{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:RJI3KLKZNFXTMBYHN627423OO3","short_pith_number":"pith:RJI3KLKZ","canonical_record":{"source":{"id":"2410.21083","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-28T14:48:05Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"9fc0918c9bd49c1a75f918df00b6817d6f6523499b828b67af8fbee723053848","abstract_canon_sha256":"0a643221ac6b856c640006fcc70f394a2f6b54513dc2f40dfd3592e956518b38"},"schema_version":"1.0"},"canonical_sha256":"8a51b52d59696f3607076fb5fe6b6e76e1283d4c02fa962fbce21d6a69a1b473","source":{"kind":"arxiv","id":"2410.21083","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.21083","created_at":"2026-07-05T10:25:12Z"},{"alias_kind":"arxiv_version","alias_value":"2410.21083v2","created_at":"2026-07-05T10:25:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.21083","created_at":"2026-07-05T10:25:12Z"},{"alias_kind":"pith_short_12","alias_value":"RJI3KLKZNFXT","created_at":"2026-07-05T10:25:12Z"},{"alias_kind":"pith_short_16","alias_value":"RJI3KLKZNFXTMBYH","created_at":"2026-07-05T10:25:12Z"},{"alias_kind":"pith_short_8","alias_value":"RJI3KLKZ","created_at":"2026-07-05T10:25:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:RJI3KLKZNFXTMBYHN627423OO3","target":"record","payload":{"canonical_record":{"source":{"id":"2410.21083","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-28T14:48:05Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"9fc0918c9bd49c1a75f918df00b6817d6f6523499b828b67af8fbee723053848","abstract_canon_sha256":"0a643221ac6b856c640006fcc70f394a2f6b54513dc2f40dfd3592e956518b38"},"schema_version":"1.0"},"canonical_sha256":"8a51b52d59696f3607076fb5fe6b6e76e1283d4c02fa962fbce21d6a69a1b473","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:25:12.810554Z","signature_b64":"fUlyp3oVjsy0Z4SETOFfqRGsSYWR0v9mgp1OfOADOUSKErf9OWLB7cTT+R67yFNFKVV5gh/vI1nEV1LK9l7zBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8a51b52d59696f3607076fb5fe6b6e76e1283d4c02fa962fbce21d6a69a1b473","last_reissued_at":"2026-07-05T10:25:12.809508Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:25:12.809508Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.21083","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:25:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"R9DT9XAqjjg+A9eNeWEES7rUkKoigMREG/K6w5oTbOALUpbl9yybKKT/SIKYyLxhWVrIUtdNfXPTarDaMvg5BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T10:00:34.457800Z"},"content_sha256":"494a315e90e977bae05e5309f793bea7658435a09da051360b4360bec70e9d05","schema_version":"1.0","event_id":"sha256:494a315e90e977bae05e5309f793bea7658435a09da051360b4360bec70e9d05"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:RJI3KLKZNFXTMBYHN627423OO3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Stealthy Jailbreak Attacks on Large Language Models via Benign Data Mirroring","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Han He, Honglin Mu, Libo Qin, Qingfu Zhu, Qi Shi, Wanxiang Che, Xiaoming Shi, Xudong Han, Yang Xu, Yunlong Feng, Yuxin Zhou, Zeming Liu","submitted_at":"2024-10-28T14:48:05Z","abstract_excerpt":"Large language model (LLM) safety is a critical issue, with numerous studies employing red team testing to enhance model security. Among these, jailbreak methods explore potential vulnerabilities by crafting malicious prompts that induce model outputs contrary to safety alignments. Existing black-box jailbreak methods often rely on model feedback, repeatedly submitting queries with detectable malicious instructions during the attack search process. Although these approaches are effective, the attacks may be intercepted by content moderators during the search process. We propose an improved tra"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.21083","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.21083/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:25:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U0vuMtRgZdA4oJ6Ep0ffic3flNjcFFNb6VbTcYeatmJSsrM4TPKkDI/FMZNpcunzry6qUTL/KHBhQuSQnCIUCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T10:00:34.458366Z"},"content_sha256":"b8bbd090a47dfc1745701303a55a01b8f25acd04c32fb8ca7f2a1f43a88391c6","schema_version":"1.0","event_id":"sha256:b8bbd090a47dfc1745701303a55a01b8f25acd04c32fb8ca7f2a1f43a88391c6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RJI3KLKZNFXTMBYHN627423OO3/bundle.json","state_url":"https://pith.science/pith/RJI3KLKZNFXTMBYHN627423OO3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RJI3KLKZNFXTMBYHN627423OO3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T10:00:34Z","links":{"resolver":"https://pith.science/pith/RJI3KLKZNFXTMBYHN627423OO3","bundle":"https://pith.science/pith/RJI3KLKZNFXTMBYHN627423OO3/bundle.json","state":"https://pith.science/pith/RJI3KLKZNFXTMBYHN627423OO3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RJI3KLKZNFXTMBYHN627423OO3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:RJI3KLKZNFXTMBYHN627423OO3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0a643221ac6b856c640006fcc70f394a2f6b54513dc2f40dfd3592e956518b38","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-28T14:48:05Z","title_canon_sha256":"9fc0918c9bd49c1a75f918df00b6817d6f6523499b828b67af8fbee723053848"},"schema_version":"1.0","source":{"id":"2410.21083","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.21083","created_at":"2026-07-05T10:25:12Z"},{"alias_kind":"arxiv_version","alias_value":"2410.21083v2","created_at":"2026-07-05T10:25:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.21083","created_at":"2026-07-05T10:25:12Z"},{"alias_kind":"pith_short_12","alias_value":"RJI3KLKZNFXT","created_at":"2026-07-05T10:25:12Z"},{"alias_kind":"pith_short_16","alias_value":"RJI3KLKZNFXTMBYH","created_at":"2026-07-05T10:25:12Z"},{"alias_kind":"pith_short_8","alias_value":"RJI3KLKZ","created_at":"2026-07-05T10:25:12Z"}],"graph_snapshots":[{"event_id":"sha256:b8bbd090a47dfc1745701303a55a01b8f25acd04c32fb8ca7f2a1f43a88391c6","target":"graph","created_at":"2026-07-05T10:25:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.21083/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language model (LLM) safety is a critical issue, with numerous studies employing red team testing to enhance model security. Among these, jailbreak methods explore potential vulnerabilities by crafting malicious prompts that induce model outputs contrary to safety alignments. Existing black-box jailbreak methods often rely on model feedback, repeatedly submitting queries with detectable malicious instructions during the attack search process. Although these approaches are effective, the attacks may be intercepted by content moderators during the search process. We propose an improved tra","authors_text":"Han He, Honglin Mu, Libo Qin, Qingfu Zhu, Qi Shi, Wanxiang Che, Xiaoming Shi, Xudong Han, Yang Xu, Yunlong Feng, Yuxin Zhou, Zeming Liu","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-28T14:48:05Z","title":"Stealthy Jailbreak Attacks on Large Language Models via Benign Data Mirroring"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.21083","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:494a315e90e977bae05e5309f793bea7658435a09da051360b4360bec70e9d05","target":"record","created_at":"2026-07-05T10:25:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0a643221ac6b856c640006fcc70f394a2f6b54513dc2f40dfd3592e956518b38","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-28T14:48:05Z","title_canon_sha256":"9fc0918c9bd49c1a75f918df00b6817d6f6523499b828b67af8fbee723053848"},"schema_version":"1.0","source":{"id":"2410.21083","kind":"arxiv","version":2}},"canonical_sha256":"8a51b52d59696f3607076fb5fe6b6e76e1283d4c02fa962fbce21d6a69a1b473","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8a51b52d59696f3607076fb5fe6b6e76e1283d4c02fa962fbce21d6a69a1b473","first_computed_at":"2026-07-05T10:25:12.809508Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:25:12.809508Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fUlyp3oVjsy0Z4SETOFfqRGsSYWR0v9mgp1OfOADOUSKErf9OWLB7cTT+R67yFNFKVV5gh/vI1nEV1LK9l7zBw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:25:12.810554Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.21083","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:494a315e90e977bae05e5309f793bea7658435a09da051360b4360bec70e9d05","sha256:b8bbd090a47dfc1745701303a55a01b8f25acd04c32fb8ca7f2a1f43a88391c6"],"state_sha256":"207b5bc02ab27a9e348eece683f168391517f9cfb5756bc8ec532d04eabf4775"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pjNv/NAleEXQAyAB2QdGqLZV00NrDAdJSOvnU6PjPBjfWe/qGaNwoo3EF3418subUnejAg4U9Vg0GsGWw7QECw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T10:00:34.462046Z","bundle_sha256":"e1ac6905df0954154ea9fd15803001a8e905d6c1029c8f37dd23822c1be181fc"}}