{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:SASFCHUZIWW7WG23J5HIRVVYVA","short_pith_number":"pith:SASFCHUZ","canonical_record":{"source":{"id":"2502.11054","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-16T09:27:44Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"248764b954f052be09c96b03f321031f0c28c335ced5155cef476a9a27e50fcf","abstract_canon_sha256":"588da5d21f29b84da7cb8b0d4459629e1495d7a5ef4418e6bd5e575d73e3d785"},"schema_version":"1.0"},"canonical_sha256":"9024511e9945adfb1b5b4f4e88d6b8a83270df6f706e3e997954bca440fe445e","source":{"kind":"arxiv","id":"2502.11054","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.11054","created_at":"2026-07-05T10:28:36Z"},{"alias_kind":"arxiv_version","alias_value":"2502.11054v4","created_at":"2026-07-05T10:28:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.11054","created_at":"2026-07-05T10:28:36Z"},{"alias_kind":"pith_short_12","alias_value":"SASFCHUZIWW7","created_at":"2026-07-05T10:28:36Z"},{"alias_kind":"pith_short_16","alias_value":"SASFCHUZIWW7WG23","created_at":"2026-07-05T10:28:36Z"},{"alias_kind":"pith_short_8","alias_value":"SASFCHUZ","created_at":"2026-07-05T10:28:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:SASFCHUZIWW7WG23J5HIRVVYVA","target":"record","payload":{"canonical_record":{"source":{"id":"2502.11054","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-16T09:27:44Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"248764b954f052be09c96b03f321031f0c28c335ced5155cef476a9a27e50fcf","abstract_canon_sha256":"588da5d21f29b84da7cb8b0d4459629e1495d7a5ef4418e6bd5e575d73e3d785"},"schema_version":"1.0"},"canonical_sha256":"9024511e9945adfb1b5b4f4e88d6b8a83270df6f706e3e997954bca440fe445e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:28:36.072126Z","signature_b64":"8Xt4QyGmlxMw1Wb97P1P5lqEVW8WhdrMZn/kkOUvTQA9xDEWl4u4dtXk6PCkKgYq6BnXTBNHkpxbKpL4PoQVCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9024511e9945adfb1b5b4f4e88d6b8a83270df6f706e3e997954bca440fe445e","last_reissued_at":"2026-07-05T10:28:36.071083Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:28:36.071083Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.11054","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:28:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"D1syin5ehwFntgUjNFNKQ5AOKecrbNa6y6lnR4ikq4gGIq8A5iqrqQZgQE+oQedB93WI/WAuUVLEt/rxmNbLAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T14:52:26.600597Z"},"content_sha256":"65e60a35863b028c9a7f6d60f8bbc14270fc60d9cc6698e110420a45c4c6498d","schema_version":"1.0","event_id":"sha256:65e60a35863b028c9a7f6d60f8bbc14270fc60d9cc6698e110420a45c4c6498d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:SASFCHUZIWW7WG23J5HIRVVYVA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.CL","authors_text":"Aishan Liu, Dacheng Tao, Deyue Zhang, Quanchen Zou, Siyuan Liang, Xianglong Liu, Xiangzheng Zhang, Yisong Xiao, Zonghao Ying, Zonglei Jing","submitted_at":"2025-02-16T09:27:44Z","abstract_excerpt":"Multi-turn jailbreak attacks simulate real-world human interactions by engaging large language models (LLMs) in iterative dialogues, exposing critical safety vulnerabilities. However, existing methods often struggle to balance semantic coherence with attack effectiveness, resulting in either benign semantic drift or ineffective detection evasion. To address this challenge, we propose Reasoning-Augmented Conversation, a novel multi-turn jailbreak framework that reformulates harmful queries into benign reasoning tasks and leverages LLMs' strong reasoning capabilities to compromise safety alignme"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.11054","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.11054/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:28:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4XC3kUbDHYhL/phDuU53G2Ewxvp9LDI1jL3am7SB8KU8c7NUbRUlJSj0KrabzYPWJHNbIg77ED4hZlIiVj14Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T14:52:26.601113Z"},"content_sha256":"c4bb6f30f672e92303a6fd97913bf4fb86a85ab19c74adc6bf65f24d9edde028","schema_version":"1.0","event_id":"sha256:c4bb6f30f672e92303a6fd97913bf4fb86a85ab19c74adc6bf65f24d9edde028"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SASFCHUZIWW7WG23J5HIRVVYVA/bundle.json","state_url":"https://pith.science/pith/SASFCHUZIWW7WG23J5HIRVVYVA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SASFCHUZIWW7WG23J5HIRVVYVA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T14:52:26Z","links":{"resolver":"https://pith.science/pith/SASFCHUZIWW7WG23J5HIRVVYVA","bundle":"https://pith.science/pith/SASFCHUZIWW7WG23J5HIRVVYVA/bundle.json","state":"https://pith.science/pith/SASFCHUZIWW7WG23J5HIRVVYVA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SASFCHUZIWW7WG23J5HIRVVYVA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:SASFCHUZIWW7WG23J5HIRVVYVA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"588da5d21f29b84da7cb8b0d4459629e1495d7a5ef4418e6bd5e575d73e3d785","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-16T09:27:44Z","title_canon_sha256":"248764b954f052be09c96b03f321031f0c28c335ced5155cef476a9a27e50fcf"},"schema_version":"1.0","source":{"id":"2502.11054","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.11054","created_at":"2026-07-05T10:28:36Z"},{"alias_kind":"arxiv_version","alias_value":"2502.11054v4","created_at":"2026-07-05T10:28:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.11054","created_at":"2026-07-05T10:28:36Z"},{"alias_kind":"pith_short_12","alias_value":"SASFCHUZIWW7","created_at":"2026-07-05T10:28:36Z"},{"alias_kind":"pith_short_16","alias_value":"SASFCHUZIWW7WG23","created_at":"2026-07-05T10:28:36Z"},{"alias_kind":"pith_short_8","alias_value":"SASFCHUZ","created_at":"2026-07-05T10:28:36Z"}],"graph_snapshots":[{"event_id":"sha256:c4bb6f30f672e92303a6fd97913bf4fb86a85ab19c74adc6bf65f24d9edde028","target":"graph","created_at":"2026-07-05T10:28:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.11054/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multi-turn jailbreak attacks simulate real-world human interactions by engaging large language models (LLMs) in iterative dialogues, exposing critical safety vulnerabilities. However, existing methods often struggle to balance semantic coherence with attack effectiveness, resulting in either benign semantic drift or ineffective detection evasion. To address this challenge, we propose Reasoning-Augmented Conversation, a novel multi-turn jailbreak framework that reformulates harmful queries into benign reasoning tasks and leverages LLMs' strong reasoning capabilities to compromise safety alignme","authors_text":"Aishan Liu, Dacheng Tao, Deyue Zhang, Quanchen Zou, Siyuan Liang, Xianglong Liu, Xiangzheng Zhang, Yisong Xiao, Zonghao Ying, Zonglei Jing","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.11054","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:65e60a35863b028c9a7f6d60f8bbc14270fc60d9cc6698e110420a45c4c6498d","target":"record","created_at":"2026-07-05T10:28:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"588da5d21f29b84da7cb8b0d4459629e1495d7a5ef4418e6bd5e575d73e3d785","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-02-16T09:27:44Z","title_canon_sha256":"248764b954f052be09c96b03f321031f0c28c335ced5155cef476a9a27e50fcf"},"schema_version":"1.0","source":{"id":"2502.11054","kind":"arxiv","version":4}},"canonical_sha256":"9024511e9945adfb1b5b4f4e88d6b8a83270df6f706e3e997954bca440fe445e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9024511e9945adfb1b5b4f4e88d6b8a83270df6f706e3e997954bca440fe445e","first_computed_at":"2026-07-05T10:28:36.071083Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:28:36.071083Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8Xt4QyGmlxMw1Wb97P1P5lqEVW8WhdrMZn/kkOUvTQA9xDEWl4u4dtXk6PCkKgYq6BnXTBNHkpxbKpL4PoQVCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:28:36.072126Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.11054","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:65e60a35863b028c9a7f6d60f8bbc14270fc60d9cc6698e110420a45c4c6498d","sha256:c4bb6f30f672e92303a6fd97913bf4fb86a85ab19c74adc6bf65f24d9edde028"],"state_sha256":"6665a430aa56205aca784aaf38e31c6b9e270675f2e1a29eb0063e4e5af50350"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wjOCzyHYLcJ7Z4yB+HmWuDSfzU9gBFIPZdZv7sNS6+bQBwhb6mIjBmCsA0hhDSqEy5ZvFZfLi17rq8UTnmmTAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T14:52:26.604501Z","bundle_sha256":"f9d8f3006c2157a9ce60532d95ef568a98425565246e1a591b35d2904956764a"}}