{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:U3HKKR6CCXWTFQFHBVPR7DV6YK","short_pith_number":"pith:U3HKKR6C","canonical_record":{"source":{"id":"2406.03805","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-06T07:24:41Z","cross_cats_sorted":[],"title_canon_sha256":"d007146758cc948aecbe4679bba995c00b70e11739b7dc42e8f7c3cef883d6eb","abstract_canon_sha256":"d00cd907b3ec98d092415c46c82386957f2a92cad717c7bffbb9013bce07cf16"},"schema_version":"1.0"},"canonical_sha256":"a6cea547c215ed32c0a70d5f1f8ebec297b0badbb5a292824f7b33f3e096d8b4","source":{"kind":"arxiv","id":"2406.03805","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.03805","created_at":"2026-07-05T08:28:16Z"},{"alias_kind":"arxiv_version","alias_value":"2406.03805v1","created_at":"2026-07-05T08:28:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.03805","created_at":"2026-07-05T08:28:16Z"},{"alias_kind":"pith_short_12","alias_value":"U3HKKR6CCXWT","created_at":"2026-07-05T08:28:16Z"},{"alias_kind":"pith_short_16","alias_value":"U3HKKR6CCXWTFQFH","created_at":"2026-07-05T08:28:16Z"},{"alias_kind":"pith_short_8","alias_value":"U3HKKR6C","created_at":"2026-07-05T08:28:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:U3HKKR6CCXWTFQFHBVPR7DV6YK","target":"record","payload":{"canonical_record":{"source":{"id":"2406.03805","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-06T07:24:41Z","cross_cats_sorted":[],"title_canon_sha256":"d007146758cc948aecbe4679bba995c00b70e11739b7dc42e8f7c3cef883d6eb","abstract_canon_sha256":"d00cd907b3ec98d092415c46c82386957f2a92cad717c7bffbb9013bce07cf16"},"schema_version":"1.0"},"canonical_sha256":"a6cea547c215ed32c0a70d5f1f8ebec297b0badbb5a292824f7b33f3e096d8b4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:28:16.186774Z","signature_b64":"ZRgYDswd8rRaSYGyQChRuV1+RxpFJGZqvqUVo2gMqgPggRAVvM7In+azIoNr3OWYDYOuTxqhZ/m9h6508WRwAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a6cea547c215ed32c0a70d5f1f8ebec297b0badbb5a292824f7b33f3e096d8b4","last_reissued_at":"2026-07-05T08:28:16.186295Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:28:16.186295Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.03805","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:28:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YhbLfHjbkNerwMnRd0ocwCfPWPqHQQCYXdyerpwGmN3S2cVE2Mew5SUgP0Zn8XDboYi/PAcSTCBYuHRWvW6uCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T12:22:30.989613Z"},"content_sha256":"52cf75f7065613bb04d9c4d35c58396a4fc22dc7f4db1f6654f1973e767342c2","schema_version":"1.0","event_id":"sha256:52cf75f7065613bb04d9c4d35c58396a4fc22dc7f4db1f6654f1973e767342c2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:U3HKKR6CCXWTFQFHBVPR7DV6YK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AutoJailbreak: Exploring Jailbreak Attacks and Defenses through a Dependency Lens","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Hai Yan, Jiawen Shi, Lin Lu, Pan Zhou, Pin-Yu Chen, Wenqi Wei, Zenghui Yuan","submitted_at":"2024-06-06T07:24:41Z","abstract_excerpt":"Jailbreak attacks in large language models (LLMs) entail inducing the models to generate content that breaches ethical and legal norm through the use of malicious prompts, posing a substantial threat to LLM security. Current strategies for jailbreak attack and defense often focus on optimizing locally within specific algorithmic frameworks, resulting in ineffective optimization and limited scalability. In this paper, we present a systematic analysis of the dependency relationships in jailbreak attack and defense techniques, generalizing them to all possible attack surfaces. We employ directed "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.03805","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.03805/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:28:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4ICkGKF8qPcO4n04bBSjCOEEX6jlELkoGEB0c1alC2mdr9Szk5SouNq4jgmt5kjoWrWxJNkDFgDVSeAGmGKRBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T12:22:30.990384Z"},"content_sha256":"fe96af31689e86689a14b3a212fa453ab1abf2eac42cc4efeb22dd747d00236b","schema_version":"1.0","event_id":"sha256:fe96af31689e86689a14b3a212fa453ab1abf2eac42cc4efeb22dd747d00236b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/U3HKKR6CCXWTFQFHBVPR7DV6YK/bundle.json","state_url":"https://pith.science/pith/U3HKKR6CCXWTFQFHBVPR7DV6YK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/U3HKKR6CCXWTFQFHBVPR7DV6YK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T12:22:30Z","links":{"resolver":"https://pith.science/pith/U3HKKR6CCXWTFQFHBVPR7DV6YK","bundle":"https://pith.science/pith/U3HKKR6CCXWTFQFHBVPR7DV6YK/bundle.json","state":"https://pith.science/pith/U3HKKR6CCXWTFQFHBVPR7DV6YK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/U3HKKR6CCXWTFQFHBVPR7DV6YK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:U3HKKR6CCXWTFQFHBVPR7DV6YK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d00cd907b3ec98d092415c46c82386957f2a92cad717c7bffbb9013bce07cf16","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-06T07:24:41Z","title_canon_sha256":"d007146758cc948aecbe4679bba995c00b70e11739b7dc42e8f7c3cef883d6eb"},"schema_version":"1.0","source":{"id":"2406.03805","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.03805","created_at":"2026-07-05T08:28:16Z"},{"alias_kind":"arxiv_version","alias_value":"2406.03805v1","created_at":"2026-07-05T08:28:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.03805","created_at":"2026-07-05T08:28:16Z"},{"alias_kind":"pith_short_12","alias_value":"U3HKKR6CCXWT","created_at":"2026-07-05T08:28:16Z"},{"alias_kind":"pith_short_16","alias_value":"U3HKKR6CCXWTFQFH","created_at":"2026-07-05T08:28:16Z"},{"alias_kind":"pith_short_8","alias_value":"U3HKKR6C","created_at":"2026-07-05T08:28:16Z"}],"graph_snapshots":[{"event_id":"sha256:fe96af31689e86689a14b3a212fa453ab1abf2eac42cc4efeb22dd747d00236b","target":"graph","created_at":"2026-07-05T08:28:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.03805/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Jailbreak attacks in large language models (LLMs) entail inducing the models to generate content that breaches ethical and legal norm through the use of malicious prompts, posing a substantial threat to LLM security. Current strategies for jailbreak attack and defense often focus on optimizing locally within specific algorithmic frameworks, resulting in ineffective optimization and limited scalability. In this paper, we present a systematic analysis of the dependency relationships in jailbreak attack and defense techniques, generalizing them to all possible attack surfaces. We employ directed ","authors_text":"Hai Yan, Jiawen Shi, Lin Lu, Pan Zhou, Pin-Yu Chen, Wenqi Wei, Zenghui Yuan","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-06T07:24:41Z","title":"AutoJailbreak: Exploring Jailbreak Attacks and Defenses through a Dependency Lens"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.03805","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:52cf75f7065613bb04d9c4d35c58396a4fc22dc7f4db1f6654f1973e767342c2","target":"record","created_at":"2026-07-05T08:28:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d00cd907b3ec98d092415c46c82386957f2a92cad717c7bffbb9013bce07cf16","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-06T07:24:41Z","title_canon_sha256":"d007146758cc948aecbe4679bba995c00b70e11739b7dc42e8f7c3cef883d6eb"},"schema_version":"1.0","source":{"id":"2406.03805","kind":"arxiv","version":1}},"canonical_sha256":"a6cea547c215ed32c0a70d5f1f8ebec297b0badbb5a292824f7b33f3e096d8b4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a6cea547c215ed32c0a70d5f1f8ebec297b0badbb5a292824f7b33f3e096d8b4","first_computed_at":"2026-07-05T08:28:16.186295Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:28:16.186295Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZRgYDswd8rRaSYGyQChRuV1+RxpFJGZqvqUVo2gMqgPggRAVvM7In+azIoNr3OWYDYOuTxqhZ/m9h6508WRwAg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:28:16.186774Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.03805","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:52cf75f7065613bb04d9c4d35c58396a4fc22dc7f4db1f6654f1973e767342c2","sha256:fe96af31689e86689a14b3a212fa453ab1abf2eac42cc4efeb22dd747d00236b"],"state_sha256":"4d9621bf6c2993760cd55c16eba32a2a2af5afacafb9e4729e4b2c0f215ecedb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qwM6T3N7178KM/nHrdjaZGUpPUq3yzzGjStAH0ixV83+8MZFG0z9vcX4J18TptZcS7slEZavZoBxCVMK1dxGBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T12:22:30.996203Z","bundle_sha256":"843ac39e291295f68852de029dd38eade05061e560902352df2e8c1559eaf432"}}