{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:SMY3HWJFOGJC6PW4GK5NOMVUZY","short_pith_number":"pith:SMY3HWJF","canonical_record":{"source":{"id":"2405.20413","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-30T18:38:36Z","cross_cats_sorted":["cs.CL","cs.CV","cs.LG"],"title_canon_sha256":"3dc9aecfb39ccfd0e1ffb583ca399635413bd1d8e8317819f650e33f2f4bb4d5","abstract_canon_sha256":"33a343a80e84f34d46c42739b9756acbc6578c214aa6562c3f2e851a9c4df2dd"},"schema_version":"1.0"},"canonical_sha256":"9331b3d92571922f3edc32bad732b4ce292f59853321d1289d93212892918dde","source":{"kind":"arxiv","id":"2405.20413","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.20413","created_at":"2026-07-05T08:25:37Z"},{"alias_kind":"arxiv_version","alias_value":"2405.20413v1","created_at":"2026-07-05T08:25:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.20413","created_at":"2026-07-05T08:25:37Z"},{"alias_kind":"pith_short_12","alias_value":"SMY3HWJFOGJC","created_at":"2026-07-05T08:25:37Z"},{"alias_kind":"pith_short_16","alias_value":"SMY3HWJFOGJC6PW4","created_at":"2026-07-05T08:25:37Z"},{"alias_kind":"pith_short_8","alias_value":"SMY3HWJF","created_at":"2026-07-05T08:25:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:SMY3HWJFOGJC6PW4GK5NOMVUZY","target":"record","payload":{"canonical_record":{"source":{"id":"2405.20413","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-30T18:38:36Z","cross_cats_sorted":["cs.CL","cs.CV","cs.LG"],"title_canon_sha256":"3dc9aecfb39ccfd0e1ffb583ca399635413bd1d8e8317819f650e33f2f4bb4d5","abstract_canon_sha256":"33a343a80e84f34d46c42739b9756acbc6578c214aa6562c3f2e851a9c4df2dd"},"schema_version":"1.0"},"canonical_sha256":"9331b3d92571922f3edc32bad732b4ce292f59853321d1289d93212892918dde","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:25:37.064683Z","signature_b64":"6um7eGibWn3okb1PDmR7niwn0NswgVClHCYEtnYSwbDKkdvzimJGrEAVAAOu4AjEneSxTdXShwCgaEvasCzIAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9331b3d92571922f3edc32bad732b4ce292f59853321d1289d93212892918dde","last_reissued_at":"2026-07-05T08:25:37.064222Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:25:37.064222Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.20413","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:25:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TD58+pISKR/2ellO4Df1GFyfJDu6E22IhPzLFoV5LiSy6+bil0aw0+gURgrnHA7O7YEljoxgNApGi9G2c8GHCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T11:38:59.273348Z"},"content_sha256":"ea55c2c852524faf7747837b6fe7c28643558af6b7840e524612f11ee459ab06","schema_version":"1.0","event_id":"sha256:ea55c2c852524faf7747837b6fe7c28643558af6b7840e524612f11ee459ab06"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:SMY3HWJFOGJC6PW4GK5NOMVUZY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Jailbreaking Large Language Models Against Moderation Guardrails via Cipher Characters","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL","cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Andy Zhou, Haibo Jin, Haohan Wang, Joe D. Menke","submitted_at":"2024-05-30T18:38:36Z","abstract_excerpt":"Large Language Models (LLMs) are typically harmless but remain vulnerable to carefully crafted prompts known as ``jailbreaks'', which can bypass protective measures and induce harmful behavior. Recent advancements in LLMs have incorporated moderation guardrails that can filter outputs, which trigger processing errors for certain malicious questions. Existing red-teaming benchmarks often neglect to include questions that trigger moderation guardrails, making it difficult to evaluate jailbreak effectiveness. To address this issue, we introduce JAMBench, a harmful behavior benchmark designed to t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.20413","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.20413/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:25:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yG7KabHOAD3k65/QgWhxXdufztchWBXDw4S857cekOWKeDlmAcKvpLtOAX5dDaVUNY+7EJ/0fhP2xpGFhyCoBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T11:38:59.273927Z"},"content_sha256":"34767d69a0c1ef7f184e3ed8cd2586175210e34d8f801dd296185e70e71c71ac","schema_version":"1.0","event_id":"sha256:34767d69a0c1ef7f184e3ed8cd2586175210e34d8f801dd296185e70e71c71ac"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SMY3HWJFOGJC6PW4GK5NOMVUZY/bundle.json","state_url":"https://pith.science/pith/SMY3HWJFOGJC6PW4GK5NOMVUZY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SMY3HWJFOGJC6PW4GK5NOMVUZY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T11:38:59Z","links":{"resolver":"https://pith.science/pith/SMY3HWJFOGJC6PW4GK5NOMVUZY","bundle":"https://pith.science/pith/SMY3HWJFOGJC6PW4GK5NOMVUZY/bundle.json","state":"https://pith.science/pith/SMY3HWJFOGJC6PW4GK5NOMVUZY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SMY3HWJFOGJC6PW4GK5NOMVUZY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:SMY3HWJFOGJC6PW4GK5NOMVUZY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"33a343a80e84f34d46c42739b9756acbc6578c214aa6562c3f2e851a9c4df2dd","cross_cats_sorted":["cs.CL","cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-30T18:38:36Z","title_canon_sha256":"3dc9aecfb39ccfd0e1ffb583ca399635413bd1d8e8317819f650e33f2f4bb4d5"},"schema_version":"1.0","source":{"id":"2405.20413","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.20413","created_at":"2026-07-05T08:25:37Z"},{"alias_kind":"arxiv_version","alias_value":"2405.20413v1","created_at":"2026-07-05T08:25:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.20413","created_at":"2026-07-05T08:25:37Z"},{"alias_kind":"pith_short_12","alias_value":"SMY3HWJFOGJC","created_at":"2026-07-05T08:25:37Z"},{"alias_kind":"pith_short_16","alias_value":"SMY3HWJFOGJC6PW4","created_at":"2026-07-05T08:25:37Z"},{"alias_kind":"pith_short_8","alias_value":"SMY3HWJF","created_at":"2026-07-05T08:25:37Z"}],"graph_snapshots":[{"event_id":"sha256:34767d69a0c1ef7f184e3ed8cd2586175210e34d8f801dd296185e70e71c71ac","target":"graph","created_at":"2026-07-05T08:25:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.20413/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) are typically harmless but remain vulnerable to carefully crafted prompts known as ``jailbreaks'', which can bypass protective measures and induce harmful behavior. Recent advancements in LLMs have incorporated moderation guardrails that can filter outputs, which trigger processing errors for certain malicious questions. Existing red-teaming benchmarks often neglect to include questions that trigger moderation guardrails, making it difficult to evaluate jailbreak effectiveness. To address this issue, we introduce JAMBench, a harmful behavior benchmark designed to t","authors_text":"Andy Zhou, Haibo Jin, Haohan Wang, Joe D. Menke","cross_cats":["cs.CL","cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-30T18:38:36Z","title":"Jailbreaking Large Language Models Against Moderation Guardrails via Cipher Characters"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.20413","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ea55c2c852524faf7747837b6fe7c28643558af6b7840e524612f11ee459ab06","target":"record","created_at":"2026-07-05T08:25:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"33a343a80e84f34d46c42739b9756acbc6578c214aa6562c3f2e851a9c4df2dd","cross_cats_sorted":["cs.CL","cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-30T18:38:36Z","title_canon_sha256":"3dc9aecfb39ccfd0e1ffb583ca399635413bd1d8e8317819f650e33f2f4bb4d5"},"schema_version":"1.0","source":{"id":"2405.20413","kind":"arxiv","version":1}},"canonical_sha256":"9331b3d92571922f3edc32bad732b4ce292f59853321d1289d93212892918dde","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9331b3d92571922f3edc32bad732b4ce292f59853321d1289d93212892918dde","first_computed_at":"2026-07-05T08:25:37.064222Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:25:37.064222Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6um7eGibWn3okb1PDmR7niwn0NswgVClHCYEtnYSwbDKkdvzimJGrEAVAAOu4AjEneSxTdXShwCgaEvasCzIAA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:25:37.064683Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.20413","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ea55c2c852524faf7747837b6fe7c28643558af6b7840e524612f11ee459ab06","sha256:34767d69a0c1ef7f184e3ed8cd2586175210e34d8f801dd296185e70e71c71ac"],"state_sha256":"2b69c155cadb24fc24dbc098e0e71db0faba3460f0f1b82ffe57de5040bf2a38"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"peWf9+G+egplqnXui49RQXHlqDE9ppjq/BklFf6TLB/ZPZ7t4CeXY4GG154Lgki8yDph8mE0L1eqEfi3kxEcBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T11:38:59.277937Z","bundle_sha256":"8974e03622d57e2132940b11a0414df2aa0693fa889216e3cb68ea96be3a0427"}}