{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:QOO2U2KAVXWL3ZNCRG3OJQVSZV","short_pith_number":"pith:QOO2U2KA","canonical_record":{"source":{"id":"2505.17598","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-23T08:02:38Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"02eb21a9ff6f974ff1176f5f321473944fccb1c3294462ee4ef0846f23542673","abstract_canon_sha256":"ee489f9d240413a69fc139cc04a251e1247854347641a5e71efe41eb3e62cd2b"},"schema_version":"1.0"},"canonical_sha256":"839daa6940adecbde5a289b6e4c2b2cd4de91249926ee5bf862cda6c65530f22","source":{"kind":"arxiv","id":"2505.17598","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.17598","created_at":"2026-07-05T11:08:28Z"},{"alias_kind":"arxiv_version","alias_value":"2505.17598v1","created_at":"2026-07-05T11:08:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.17598","created_at":"2026-07-05T11:08:28Z"},{"alias_kind":"pith_short_12","alias_value":"QOO2U2KAVXWL","created_at":"2026-07-05T11:08:28Z"},{"alias_kind":"pith_short_16","alias_value":"QOO2U2KAVXWL3ZNC","created_at":"2026-07-05T11:08:28Z"},{"alias_kind":"pith_short_8","alias_value":"QOO2U2KA","created_at":"2026-07-05T11:08:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:QOO2U2KAVXWL3ZNCRG3OJQVSZV","target":"record","payload":{"canonical_record":{"source":{"id":"2505.17598","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-23T08:02:38Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"02eb21a9ff6f974ff1176f5f321473944fccb1c3294462ee4ef0846f23542673","abstract_canon_sha256":"ee489f9d240413a69fc139cc04a251e1247854347641a5e71efe41eb3e62cd2b"},"schema_version":"1.0"},"canonical_sha256":"839daa6940adecbde5a289b6e4c2b2cd4de91249926ee5bf862cda6c65530f22","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:08:28.769200Z","signature_b64":"vOv1jAryUS7o2m9EipwoE84GXx9vjRX7KfIrXboeJCwwZzquachjc5i8HYlHpYJ77qdKpPnoZs2NBvVozxQFBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"839daa6940adecbde5a289b6e4c2b2cd4de91249926ee5bf862cda6c65530f22","last_reissued_at":"2026-07-05T11:08:28.768701Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:08:28.768701Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.17598","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:08:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JRi6xB5qUdfwgYoZCPcKcSexmckSf/s/aYxIxDQdCF1U8elGkR0fLIKev0y1DzTpZEwuk/5qkiuKcNZnzPSCBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T11:52:50.141600Z"},"content_sha256":"f62572cfb9a024c54ffb8ccc1c23623c9746dfad1717be52cc5c35541a849451","schema_version":"1.0","event_id":"sha256:f62572cfb9a024c54ffb8ccc1c23623c9746dfad1717be52cc5c35541a849451"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:QOO2U2KAVXWL3ZNCRG3OJQVSZV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.CR","authors_text":"Daojing He, Linbao Li, Yannan Liu, Yu Li","submitted_at":"2025-05-23T08:02:38Z","abstract_excerpt":"Safety alignment in large language models (LLMs) is increasingly compromised by jailbreak attacks, which can manipulate these models to generate harmful or unintended content. Investigating these attacks is crucial for uncovering model vulnerabilities. However, many existing jailbreak strategies fail to keep pace with the rapid development of defense mechanisms, such as defensive suffixes, rendering them ineffective against defended models. To tackle this issue, we introduce a novel attack method called ArrAttack, specifically designed to target defended LLMs. ArrAttack automatically generates"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.17598","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.17598/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:08:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2XRl6tzoeOoAHTXcsBi25V8dR44lV8grRyPpb8m8j1LOk6gZ3EX6RpctaeV/xJK119YqCT/qQmnKW1VGt7RQBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T11:52:50.142093Z"},"content_sha256":"e341dcc954efb709f5bf47a0d6c5ff69575160e5ce1fc557426f35f509df72b7","schema_version":"1.0","event_id":"sha256:e341dcc954efb709f5bf47a0d6c5ff69575160e5ce1fc557426f35f509df72b7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QOO2U2KAVXWL3ZNCRG3OJQVSZV/bundle.json","state_url":"https://pith.science/pith/QOO2U2KAVXWL3ZNCRG3OJQVSZV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QOO2U2KAVXWL3ZNCRG3OJQVSZV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T11:52:50Z","links":{"resolver":"https://pith.science/pith/QOO2U2KAVXWL3ZNCRG3OJQVSZV","bundle":"https://pith.science/pith/QOO2U2KAVXWL3ZNCRG3OJQVSZV/bundle.json","state":"https://pith.science/pith/QOO2U2KAVXWL3ZNCRG3OJQVSZV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QOO2U2KAVXWL3ZNCRG3OJQVSZV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QOO2U2KAVXWL3ZNCRG3OJQVSZV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ee489f9d240413a69fc139cc04a251e1247854347641a5e71efe41eb3e62cd2b","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-23T08:02:38Z","title_canon_sha256":"02eb21a9ff6f974ff1176f5f321473944fccb1c3294462ee4ef0846f23542673"},"schema_version":"1.0","source":{"id":"2505.17598","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.17598","created_at":"2026-07-05T11:08:28Z"},{"alias_kind":"arxiv_version","alias_value":"2505.17598v1","created_at":"2026-07-05T11:08:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.17598","created_at":"2026-07-05T11:08:28Z"},{"alias_kind":"pith_short_12","alias_value":"QOO2U2KAVXWL","created_at":"2026-07-05T11:08:28Z"},{"alias_kind":"pith_short_16","alias_value":"QOO2U2KAVXWL3ZNC","created_at":"2026-07-05T11:08:28Z"},{"alias_kind":"pith_short_8","alias_value":"QOO2U2KA","created_at":"2026-07-05T11:08:28Z"}],"graph_snapshots":[{"event_id":"sha256:e341dcc954efb709f5bf47a0d6c5ff69575160e5ce1fc557426f35f509df72b7","target":"graph","created_at":"2026-07-05T11:08:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.17598/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Safety alignment in large language models (LLMs) is increasingly compromised by jailbreak attacks, which can manipulate these models to generate harmful or unintended content. Investigating these attacks is crucial for uncovering model vulnerabilities. However, many existing jailbreak strategies fail to keep pace with the rapid development of defense mechanisms, such as defensive suffixes, rendering them ineffective against defended models. To tackle this issue, we introduce a novel attack method called ArrAttack, specifically designed to target defended LLMs. ArrAttack automatically generates","authors_text":"Daojing He, Linbao Li, Yannan Liu, Yu Li","cross_cats":["cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-23T08:02:38Z","title":"One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.17598","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f62572cfb9a024c54ffb8ccc1c23623c9746dfad1717be52cc5c35541a849451","target":"record","created_at":"2026-07-05T11:08:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ee489f9d240413a69fc139cc04a251e1247854347641a5e71efe41eb3e62cd2b","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-23T08:02:38Z","title_canon_sha256":"02eb21a9ff6f974ff1176f5f321473944fccb1c3294462ee4ef0846f23542673"},"schema_version":"1.0","source":{"id":"2505.17598","kind":"arxiv","version":1}},"canonical_sha256":"839daa6940adecbde5a289b6e4c2b2cd4de91249926ee5bf862cda6c65530f22","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"839daa6940adecbde5a289b6e4c2b2cd4de91249926ee5bf862cda6c65530f22","first_computed_at":"2026-07-05T11:08:28.768701Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:08:28.768701Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vOv1jAryUS7o2m9EipwoE84GXx9vjRX7KfIrXboeJCwwZzquachjc5i8HYlHpYJ77qdKpPnoZs2NBvVozxQFBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:08:28.769200Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.17598","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f62572cfb9a024c54ffb8ccc1c23623c9746dfad1717be52cc5c35541a849451","sha256:e341dcc954efb709f5bf47a0d6c5ff69575160e5ce1fc557426f35f509df72b7"],"state_sha256":"824a0051635350633e5d7b5dc26ab640a40b4d2c4c0e9b49db6b3ef615d22587"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MfmMEhCugYKCNBUF9rJUEPg2zKn552fex/GudwxmvEBJv5pn9qwZyFtXA6mUAM40k1WdW+ZOCcYhBbSZaS/3DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T11:52:50.147662Z","bundle_sha256":"95dcc6704e3673eab88186c3ef72db05d69a2e170b7de90d7da996d74fc2c0d6"}}