{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:TXYMQZHBPPALQ7Q7W26OPOT2X6","short_pith_number":"pith:TXYMQZHB","canonical_record":{"source":{"id":"2506.22557","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-27T18:15:56Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"41338a6f8a6030d15e04c76f8373b8338446201b9eaca9b02ea686549b0c8b0d","abstract_canon_sha256":"c42ae60cbf35a38678b997a375147462f02504bfd2fb51104f7f518459860fc6"},"schema_version":"1.0"},"canonical_sha256":"9df0c864e17bc0b87e1fb6bce7ba7abf86bc3e3e2fa441451b58182f7e16075c","source":{"kind":"arxiv","id":"2506.22557","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.22557","created_at":"2026-07-05T11:53:04Z"},{"alias_kind":"arxiv_version","alias_value":"2506.22557v2","created_at":"2026-07-05T11:53:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.22557","created_at":"2026-07-05T11:53:04Z"},{"alias_kind":"pith_short_12","alias_value":"TXYMQZHBPPAL","created_at":"2026-07-05T11:53:04Z"},{"alias_kind":"pith_short_16","alias_value":"TXYMQZHBPPALQ7Q7","created_at":"2026-07-05T11:53:04Z"},{"alias_kind":"pith_short_8","alias_value":"TXYMQZHB","created_at":"2026-07-05T11:53:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:TXYMQZHBPPALQ7Q7W26OPOT2X6","target":"record","payload":{"canonical_record":{"source":{"id":"2506.22557","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-27T18:15:56Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"41338a6f8a6030d15e04c76f8373b8338446201b9eaca9b02ea686549b0c8b0d","abstract_canon_sha256":"c42ae60cbf35a38678b997a375147462f02504bfd2fb51104f7f518459860fc6"},"schema_version":"1.0"},"canonical_sha256":"9df0c864e17bc0b87e1fb6bce7ba7abf86bc3e3e2fa441451b58182f7e16075c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:53:04.813249Z","signature_b64":"YSvHv/UIVLKqcr5947Fo+qgLXoe+rYIkAkFVynYGZy278J7MTuth8iTKgUveyADse+fzMuBrQgCHtkp7dC2bDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9df0c864e17bc0b87e1fb6bce7ba7abf86bc3e3e2fa441451b58182f7e16075c","last_reissued_at":"2026-07-05T11:53:04.812804Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:53:04.812804Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.22557","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:53:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s4h2y0T/5ZlFrHXG+qIjFppKh0uoquKCKroj8NHZ9S19/Xiw6DQpIoSvgvH1eSco/SSBPxxq8HslKH8EOdAmBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T07:58:39.416729Z"},"content_sha256":"3170823b9511c77f5b98f007aeaa9c2636ce4cd057a6c8d1e9b073bead1cadb5","schema_version":"1.0","event_id":"sha256:3170823b9511c77f5b98f007aeaa9c2636ce4cd057a6c8d1e9b073bead1cadb5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:TXYMQZHBPPALQ7Q7W26OPOT2X6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MetaCipher: A Time-Persistent and Universal Multi-Agent Framework for Cipher-Based Jailbreak Attacks for LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Abdul Basit, Boyuan Chen, Minghao Shao, Muhammad Shafique, Siddharth Garg","submitted_at":"2025-06-27T18:15:56Z","abstract_excerpt":"As large language models (LLMs) grow more capable, they face growing vulnerability to sophisticated jailbreak attacks. While developers invest heavily in alignment finetuning and safety guardrails, researchers continue publishing novel attacks, driving progress through adversarial iteration. This dynamic mirrors a strategic game of continual evolution. However, two major challenges hinder jailbreak development: the high cost of querying top-tier LLMs and the short lifespan of effective attacks due to frequent safety updates. These factors limit cost-efficiency and practical impact of research "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.22557","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.22557/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:53:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q4jYGUEJVOpvzwziS6TafUyvZNI3h1Uneso/+01Qu6qHZmviEdRgENcSVhk5l3xDkVsnmRnDyVYRlDHaYrYCBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T07:58:39.417666Z"},"content_sha256":"2315e2eff3763414e4ab107165783fe64c204bf7bd5e7b8fec0a1aae37e950a6","schema_version":"1.0","event_id":"sha256:2315e2eff3763414e4ab107165783fe64c204bf7bd5e7b8fec0a1aae37e950a6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TXYMQZHBPPALQ7Q7W26OPOT2X6/bundle.json","state_url":"https://pith.science/pith/TXYMQZHBPPALQ7Q7W26OPOT2X6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TXYMQZHBPPALQ7Q7W26OPOT2X6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T07:58:39Z","links":{"resolver":"https://pith.science/pith/TXYMQZHBPPALQ7Q7W26OPOT2X6","bundle":"https://pith.science/pith/TXYMQZHBPPALQ7Q7W26OPOT2X6/bundle.json","state":"https://pith.science/pith/TXYMQZHBPPALQ7Q7W26OPOT2X6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TXYMQZHBPPALQ7Q7W26OPOT2X6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:TXYMQZHBPPALQ7Q7W26OPOT2X6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c42ae60cbf35a38678b997a375147462f02504bfd2fb51104f7f518459860fc6","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-27T18:15:56Z","title_canon_sha256":"41338a6f8a6030d15e04c76f8373b8338446201b9eaca9b02ea686549b0c8b0d"},"schema_version":"1.0","source":{"id":"2506.22557","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.22557","created_at":"2026-07-05T11:53:04Z"},{"alias_kind":"arxiv_version","alias_value":"2506.22557v2","created_at":"2026-07-05T11:53:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.22557","created_at":"2026-07-05T11:53:04Z"},{"alias_kind":"pith_short_12","alias_value":"TXYMQZHBPPAL","created_at":"2026-07-05T11:53:04Z"},{"alias_kind":"pith_short_16","alias_value":"TXYMQZHBPPALQ7Q7","created_at":"2026-07-05T11:53:04Z"},{"alias_kind":"pith_short_8","alias_value":"TXYMQZHB","created_at":"2026-07-05T11:53:04Z"}],"graph_snapshots":[{"event_id":"sha256:2315e2eff3763414e4ab107165783fe64c204bf7bd5e7b8fec0a1aae37e950a6","target":"graph","created_at":"2026-07-05T11:53:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.22557/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As large language models (LLMs) grow more capable, they face growing vulnerability to sophisticated jailbreak attacks. While developers invest heavily in alignment finetuning and safety guardrails, researchers continue publishing novel attacks, driving progress through adversarial iteration. This dynamic mirrors a strategic game of continual evolution. However, two major challenges hinder jailbreak development: the high cost of querying top-tier LLMs and the short lifespan of effective attacks due to frequent safety updates. These factors limit cost-efficiency and practical impact of research ","authors_text":"Abdul Basit, Boyuan Chen, Minghao Shao, Muhammad Shafique, Siddharth Garg","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-27T18:15:56Z","title":"MetaCipher: A Time-Persistent and Universal Multi-Agent Framework for Cipher-Based Jailbreak Attacks for LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.22557","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3170823b9511c77f5b98f007aeaa9c2636ce4cd057a6c8d1e9b073bead1cadb5","target":"record","created_at":"2026-07-05T11:53:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c42ae60cbf35a38678b997a375147462f02504bfd2fb51104f7f518459860fc6","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-27T18:15:56Z","title_canon_sha256":"41338a6f8a6030d15e04c76f8373b8338446201b9eaca9b02ea686549b0c8b0d"},"schema_version":"1.0","source":{"id":"2506.22557","kind":"arxiv","version":2}},"canonical_sha256":"9df0c864e17bc0b87e1fb6bce7ba7abf86bc3e3e2fa441451b58182f7e16075c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9df0c864e17bc0b87e1fb6bce7ba7abf86bc3e3e2fa441451b58182f7e16075c","first_computed_at":"2026-07-05T11:53:04.812804Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:53:04.812804Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YSvHv/UIVLKqcr5947Fo+qgLXoe+rYIkAkFVynYGZy278J7MTuth8iTKgUveyADse+fzMuBrQgCHtkp7dC2bDg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:53:04.813249Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.22557","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3170823b9511c77f5b98f007aeaa9c2636ce4cd057a6c8d1e9b073bead1cadb5","sha256:2315e2eff3763414e4ab107165783fe64c204bf7bd5e7b8fec0a1aae37e950a6"],"state_sha256":"5dbdc87723457a4e175ab982378e1725e96e1998797bdcaf230913fb8bd322ea"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1amw8CIxPw9mrcRQcn9ymyjvRUiv5AI8MHov2DbdyVKgy0urUqojYCoc9vRX6QCa5IjIBQbbmfnXseE2tyQ8BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T07:58:39.422929Z","bundle_sha256":"7953fb1810e8925838a292c1b8a376185191ee2c56b8041ac18ff2098119fec7"}}