{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:TQUFZOFVPWOZDSW7V23T5LN5C3","short_pith_number":"pith:TQUFZOFV","canonical_record":{"source":{"id":"2408.04686","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-08T09:18:47Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"0fb34f4d6aa86a164e9bca9b3b6587625589420400eff2ae70aa6c13d01ada2b","abstract_canon_sha256":"74522533b3b9e1e64ae3e947f5f86b09147f5aee4ee7f7b2f4e95370317fdc53"},"schema_version":"1.0"},"canonical_sha256":"9c285cb8b57d9d91cadfaeb73eadbd16caea4569fa64901bbddc5a127c534172","source":{"kind":"arxiv","id":"2408.04686","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.04686","created_at":"2026-07-05T08:53:42Z"},{"alias_kind":"arxiv_version","alias_value":"2408.04686v1","created_at":"2026-07-05T08:53:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.04686","created_at":"2026-07-05T08:53:42Z"},{"alias_kind":"pith_short_12","alias_value":"TQUFZOFVPWOZ","created_at":"2026-07-05T08:53:42Z"},{"alias_kind":"pith_short_16","alias_value":"TQUFZOFVPWOZDSW7","created_at":"2026-07-05T08:53:42Z"},{"alias_kind":"pith_short_8","alias_value":"TQUFZOFV","created_at":"2026-07-05T08:53:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:TQUFZOFVPWOZDSW7V23T5LN5C3","target":"record","payload":{"canonical_record":{"source":{"id":"2408.04686","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-08T09:18:47Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"0fb34f4d6aa86a164e9bca9b3b6587625589420400eff2ae70aa6c13d01ada2b","abstract_canon_sha256":"74522533b3b9e1e64ae3e947f5f86b09147f5aee4ee7f7b2f4e95370317fdc53"},"schema_version":"1.0"},"canonical_sha256":"9c285cb8b57d9d91cadfaeb73eadbd16caea4569fa64901bbddc5a127c534172","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:53:42.422982Z","signature_b64":"8Ch3s7OQeUSoHMvtAM8+2122/pvtiYNf3qPQi33ggFABDYY+9X96KmWlYWUdjEgGtCIHwrZId8mM5UgV3224AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9c285cb8b57d9d91cadfaeb73eadbd16caea4569fa64901bbddc5a127c534172","last_reissued_at":"2026-07-05T08:53:42.422511Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:53:42.422511Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.04686","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:53:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MeZzsZK8cEcZzenw/CsWmVNAhC+UmrRXdwYI5IlJiHCZsYrVD2qH1/6Q7v3lnWJSzETHs5LPHEB0aDY2naV2Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T22:50:24.452514Z"},"content_sha256":"d2ee8a0ec80d99b25176e9b90b4350401cbdb3296eef5df069fa028cafd95cbe","schema_version":"1.0","event_id":"sha256:d2ee8a0ec80d99b25176e9b90b4350401cbdb3296eef5df069fa028cafd95cbe"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:TQUFZOFVPWOZDSW7V23T5LN5C3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Deyue Zhang, Dongdong Yang, Hui Li, Quanchen Zou, Xiongtao Sun","submitted_at":"2024-08-08T09:18:47Z","abstract_excerpt":"Large language models (LLMs) have significantly enhanced the performance of numerous applications, from intelligent conversations to text generation. However, their inherent security vulnerabilities have become an increasingly significant challenge, especially with respect to jailbreak attacks. Attackers can circumvent the security mechanisms of these LLMs, breaching security constraints and causing harmful outputs. Focusing on multi-turn semantic jailbreak attacks, we observe that existing methods lack specific considerations for the role of multiturn dialogues in attack strategies, leading t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.04686","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.04686/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:53:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qv3XUN5vmxZGUWZUJP+mbVwAY6Rg0uezGRVDBTf3TmQkSxHvJVnHD8A8JTLDownrZTojlD0Qmhoiw2upD8yPDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T22:50:24.453019Z"},"content_sha256":"993c74c91539648a10562a1ada5415980574753d771f11f9f9e23db6dc30fc7b","schema_version":"1.0","event_id":"sha256:993c74c91539648a10562a1ada5415980574753d771f11f9f9e23db6dc30fc7b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TQUFZOFVPWOZDSW7V23T5LN5C3/bundle.json","state_url":"https://pith.science/pith/TQUFZOFVPWOZDSW7V23T5LN5C3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TQUFZOFVPWOZDSW7V23T5LN5C3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T22:50:24Z","links":{"resolver":"https://pith.science/pith/TQUFZOFVPWOZDSW7V23T5LN5C3","bundle":"https://pith.science/pith/TQUFZOFVPWOZDSW7V23T5LN5C3/bundle.json","state":"https://pith.science/pith/TQUFZOFVPWOZDSW7V23T5LN5C3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TQUFZOFVPWOZDSW7V23T5LN5C3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:TQUFZOFVPWOZDSW7V23T5LN5C3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"74522533b3b9e1e64ae3e947f5f86b09147f5aee4ee7f7b2f4e95370317fdc53","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-08T09:18:47Z","title_canon_sha256":"0fb34f4d6aa86a164e9bca9b3b6587625589420400eff2ae70aa6c13d01ada2b"},"schema_version":"1.0","source":{"id":"2408.04686","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.04686","created_at":"2026-07-05T08:53:42Z"},{"alias_kind":"arxiv_version","alias_value":"2408.04686v1","created_at":"2026-07-05T08:53:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.04686","created_at":"2026-07-05T08:53:42Z"},{"alias_kind":"pith_short_12","alias_value":"TQUFZOFVPWOZ","created_at":"2026-07-05T08:53:42Z"},{"alias_kind":"pith_short_16","alias_value":"TQUFZOFVPWOZDSW7","created_at":"2026-07-05T08:53:42Z"},{"alias_kind":"pith_short_8","alias_value":"TQUFZOFV","created_at":"2026-07-05T08:53:42Z"}],"graph_snapshots":[{"event_id":"sha256:993c74c91539648a10562a1ada5415980574753d771f11f9f9e23db6dc30fc7b","target":"graph","created_at":"2026-07-05T08:53:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.04686/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have significantly enhanced the performance of numerous applications, from intelligent conversations to text generation. However, their inherent security vulnerabilities have become an increasingly significant challenge, especially with respect to jailbreak attacks. Attackers can circumvent the security mechanisms of these LLMs, breaching security constraints and causing harmful outputs. Focusing on multi-turn semantic jailbreak attacks, we observe that existing methods lack specific considerations for the role of multiturn dialogues in attack strategies, leading t","authors_text":"Deyue Zhang, Dongdong Yang, Hui Li, Quanchen Zou, Xiongtao Sun","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-08T09:18:47Z","title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.04686","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d2ee8a0ec80d99b25176e9b90b4350401cbdb3296eef5df069fa028cafd95cbe","target":"record","created_at":"2026-07-05T08:53:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"74522533b3b9e1e64ae3e947f5f86b09147f5aee4ee7f7b2f4e95370317fdc53","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-08T09:18:47Z","title_canon_sha256":"0fb34f4d6aa86a164e9bca9b3b6587625589420400eff2ae70aa6c13d01ada2b"},"schema_version":"1.0","source":{"id":"2408.04686","kind":"arxiv","version":1}},"canonical_sha256":"9c285cb8b57d9d91cadfaeb73eadbd16caea4569fa64901bbddc5a127c534172","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9c285cb8b57d9d91cadfaeb73eadbd16caea4569fa64901bbddc5a127c534172","first_computed_at":"2026-07-05T08:53:42.422511Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:53:42.422511Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8Ch3s7OQeUSoHMvtAM8+2122/pvtiYNf3qPQi33ggFABDYY+9X96KmWlYWUdjEgGtCIHwrZId8mM5UgV3224AQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:53:42.422982Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.04686","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d2ee8a0ec80d99b25176e9b90b4350401cbdb3296eef5df069fa028cafd95cbe","sha256:993c74c91539648a10562a1ada5415980574753d771f11f9f9e23db6dc30fc7b"],"state_sha256":"db715ecf76350df04e499972a496d8a85714a3f130e96343ed154f07f93cc52c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"k+8+aaV330KHuDrGUFYMLwdXtdMwUtoXZjAME3IH2Qy4oKdvtJVIczgfpDx87ibhGPr9Emon30WNYjO+ZH2oAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T22:50:24.457221Z","bundle_sha256":"4da750c22b7e4b8f68a3cb1be030d34c007845c6da77e39573305d72d16931c3"}}