{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:QVHQXRAH2S7QMZF6KIAIAMGVYF","short_pith_number":"pith:QVHQXRAH","canonical_record":{"source":{"id":"2505.23839","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-28T13:58:32Z","cross_cats_sorted":["q-bio.GN"],"title_canon_sha256":"640fa470a7cf71ff26418c57755e85e253bdfa2fdbbcc0c6e1a037e3edd5117d","abstract_canon_sha256":"e3cc73c05f815b18ec0aa239ce3c893c7b0df442e2541829af6d44edd42fefe6"},"schema_version":"1.0"},"canonical_sha256":"854f0bc407d4bf0664be52008030d5c1608111fe094a99ab72b754c3680434da","source":{"kind":"arxiv","id":"2505.23839","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.23839","created_at":"2026-07-05T11:12:36Z"},{"alias_kind":"arxiv_version","alias_value":"2505.23839v1","created_at":"2026-07-05T11:12:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.23839","created_at":"2026-07-05T11:12:36Z"},{"alias_kind":"pith_short_12","alias_value":"QVHQXRAH2S7Q","created_at":"2026-07-05T11:12:36Z"},{"alias_kind":"pith_short_16","alias_value":"QVHQXRAH2S7QMZF6","created_at":"2026-07-05T11:12:36Z"},{"alias_kind":"pith_short_8","alias_value":"QVHQXRAH","created_at":"2026-07-05T11:12:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:QVHQXRAH2S7QMZF6KIAIAMGVYF","target":"record","payload":{"canonical_record":{"source":{"id":"2505.23839","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-28T13:58:32Z","cross_cats_sorted":["q-bio.GN"],"title_canon_sha256":"640fa470a7cf71ff26418c57755e85e253bdfa2fdbbcc0c6e1a037e3edd5117d","abstract_canon_sha256":"e3cc73c05f815b18ec0aa239ce3c893c7b0df442e2541829af6d44edd42fefe6"},"schema_version":"1.0"},"canonical_sha256":"854f0bc407d4bf0664be52008030d5c1608111fe094a99ab72b754c3680434da","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:12:36.483016Z","signature_b64":"ryBnl07/XRJ1Udkyo3Wy6gRHWrKqLCUi6/KFdBllC1/uGm+YiciYovr4bVuzcPJfVtI6KXKjMybI/JWKRFH6CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"854f0bc407d4bf0664be52008030d5c1608111fe094a99ab72b754c3680434da","last_reissued_at":"2026-07-05T11:12:36.482440Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:12:36.482440Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.23839","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:12:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jXrp+bHiK1wvnyZHQzzHZ4zCjCcKb94/yo3/rsQOk1zfJa53TlVHtAt1UcXYAZnXA9nrJyxbyQNrJ/maE4PfDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T19:24:45.667973Z"},"content_sha256":"666fc49d18a31b0425488a0586984df307e8d80c7e0a9c088b032b12f9af7737","schema_version":"1.0","event_id":"sha256:666fc49d18a31b0425488a0586984df307e8d80c7e0a9c088b032b12f9af7737"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:QVHQXRAH2S7QMZF6KIAIAMGVYF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"GeneBreaker: Jailbreak Attacks against DNA Language Models with Pathogenicity Guidance","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["q-bio.GN"],"primary_cat":"cs.CR","authors_text":"Le Cong, Mengdi Wang, Ruofan Jin, Zaixi Zhang, Zhenghong Zhou","submitted_at":"2025-05-28T13:58:32Z","abstract_excerpt":"DNA, encoding genetic instructions for almost all living organisms, fuels groundbreaking advances in genomics and synthetic biology. Recently, DNA Foundation Models have achieved success in designing synthetic functional DNA sequences, even whole genomes, but their susceptibility to jailbreaking remains underexplored, leading to potential concern of generating harmful sequences such as pathogens or toxin-producing genes. In this paper, we introduce GeneBreaker, the first framework to systematically evaluate jailbreak vulnerabilities of DNA foundation models. GeneBreaker employs (1) an LLM agen"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.23839","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.23839/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:12:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WW6FJd9Icn1zn5KwO7+05RfdivrpK0j06nH5YdY+1T9bJ4k0x+pfOfWMyQDhuwRdJw/Kys0ICQA3hQw8Ev8OCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T19:24:45.668539Z"},"content_sha256":"f8a56f638ce62829f9e1f3f4767b51ec291e915c738f781fa804886ba3bc4290","schema_version":"1.0","event_id":"sha256:f8a56f638ce62829f9e1f3f4767b51ec291e915c738f781fa804886ba3bc4290"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QVHQXRAH2S7QMZF6KIAIAMGVYF/bundle.json","state_url":"https://pith.science/pith/QVHQXRAH2S7QMZF6KIAIAMGVYF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QVHQXRAH2S7QMZF6KIAIAMGVYF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T19:24:45Z","links":{"resolver":"https://pith.science/pith/QVHQXRAH2S7QMZF6KIAIAMGVYF","bundle":"https://pith.science/pith/QVHQXRAH2S7QMZF6KIAIAMGVYF/bundle.json","state":"https://pith.science/pith/QVHQXRAH2S7QMZF6KIAIAMGVYF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QVHQXRAH2S7QMZF6KIAIAMGVYF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QVHQXRAH2S7QMZF6KIAIAMGVYF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e3cc73c05f815b18ec0aa239ce3c893c7b0df442e2541829af6d44edd42fefe6","cross_cats_sorted":["q-bio.GN"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-28T13:58:32Z","title_canon_sha256":"640fa470a7cf71ff26418c57755e85e253bdfa2fdbbcc0c6e1a037e3edd5117d"},"schema_version":"1.0","source":{"id":"2505.23839","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.23839","created_at":"2026-07-05T11:12:36Z"},{"alias_kind":"arxiv_version","alias_value":"2505.23839v1","created_at":"2026-07-05T11:12:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.23839","created_at":"2026-07-05T11:12:36Z"},{"alias_kind":"pith_short_12","alias_value":"QVHQXRAH2S7Q","created_at":"2026-07-05T11:12:36Z"},{"alias_kind":"pith_short_16","alias_value":"QVHQXRAH2S7QMZF6","created_at":"2026-07-05T11:12:36Z"},{"alias_kind":"pith_short_8","alias_value":"QVHQXRAH","created_at":"2026-07-05T11:12:36Z"}],"graph_snapshots":[{"event_id":"sha256:f8a56f638ce62829f9e1f3f4767b51ec291e915c738f781fa804886ba3bc4290","target":"graph","created_at":"2026-07-05T11:12:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.23839/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"DNA, encoding genetic instructions for almost all living organisms, fuels groundbreaking advances in genomics and synthetic biology. Recently, DNA Foundation Models have achieved success in designing synthetic functional DNA sequences, even whole genomes, but their susceptibility to jailbreaking remains underexplored, leading to potential concern of generating harmful sequences such as pathogens or toxin-producing genes. In this paper, we introduce GeneBreaker, the first framework to systematically evaluate jailbreak vulnerabilities of DNA foundation models. GeneBreaker employs (1) an LLM agen","authors_text":"Le Cong, Mengdi Wang, Ruofan Jin, Zaixi Zhang, Zhenghong Zhou","cross_cats":["q-bio.GN"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-28T13:58:32Z","title":"GeneBreaker: Jailbreak Attacks against DNA Language Models with Pathogenicity Guidance"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.23839","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:666fc49d18a31b0425488a0586984df307e8d80c7e0a9c088b032b12f9af7737","target":"record","created_at":"2026-07-05T11:12:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e3cc73c05f815b18ec0aa239ce3c893c7b0df442e2541829af6d44edd42fefe6","cross_cats_sorted":["q-bio.GN"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-28T13:58:32Z","title_canon_sha256":"640fa470a7cf71ff26418c57755e85e253bdfa2fdbbcc0c6e1a037e3edd5117d"},"schema_version":"1.0","source":{"id":"2505.23839","kind":"arxiv","version":1}},"canonical_sha256":"854f0bc407d4bf0664be52008030d5c1608111fe094a99ab72b754c3680434da","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"854f0bc407d4bf0664be52008030d5c1608111fe094a99ab72b754c3680434da","first_computed_at":"2026-07-05T11:12:36.482440Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:12:36.482440Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ryBnl07/XRJ1Udkyo3Wy6gRHWrKqLCUi6/KFdBllC1/uGm+YiciYovr4bVuzcPJfVtI6KXKjMybI/JWKRFH6CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:12:36.483016Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.23839","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:666fc49d18a31b0425488a0586984df307e8d80c7e0a9c088b032b12f9af7737","sha256:f8a56f638ce62829f9e1f3f4767b51ec291e915c738f781fa804886ba3bc4290"],"state_sha256":"142c1f62d19698e537a83d80e078de39de23ff7e572cdf3fe3362aa799df8439"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rbOX8RtEegIjn3vZJL/iYLwa10N6MVa+0+IqQiQstFwIRyk4oq315qZq7q3hYeiRTPYdWOV6avlnokeUv002AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T19:24:45.671972Z","bundle_sha256":"968abcd1d9d88f0fc180e2e5aad2bfa2153822d4f2f04c0de22ca0074a1dc91d"}}