{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:S4V5RCC6YQMYUX76BZ3BD4ZXZD","short_pith_number":"pith:S4V5RCC6","canonical_record":{"source":{"id":"2402.16006","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-25T06:46:27Z","cross_cats_sorted":[],"title_canon_sha256":"22523a29a9d486a856bdc572591aa5639c93719ce40dfa1264c91eb62567c0ef","abstract_canon_sha256":"dcf54c2b1bcfca59c1af36735fbf83fba9cdc89840d6985268b99a1ccce538b6"},"schema_version":"1.0"},"canonical_sha256":"972bd8885ec4198a5ffe0e7611f337c8c667ca2011be7ad818065b39dea8a944","source":{"kind":"arxiv","id":"2402.16006","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.16006","created_at":"2026-07-05T08:27:04Z"},{"alias_kind":"arxiv_version","alias_value":"2402.16006v2","created_at":"2026-07-05T08:27:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.16006","created_at":"2026-07-05T08:27:04Z"},{"alias_kind":"pith_short_12","alias_value":"S4V5RCC6YQMY","created_at":"2026-07-05T08:27:04Z"},{"alias_kind":"pith_short_16","alias_value":"S4V5RCC6YQMYUX76","created_at":"2026-07-05T08:27:04Z"},{"alias_kind":"pith_short_8","alias_value":"S4V5RCC6","created_at":"2026-07-05T08:27:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:S4V5RCC6YQMYUX76BZ3BD4ZXZD","target":"record","payload":{"canonical_record":{"source":{"id":"2402.16006","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-25T06:46:27Z","cross_cats_sorted":[],"title_canon_sha256":"22523a29a9d486a856bdc572591aa5639c93719ce40dfa1264c91eb62567c0ef","abstract_canon_sha256":"dcf54c2b1bcfca59c1af36735fbf83fba9cdc89840d6985268b99a1ccce538b6"},"schema_version":"1.0"},"canonical_sha256":"972bd8885ec4198a5ffe0e7611f337c8c667ca2011be7ad818065b39dea8a944","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:27:04.648819Z","signature_b64":"b2mjRk/8VZQy3SN5MhuTEe2yM67a6dpg1riug9e/RAQCD7Be8suHc8lsDglSCvFzgRaZCFIyd5jzYGS/BBc3Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"972bd8885ec4198a5ffe0e7611f337c8c667ca2011be7ad818065b39dea8a944","last_reissued_at":"2026-07-05T08:27:04.648342Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:27:04.648342Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.16006","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:27:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JmfQiu79OlW7fGHpBAtn34uFGq+7S4FYM6ducWJZ0Gk97LGwUxEpzR3WaQFDXOxUUjJbitEUCSFD2dLlsLouBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:30:23.136637Z"},"content_sha256":"61c04a073ebe850cbe95915b332276318e833d9ce7b66e68ab69c148e3322ea4","schema_version":"1.0","event_id":"sha256:61c04a073ebe850cbe95915b332276318e833d9ce7b66e68ab69c148e3322ea4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:S4V5RCC6YQMYUX76BZ3BD4ZXZD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Hao Li, Hao Wang, Lei Sha, Minlie Huang","submitted_at":"2024-02-25T06:46:27Z","abstract_excerpt":"The safety defense methods of Large language models(LLMs) stays limited because the dangerous prompts are manually curated to just few known attack types, which fails to keep pace with emerging varieties. Recent studies found that attaching suffixes to harmful instructions can hack the defense of LLMs and lead to dangerous outputs. However, similar to traditional text adversarial attacks, this approach, while effective, is limited by the challenge of the discrete tokens. This gradient based discrete optimization attack requires over 100,000 LLM calls, and due to the unreadable of adversarial s"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.16006","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.16006/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:27:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zQxEMG6jEYOwqTczZQ4jVAiIvVYXDyewyw9TndgbOf9p+qDa4sWrJeVj9Bq0/1I9aZs84DWxyYOpQFNOlZR0BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:30:23.138173Z"},"content_sha256":"b189099bb834e61d3c165b389e7d228452c539d1cc752a0957a3bf37f690e732","schema_version":"1.0","event_id":"sha256:b189099bb834e61d3c165b389e7d228452c539d1cc752a0957a3bf37f690e732"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/S4V5RCC6YQMYUX76BZ3BD4ZXZD/bundle.json","state_url":"https://pith.science/pith/S4V5RCC6YQMYUX76BZ3BD4ZXZD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/S4V5RCC6YQMYUX76BZ3BD4ZXZD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T04:30:23Z","links":{"resolver":"https://pith.science/pith/S4V5RCC6YQMYUX76BZ3BD4ZXZD","bundle":"https://pith.science/pith/S4V5RCC6YQMYUX76BZ3BD4ZXZD/bundle.json","state":"https://pith.science/pith/S4V5RCC6YQMYUX76BZ3BD4ZXZD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/S4V5RCC6YQMYUX76BZ3BD4ZXZD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:S4V5RCC6YQMYUX76BZ3BD4ZXZD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"dcf54c2b1bcfca59c1af36735fbf83fba9cdc89840d6985268b99a1ccce538b6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-25T06:46:27Z","title_canon_sha256":"22523a29a9d486a856bdc572591aa5639c93719ce40dfa1264c91eb62567c0ef"},"schema_version":"1.0","source":{"id":"2402.16006","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.16006","created_at":"2026-07-05T08:27:04Z"},{"alias_kind":"arxiv_version","alias_value":"2402.16006v2","created_at":"2026-07-05T08:27:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.16006","created_at":"2026-07-05T08:27:04Z"},{"alias_kind":"pith_short_12","alias_value":"S4V5RCC6YQMY","created_at":"2026-07-05T08:27:04Z"},{"alias_kind":"pith_short_16","alias_value":"S4V5RCC6YQMYUX76","created_at":"2026-07-05T08:27:04Z"},{"alias_kind":"pith_short_8","alias_value":"S4V5RCC6","created_at":"2026-07-05T08:27:04Z"}],"graph_snapshots":[{"event_id":"sha256:b189099bb834e61d3c165b389e7d228452c539d1cc752a0957a3bf37f690e732","target":"graph","created_at":"2026-07-05T08:27:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.16006/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The safety defense methods of Large language models(LLMs) stays limited because the dangerous prompts are manually curated to just few known attack types, which fails to keep pace with emerging varieties. Recent studies found that attaching suffixes to harmful instructions can hack the defense of LLMs and lead to dangerous outputs. However, similar to traditional text adversarial attacks, this approach, while effective, is limited by the challenge of the discrete tokens. This gradient based discrete optimization attack requires over 100,000 LLM calls, and due to the unreadable of adversarial s","authors_text":"Hao Li, Hao Wang, Lei Sha, Minlie Huang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-25T06:46:27Z","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.16006","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:61c04a073ebe850cbe95915b332276318e833d9ce7b66e68ab69c148e3322ea4","target":"record","created_at":"2026-07-05T08:27:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"dcf54c2b1bcfca59c1af36735fbf83fba9cdc89840d6985268b99a1ccce538b6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-25T06:46:27Z","title_canon_sha256":"22523a29a9d486a856bdc572591aa5639c93719ce40dfa1264c91eb62567c0ef"},"schema_version":"1.0","source":{"id":"2402.16006","kind":"arxiv","version":2}},"canonical_sha256":"972bd8885ec4198a5ffe0e7611f337c8c667ca2011be7ad818065b39dea8a944","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"972bd8885ec4198a5ffe0e7611f337c8c667ca2011be7ad818065b39dea8a944","first_computed_at":"2026-07-05T08:27:04.648342Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:27:04.648342Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"b2mjRk/8VZQy3SN5MhuTEe2yM67a6dpg1riug9e/RAQCD7Be8suHc8lsDglSCvFzgRaZCFIyd5jzYGS/BBc3Dg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:27:04.648819Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.16006","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:61c04a073ebe850cbe95915b332276318e833d9ce7b66e68ab69c148e3322ea4","sha256:b189099bb834e61d3c165b389e7d228452c539d1cc752a0957a3bf37f690e732"],"state_sha256":"7b7ed1f133c560f55f4c504d2aa6922d61ea6cf7074bdf3bd3a4fb55c93fcfba"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+YNr8HwKPkLTB90TXEHrKPdyobeuZwglKWoYd6a+9ZM1dKYwUFglonC0unKcMk4el5NqUSAjlS0SsRN6BWU3Cw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T04:30:23.146636Z","bundle_sha256":"e18bfb275370c5797b9165c95ebe4ea7ae52eb0ab408aa6078cdd4b8451ad2df"}}