{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:SLXHFLSFYELQ24GGYS72SZTLSB","short_pith_number":"pith:SLXHFLSF","canonical_record":{"source":{"id":"2402.12329","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-19T18:01:36Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"bf1d2de0414c9d254bc5d9076fe1109921d558300100d066ada84fc5479dce20","abstract_canon_sha256":"359c7a34e98323a08b95e4d0ba2904b642dd861c461dd73f3ed602263cf2badf"},"schema_version":"1.0"},"canonical_sha256":"92ee72ae45c1170d70c6c4bfa9666b906ead48dc75a48ca406cd6ea3816e969f","source":{"kind":"arxiv","id":"2402.12329","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.12329","created_at":"2026-07-05T09:45:44Z"},{"alias_kind":"arxiv_version","alias_value":"2402.12329v2","created_at":"2026-07-05T09:45:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.12329","created_at":"2026-07-05T09:45:44Z"},{"alias_kind":"pith_short_12","alias_value":"SLXHFLSFYELQ","created_at":"2026-07-05T09:45:44Z"},{"alias_kind":"pith_short_16","alias_value":"SLXHFLSFYELQ24GG","created_at":"2026-07-05T09:45:44Z"},{"alias_kind":"pith_short_8","alias_value":"SLXHFLSF","created_at":"2026-07-05T09:45:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:SLXHFLSFYELQ24GGYS72SZTLSB","target":"record","payload":{"canonical_record":{"source":{"id":"2402.12329","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-19T18:01:36Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"bf1d2de0414c9d254bc5d9076fe1109921d558300100d066ada84fc5479dce20","abstract_canon_sha256":"359c7a34e98323a08b95e4d0ba2904b642dd861c461dd73f3ed602263cf2badf"},"schema_version":"1.0"},"canonical_sha256":"92ee72ae45c1170d70c6c4bfa9666b906ead48dc75a48ca406cd6ea3816e969f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:45:44.678687Z","signature_b64":"xEcLpEI9cpXM0XW1IDLqWzF3HBHnPzyamD2SCum7OrQ+j5vwuxcZhr6xKrgMBbrG3BXEcutgtHjF9Z5h61vICA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"92ee72ae45c1170d70c6c4bfa9666b906ead48dc75a48ca406cd6ea3816e969f","last_reissued_at":"2026-07-05T09:45:44.678094Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:45:44.678094Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.12329","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:45:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dtnoAOCWGOIL8a9CKY1oCLt1dLbKAd8iAtmJMjtKoHhkFYp23IFtq9u9bcte7j78RkHIozBTg/UUFOLM3hq3Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T06:03:41.891644Z"},"content_sha256":"9e3b44a9ce6bd43c87a62f59cde6c4baca644b93d59ad48061ae94889c873e81","schema_version":"1.0","event_id":"sha256:9e3b44a9ce6bd43c87a62f59cde6c4baca644b93d59ad48061ae94889c873e81"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:SLXHFLSFYELQ24GGYS72SZTLSB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Query-Based Adversarial Prompt Generation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CL","authors_text":"Ema Borevkovic, Florian Tram\\`er, Jonathan Hayase, Milad Nasr, Nicholas Carlini","submitted_at":"2024-02-19T18:01:36Z","abstract_excerpt":"Recent work has shown it is possible to construct adversarial examples that cause an aligned language model to emit harmful strings or perform harmful behavior. Existing attacks work either in the white-box setting (with full access to the model weights), or through transferability: the phenomenon that adversarial examples crafted on one model often remain effective on other models. We improve on prior work with a query-based attack that leverages API access to a remote language model to construct adversarial examples that cause the model to emit harmful strings with (much) higher probability "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.12329","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.12329/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:45:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QxImlc7Osq+k4jZe4PL532cB+sQoJK3RouieNknsh7lhyTqapdjSZXCOjO5J1gCNbg0+AmIBjVfLC4ZCYwOYBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T06:03:41.892304Z"},"content_sha256":"820cbf78c9b10a444cc78d92ffae5befc6f220911b0509b2d1a13737513c371e","schema_version":"1.0","event_id":"sha256:820cbf78c9b10a444cc78d92ffae5befc6f220911b0509b2d1a13737513c371e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SLXHFLSFYELQ24GGYS72SZTLSB/bundle.json","state_url":"https://pith.science/pith/SLXHFLSFYELQ24GGYS72SZTLSB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SLXHFLSFYELQ24GGYS72SZTLSB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T06:03:41Z","links":{"resolver":"https://pith.science/pith/SLXHFLSFYELQ24GGYS72SZTLSB","bundle":"https://pith.science/pith/SLXHFLSFYELQ24GGYS72SZTLSB/bundle.json","state":"https://pith.science/pith/SLXHFLSFYELQ24GGYS72SZTLSB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SLXHFLSFYELQ24GGYS72SZTLSB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:SLXHFLSFYELQ24GGYS72SZTLSB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"359c7a34e98323a08b95e4d0ba2904b642dd861c461dd73f3ed602263cf2badf","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-19T18:01:36Z","title_canon_sha256":"bf1d2de0414c9d254bc5d9076fe1109921d558300100d066ada84fc5479dce20"},"schema_version":"1.0","source":{"id":"2402.12329","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.12329","created_at":"2026-07-05T09:45:44Z"},{"alias_kind":"arxiv_version","alias_value":"2402.12329v2","created_at":"2026-07-05T09:45:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.12329","created_at":"2026-07-05T09:45:44Z"},{"alias_kind":"pith_short_12","alias_value":"SLXHFLSFYELQ","created_at":"2026-07-05T09:45:44Z"},{"alias_kind":"pith_short_16","alias_value":"SLXHFLSFYELQ24GG","created_at":"2026-07-05T09:45:44Z"},{"alias_kind":"pith_short_8","alias_value":"SLXHFLSF","created_at":"2026-07-05T09:45:44Z"}],"graph_snapshots":[{"event_id":"sha256:820cbf78c9b10a444cc78d92ffae5befc6f220911b0509b2d1a13737513c371e","target":"graph","created_at":"2026-07-05T09:45:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.12329/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent work has shown it is possible to construct adversarial examples that cause an aligned language model to emit harmful strings or perform harmful behavior. Existing attacks work either in the white-box setting (with full access to the model weights), or through transferability: the phenomenon that adversarial examples crafted on one model often remain effective on other models. We improve on prior work with a query-based attack that leverages API access to a remote language model to construct adversarial examples that cause the model to emit harmful strings with (much) higher probability ","authors_text":"Ema Borevkovic, Florian Tram\\`er, Jonathan Hayase, Milad Nasr, Nicholas Carlini","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-19T18:01:36Z","title":"Query-Based Adversarial Prompt Generation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.12329","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9e3b44a9ce6bd43c87a62f59cde6c4baca644b93d59ad48061ae94889c873e81","target":"record","created_at":"2026-07-05T09:45:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"359c7a34e98323a08b95e4d0ba2904b642dd861c461dd73f3ed602263cf2badf","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-02-19T18:01:36Z","title_canon_sha256":"bf1d2de0414c9d254bc5d9076fe1109921d558300100d066ada84fc5479dce20"},"schema_version":"1.0","source":{"id":"2402.12329","kind":"arxiv","version":2}},"canonical_sha256":"92ee72ae45c1170d70c6c4bfa9666b906ead48dc75a48ca406cd6ea3816e969f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"92ee72ae45c1170d70c6c4bfa9666b906ead48dc75a48ca406cd6ea3816e969f","first_computed_at":"2026-07-05T09:45:44.678094Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:45:44.678094Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xEcLpEI9cpXM0XW1IDLqWzF3HBHnPzyamD2SCum7OrQ+j5vwuxcZhr6xKrgMBbrG3BXEcutgtHjF9Z5h61vICA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:45:44.678687Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.12329","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9e3b44a9ce6bd43c87a62f59cde6c4baca644b93d59ad48061ae94889c873e81","sha256:820cbf78c9b10a444cc78d92ffae5befc6f220911b0509b2d1a13737513c371e"],"state_sha256":"e4b18f87a34dc4f983a60e914a9fee578a1b5da17bcf990d5d24fba2095d3790"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8pjXQfBi2XZ893ZMNnbqD35MVUbIgXrpkY5w5CMoONhWb9QBJXDGASyfOwyPtHZoDp4EeWmGZLGD+kalr6a5DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T06:03:41.920768Z","bundle_sha256":"b40725763381dd953a302f44e99d3358a09cfa35e5a63b93d164f9a39092c050"}}