{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:RWSO6TEHXKFDL3Y6W76UHIJMR7","short_pith_number":"pith:RWSO6TEH","canonical_record":{"source":{"id":"2409.14866","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-23T10:03:09Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c4186bc7548ca1a1f93db6b798fa50ff3e1331e5bb5a314288e599215e2837a9","abstract_canon_sha256":"d397cba0b585aa8c7171f557dfbd3cd58e6e7d9030e210dbb278792a8b681b21"},"schema_version":"1.0"},"canonical_sha256":"8da4ef4c87ba8a35ef1eb7fd43a12c8fc72b9a09588398e31dc75e292bfb4bb1","source":{"kind":"arxiv","id":"2409.14866","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.14866","created_at":"2026-07-05T10:22:50Z"},{"alias_kind":"arxiv_version","alias_value":"2409.14866v5","created_at":"2026-07-05T10:22:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.14866","created_at":"2026-07-05T10:22:50Z"},{"alias_kind":"pith_short_12","alias_value":"RWSO6TEHXKFD","created_at":"2026-07-05T10:22:50Z"},{"alias_kind":"pith_short_16","alias_value":"RWSO6TEHXKFDL3Y6","created_at":"2026-07-05T10:22:50Z"},{"alias_kind":"pith_short_8","alias_value":"RWSO6TEH","created_at":"2026-07-05T10:22:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:RWSO6TEHXKFDL3Y6W76UHIJMR7","target":"record","payload":{"canonical_record":{"source":{"id":"2409.14866","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-23T10:03:09Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c4186bc7548ca1a1f93db6b798fa50ff3e1331e5bb5a314288e599215e2837a9","abstract_canon_sha256":"d397cba0b585aa8c7171f557dfbd3cd58e6e7d9030e210dbb278792a8b681b21"},"schema_version":"1.0"},"canonical_sha256":"8da4ef4c87ba8a35ef1eb7fd43a12c8fc72b9a09588398e31dc75e292bfb4bb1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:22:50.282704Z","signature_b64":"1Yu1tYerUibUpGX/DcLKi6BDZ/WfCtmlB8uqseC6TRgtN/sdw9TVm0UhSAXMAcGs/xa+bX40jDYf09y4ArofCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8da4ef4c87ba8a35ef1eb7fd43a12c8fc72b9a09588398e31dc75e292bfb4bb1","last_reissued_at":"2026-07-05T10:22:50.281877Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:22:50.281877Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.14866","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:22:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SwCfaXvPTQkMY1LbDcXsxs6od8f3EyOCUtVaBIRiXSVeq0Pd48KP71CS5TClgolDYbOYX8MeYx7z+Ei99u9lBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T10:16:38.298604Z"},"content_sha256":"2f245eb76ef02b3af021d5d5a5b5a177c7cd003c527abc6a11e979604902373d","schema_version":"1.0","event_id":"sha256:2f245eb76ef02b3af021d5d5a5b5a177c7cd003c527abc6a11e979604902373d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:RWSO6TEHXKFDL3Y6W76UHIJMR7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Chen Chen, Fengyuan Ran, Kwok-Yan Lam, Mingzhe Li, Qian Wang, Xueluan Gong, Yanjiao Chen, Yilin Zhang","submitted_at":"2024-09-23T10:03:09Z","abstract_excerpt":"Large Language Models (LLMs) have excelled in various tasks but are still vulnerable to jailbreaking attacks, where attackers create jailbreak prompts to mislead the model to produce harmful or offensive content. Current jailbreak methods either rely heavily on manually crafted templates, which pose challenges in scalability and adaptability, or struggle to generate semantically coherent prompts, making them easy to detect. Additionally, most existing approaches involve lengthy prompts, leading to higher query costs. In this paper, to remedy these challenges, we introduce a novel jailbreaking "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.14866","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.14866/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:22:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Rsr1sJFgsFhPmhl3C/1oEWqfjsE2lB5ff9pdliyX3cYBq1edwfRP3marDkGQiFmlW/Q6Qr7YhUPgt1Bun60pBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T10:16:38.299469Z"},"content_sha256":"821ae5d54e2c5103f4319c326f2f8029dad78c701616dfb250095657163b84a3","schema_version":"1.0","event_id":"sha256:821ae5d54e2c5103f4319c326f2f8029dad78c701616dfb250095657163b84a3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RWSO6TEHXKFDL3Y6W76UHIJMR7/bundle.json","state_url":"https://pith.science/pith/RWSO6TEHXKFDL3Y6W76UHIJMR7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RWSO6TEHXKFDL3Y6W76UHIJMR7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T10:16:38Z","links":{"resolver":"https://pith.science/pith/RWSO6TEHXKFDL3Y6W76UHIJMR7","bundle":"https://pith.science/pith/RWSO6TEHXKFDL3Y6W76UHIJMR7/bundle.json","state":"https://pith.science/pith/RWSO6TEHXKFDL3Y6W76UHIJMR7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RWSO6TEHXKFDL3Y6W76UHIJMR7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:RWSO6TEHXKFDL3Y6W76UHIJMR7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d397cba0b585aa8c7171f557dfbd3cd58e6e7d9030e210dbb278792a8b681b21","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-23T10:03:09Z","title_canon_sha256":"c4186bc7548ca1a1f93db6b798fa50ff3e1331e5bb5a314288e599215e2837a9"},"schema_version":"1.0","source":{"id":"2409.14866","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.14866","created_at":"2026-07-05T10:22:50Z"},{"alias_kind":"arxiv_version","alias_value":"2409.14866v5","created_at":"2026-07-05T10:22:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.14866","created_at":"2026-07-05T10:22:50Z"},{"alias_kind":"pith_short_12","alias_value":"RWSO6TEHXKFD","created_at":"2026-07-05T10:22:50Z"},{"alias_kind":"pith_short_16","alias_value":"RWSO6TEHXKFDL3Y6","created_at":"2026-07-05T10:22:50Z"},{"alias_kind":"pith_short_8","alias_value":"RWSO6TEH","created_at":"2026-07-05T10:22:50Z"}],"graph_snapshots":[{"event_id":"sha256:821ae5d54e2c5103f4319c326f2f8029dad78c701616dfb250095657163b84a3","target":"graph","created_at":"2026-07-05T10:22:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.14866/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have excelled in various tasks but are still vulnerable to jailbreaking attacks, where attackers create jailbreak prompts to mislead the model to produce harmful or offensive content. Current jailbreak methods either rely heavily on manually crafted templates, which pose challenges in scalability and adaptability, or struggle to generate semantically coherent prompts, making them easy to detect. Additionally, most existing approaches involve lengthy prompts, leading to higher query costs. In this paper, to remedy these challenges, we introduce a novel jailbreaking ","authors_text":"Chen Chen, Fengyuan Ran, Kwok-Yan Lam, Mingzhe Li, Qian Wang, Xueluan Gong, Yanjiao Chen, Yilin Zhang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-23T10:03:09Z","title":"PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.14866","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2f245eb76ef02b3af021d5d5a5b5a177c7cd003c527abc6a11e979604902373d","target":"record","created_at":"2026-07-05T10:22:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d397cba0b585aa8c7171f557dfbd3cd58e6e7d9030e210dbb278792a8b681b21","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-23T10:03:09Z","title_canon_sha256":"c4186bc7548ca1a1f93db6b798fa50ff3e1331e5bb5a314288e599215e2837a9"},"schema_version":"1.0","source":{"id":"2409.14866","kind":"arxiv","version":5}},"canonical_sha256":"8da4ef4c87ba8a35ef1eb7fd43a12c8fc72b9a09588398e31dc75e292bfb4bb1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8da4ef4c87ba8a35ef1eb7fd43a12c8fc72b9a09588398e31dc75e292bfb4bb1","first_computed_at":"2026-07-05T10:22:50.281877Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:22:50.281877Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1Yu1tYerUibUpGX/DcLKi6BDZ/WfCtmlB8uqseC6TRgtN/sdw9TVm0UhSAXMAcGs/xa+bX40jDYf09y4ArofCw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:22:50.282704Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.14866","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2f245eb76ef02b3af021d5d5a5b5a177c7cd003c527abc6a11e979604902373d","sha256:821ae5d54e2c5103f4319c326f2f8029dad78c701616dfb250095657163b84a3"],"state_sha256":"9bd00ca3d7508d960bcca83197389873eb34acca0620534ffe1835ef817bee08"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KALttfvBLi6sCxrg1B2nToitheWqyjOzseGG2wJ0eXL9kzoYwxhsOSHliglRg69N954e0vjtAUO9NAiwOsmkAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T10:16:38.306895Z","bundle_sha256":"adb0c046fddf6826d7d1ebed180431d801fc56dcdeceb4cc42ea83b5ae6cf262"}}