099be081f36d2861ba3e0e49087b0c7e013e8f688190e01838afe23b92263","schema_version":"1.0","event_id":"sha256:428099be081f36d2861ba3e0e49087b0c7e013e8f688190e01838afe23b92263"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QBW76FOVIHXAJTMLDQFPNJZDGL/bundle.json","state_url":"https://pith.science/pith/QBW76FOVIHXAJTMLDQFPNJZDGL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QBW76FOVIHXAJTMLDQFPNJZDGL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-27T13:18:25Z","links":{"resolver":"https://pith.science/pith/QBW76FOVIHXAJTMLDQFPNJZDGL","bundle":"https://pith.science/pith/QBW76FOVIHXAJTMLDQFPNJZDGL/bundle.json","state":"https://pith.science/pith/QBW76FOVIHXAJTMLDQFPNJZDGL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QBW76FOVIHXAJTMLDQFPNJZDGL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:QBW76FOVIHXAJTMLDQFPNJZDGL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"92cbad0996a52ed77ae8b79638bee28480406f7dc18acb46cea9137b6a19fb7e","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-23T06:08:32Z","title_canon_sha256":"e46d8081e8f4b234d94c1ffb9afce387fdaccb75fccec0e1fe51402e8a079843"},"schema_version":"1.0","source":{"id":"2409.14729","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.14729","created_at":"2026-07-05T10:44:16Z"},{"alias_kind":"arxiv_version","alias_value":"2409.14729v2","created_at":"2026-07-05T10:44:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.14729","created_at":"2026-07-05T10:44:16Z"},{"alias_kind":"pith_short_12","alias_value":"QBW76FOVIHXA","created_at":"2026-07-05T10:44:16Z"},{"alias_kind":"pith_short_16","alias_value":"QBW76FOVIHXAJTML","created_at":"2026-07-05T10:44:16Z"},{"alias_kind":"pith_short_8","alias_value":"QBW76FOV","created_at":"2026-07-05T10:44:16Z"}],"graph_snapshots":[{"event_id":"sha256:428099be081f36d2861ba3e0e49087b0c7e013e8f688190e01838afe23b92263","target":"graph","created_at":"2026-07-05T10:44:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.14729/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have gained widespread use in various applications due to their powerful capability to generate human-like text. However, prompt injection attacks, which involve overwriting a model's original instructions with malicious prompts to manipulate the generated text, have raised significant concerns about the security and reliability of LLMs. Ensuring that LLMs are robust against such attacks is crucial for their deployment in real-world applications, particularly in critical tasks.\n  In this paper, we propose PROMPTFUZZ, a novel testing framework that leverages fuzzing","authors_text":"Hanwen Miao, Jiahao Yu, Junzheng Shi, Yangguang Shao","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-23T06:08:32Z","title":"PROMPTFUZZ: Harnessing Fuzzing Techniques for Robust Testing of Prompt Injection in LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.14729","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:343f7c898dfaa56782eb94bbef99885b6526dc2c2a9d5081c364038311442649","target":"record","created_at":"2026-07-05T10:44:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"92cbad0996a52ed77ae8b79638bee28480406f7dc18acb46cea9137b6a19fb7e","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-23T06:08:32Z","title_canon_sha256":"e46d8081e8f4b234d94c1ffb9afce387fdaccb75fccec0e1fe51402e8a079843"},"schema_version":"1.0","source":{"id":"2409.14729","kind":"arxiv","version":2}},"canonical_sha256":"806dff15d541ee04cd8b1c0af6a72332c78cea808acbb0eb2516a5c01b4ac374","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"806dff15d541ee04cd8b1c0af6a72332c78cea808acbb0eb2516a5c01b4ac374","first_computed_at":"2026-07-05T10:44:16.577457Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:44:16.577457Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"QQ5XJguyh13zwSkxmXBSLfjpAUposcOPQte4eIoSqIpcanRvKQTeSxmQI3zuo40milRi+gsgzyLFb4An8JSACg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:44:16.577964Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.14729","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:343f7c898dfaa56782eb94bbef99885b6526dc2c2a9d5081c364038311442649","sha256:428099be081f36d2861ba3e0e49087b0c7e013e8f688190e01838afe23b92263"],"state_sha256":"8cc2a71bef1fcfa70399e986d4f94701dce4eca32bac54d4289b464eec2aa5cf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qvRuQA1Q4Fo+isEz9NuQ3TuYqZETnIp8GTld2tI+bwjAFuIKoq6ox1JC9dEpbR/8koBZUUY14rDlIX935RgHDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-27T13:18:25.655576Z","bundle_sha256":"822156d32197c53f7fda62b41dc857c152ae576d7ceee0602733ff9ee37d2ad2"}}