{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:SDIHH7FHAJRDCU32ESJ2IXG6UK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3fefa0619f160dd0971674e97cf930ceda666e29c46dfc7848ca4902f8c1bf5d","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-08T07:45:48Z","title_canon_sha256":"166ab0246fa49a0b2d3039645f8fed1c42136e1b94b47d27b6391cb8cb183310"},"schema_version":"1.0","source":{"id":"2506.07031","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.07031","created_at":"2026-06-26T01:15:44Z"},{"alias_kind":"arxiv_version","alias_value":"2506.07031v5","created_at":"2026-06-26T01:15:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.07031","created_at":"2026-06-26T01:15:44Z"},{"alias_kind":"pith_short_12","alias_value":"SDIHH7FHAJRD","created_at":"2026-06-26T01:15:44Z"},{"alias_kind":"pith_short_16","alias_value":"SDIHH7FHAJRDCU32","created_at":"2026-06-26T01:15:44Z"},{"alias_kind":"pith_short_8","alias_value":"SDIHH7FH","created_at":"2026-06-26T01:15:44Z"}],"graph_snapshots":[{"event_id":"sha256:1cd32bde6b16bfb280cd257b678d57e6e900842ef19da02cd9cb62e4d4404e6f","target":"graph","created_at":"2026-06-26T01:15:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.07031/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Emerging Large Reasoning Models (LRMs) consistently excel in mathematical and reasoning tasks, showcasing remarkable capabilities. However, the enhancement of reasoning abilities and the exposure of internal reasoning processes introduce new safety vulnerabilities. A critical question arises: when reasoning becomes intertwined with harmfulness, will LRMs become more vulnerable to jailbreaks in reasoning mode? To investigate this, we introduce HauntAttack, a novel and general-purpose black-box adversarial attack framework that systematically embeds harmful instructions into reasoning questions.","authors_text":"Heming Xia, Jingyuan Ma, Junfeng Liu, Lei Sha, Rui Li, Zheng Li, Zhifang Sui","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.07031","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:975c9d20e7789c66b716030c1cb2a8b5b74d5cd821237d0bdd66ee812e52a19f","target":"record","created_at":"2026-06-26T01:15:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3fefa0619f160dd0971674e97cf930ceda666e29c46dfc7848ca4902f8c1bf5d","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-08T07:45:48Z","title_canon_sha256":"166ab0246fa49a0b2d3039645f8fed1c42136e1b94b47d27b6391cb8cb183310"},"schema_version":"1.0","source":{"id":"2506.07031","kind":"arxiv","version":5}},"canonical_sha256":"90d073fca7026231537a2493a45cdea2a9403743196ef9fcca7101e2f44e33fc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"90d073fca7026231537a2493a45cdea2a9403743196ef9fcca7101e2f44e33fc","first_computed_at":"2026-06-26T01:15:44.457227Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-26T01:15:44.457227Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KkstU/jyLjNu1IDwABq9mIRKOQikGNuog621TzoNXa59OUT3metIY9Si9FzdjcRmZ8yoVaWr4EAvPgPuUcxcBA==","signature_status":"signed_v1","signed_at":"2026-06-26T01:15:44.457741Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.07031","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:975c9d20e7789c66b716030c1cb2a8b5b74d5cd821237d0bdd66ee812e52a19f","sha256:1cd32bde6b16bfb280cd257b678d57e6e900842ef19da02cd9cb62e4d4404e6f"],"state_sha256":"e893f2976d80b6c3e2c57a0074ead7eedf207a9315570456beffe703c9831f2d"}