{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:UQITD3YURQA5Y24YLX2ZY5ZT7U","short_pith_number":"pith:UQITD3YU","canonical_record":{"source":{"id":"2608.03210","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2026-08-04T06:48:17Z","cross_cats_sorted":[],"title_canon_sha256":"8c2d50f01ee33930327502782135674b95acc71e3a199df45cfb2d70e982766c","abstract_canon_sha256":"93ff8ec99538e0b469541b4e1e3df5294599a533f1a7878865ed92602f58aff9"},"schema_version":"1.0"},"canonical_sha256":"a41131ef148c01dc6b985df59c7733fd1b11da6d9506d13731deeb0a94f30a23","source":{"kind":"arxiv","id":"2608.03210","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03210","created_at":"2026-08-05T00:46:16Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03210v1","created_at":"2026-08-05T00:46:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03210","created_at":"2026-08-05T00:46:16Z"},{"alias_kind":"pith_short_12","alias_value":"UQITD3YURQA5","created_at":"2026-08-05T00:46:16Z"},{"alias_kind":"pith_short_16","alias_value":"UQITD3YURQA5Y24Y","created_at":"2026-08-05T00:46:16Z"},{"alias_kind":"pith_short_8","alias_value":"UQITD3YU","created_at":"2026-08-05T00:46:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:UQITD3YURQA5Y24YLX2ZY5ZT7U","target":"record","payload":{"canonical_record":{"source":{"id":"2608.03210","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2026-08-04T06:48:17Z","cross_cats_sorted":[],"title_canon_sha256":"8c2d50f01ee33930327502782135674b95acc71e3a199df45cfb2d70e982766c","abstract_canon_sha256":"93ff8ec99538e0b469541b4e1e3df5294599a533f1a7878865ed92602f58aff9"},"schema_version":"1.0"},"canonical_sha256":"a41131ef148c01dc6b985df59c7733fd1b11da6d9506d13731deeb0a94f30a23","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-05T00:46:16.666765Z","signature_b64":"dF3byS2mPtpQZU9miCNzKQCkIgmQgbXmOFG+n9O/RZvbDENsQlOO6VIsoBeCUv8UMjzq8NryXHNkQ9pa0wAtBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a41131ef148c01dc6b985df59c7733fd1b11da6d9506d13731deeb0a94f30a23","last_reissued_at":"2026-08-05T00:46:16.664175Z","signature_status":"signed_v1","first_computed_at":"2026-08-05T00:46:16.664175Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.03210","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T00:46:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kB1VyEvsdX6vHHEk4TdHSMlBQf0KaUg0lmLyhV2qzbyG17buYrWNauhWEQ2VxFxfF9QUmYrifvPqzmwsW8GjAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T06:16:42.030751Z"},"content_sha256":"4a73a70e76ebb4ce6e6d88840f009ff39187bc05a20f4fd04d3e67879a93178e","schema_version":"1.0","event_id":"sha256:4a73a70e76ebb4ce6e6d88840f009ff39187bc05a20f4fd04d3e67879a93178e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:UQITD3YURQA5Y24YLX2ZY5ZT7U","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Felix Juefei-Xu, Geguang Pu, Hujian Zhu, Peng Zeng, Qing Guo, Simeng Qin, Xinfeng Li, Yihao Huang","submitted_at":"2026-08-04T06:48:17Z","abstract_excerpt":"Foundation models have achieved remarkable success across diverse tasks, but they remain vulnerable. To investigate such vulnerabilities, semantic-shift jailbreaks have recently emerged as a promising attack paradigm. They bypass explicit safety mechanisms by replacing harmful terms in original harmful questions with benign alternatives and leveraging contextual information to induce the target model to reinterpret these alternatives as their corresponding harmful concepts. However, existing semantic-shift jailbreaks often achieve limited effectiveness. In this work, we reveal that this limita"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03210","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.03210/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T00:46:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kBPBOfl4I3pCBz/t6FlozIOzR15/pL1EszuHEpU78fhvN3rwZwz+RK0sQkSH1uFelKVOgs7mCGBgTs9KS58sDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T06:16:42.031314Z"},"content_sha256":"e8f0a4f356b24368079b4963b5b2ae60a79c44071d2d2c53d28f0678e2bebbd4","schema_version":"1.0","event_id":"sha256:e8f0a4f356b24368079b4963b5b2ae60a79c44071d2d2c53d28f0678e2bebbd4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UQITD3YURQA5Y24YLX2ZY5ZT7U/bundle.json","state_url":"https://pith.science/pith/UQITD3YURQA5Y24YLX2ZY5ZT7U/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UQITD3YURQA5Y24YLX2ZY5ZT7U/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T06:16:42Z","links":{"resolver":"https://pith.science/pith/UQITD3YURQA5Y24YLX2ZY5ZT7U","bundle":"https://pith.science/pith/UQITD3YURQA5Y24YLX2ZY5ZT7U/bundle.json","state":"https://pith.science/pith/UQITD3YURQA5Y24YLX2ZY5ZT7U/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UQITD3YURQA5Y24YLX2ZY5ZT7U/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:UQITD3YURQA5Y24YLX2ZY5ZT7U","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"93ff8ec99538e0b469541b4e1e3df5294599a533f1a7878865ed92602f58aff9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2026-08-04T06:48:17Z","title_canon_sha256":"8c2d50f01ee33930327502782135674b95acc71e3a199df45cfb2d70e982766c"},"schema_version":"1.0","source":{"id":"2608.03210","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03210","created_at":"2026-08-05T00:46:16Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03210v1","created_at":"2026-08-05T00:46:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03210","created_at":"2026-08-05T00:46:16Z"},{"alias_kind":"pith_short_12","alias_value":"UQITD3YURQA5","created_at":"2026-08-05T00:46:16Z"},{"alias_kind":"pith_short_16","alias_value":"UQITD3YURQA5Y24Y","created_at":"2026-08-05T00:46:16Z"},{"alias_kind":"pith_short_8","alias_value":"UQITD3YU","created_at":"2026-08-05T00:46:16Z"}],"graph_snapshots":[{"event_id":"sha256:e8f0a4f356b24368079b4963b5b2ae60a79c44071d2d2c53d28f0678e2bebbd4","target":"graph","created_at":"2026-08-05T00:46:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.03210/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Foundation models have achieved remarkable success across diverse tasks, but they remain vulnerable. To investigate such vulnerabilities, semantic-shift jailbreaks have recently emerged as a promising attack paradigm. They bypass explicit safety mechanisms by replacing harmful terms in original harmful questions with benign alternatives and leveraging contextual information to induce the target model to reinterpret these alternatives as their corresponding harmful concepts. However, existing semantic-shift jailbreaks often achieve limited effectiveness. In this work, we reveal that this limita","authors_text":"Felix Juefei-Xu, Geguang Pu, Hujian Zhu, Peng Zeng, Qing Guo, Simeng Qin, Xinfeng Li, Yihao Huang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03210","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4a73a70e76ebb4ce6e6d88840f009ff39187bc05a20f4fd04d3e67879a93178e","target":"record","created_at":"2026-08-05T00:46:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"93ff8ec99538e0b469541b4e1e3df5294599a533f1a7878865ed92602f58aff9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2026-08-04T06:48:17Z","title_canon_sha256":"8c2d50f01ee33930327502782135674b95acc71e3a199df45cfb2d70e982766c"},"schema_version":"1.0","source":{"id":"2608.03210","kind":"arxiv","version":1}},"canonical_sha256":"a41131ef148c01dc6b985df59c7733fd1b11da6d9506d13731deeb0a94f30a23","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a41131ef148c01dc6b985df59c7733fd1b11da6d9506d13731deeb0a94f30a23","first_computed_at":"2026-08-05T00:46:16.664175Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-05T00:46:16.664175Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dF3byS2mPtpQZU9miCNzKQCkIgmQgbXmOFG+n9O/RZvbDENsQlOO6VIsoBeCUv8UMjzq8NryXHNkQ9pa0wAtBg==","signature_status":"signed_v1","signed_at":"2026-08-05T00:46:16.666765Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.03210","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4a73a70e76ebb4ce6e6d88840f009ff39187bc05a20f4fd04d3e67879a93178e","sha256:e8f0a4f356b24368079b4963b5b2ae60a79c44071d2d2c53d28f0678e2bebbd4"],"state_sha256":"a7cbd5503b99da74c80a3d16c4f657a7af0502c6427be5c559bb7daaa28673b9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9oeAP/q9IrRVMU6iqCloP9txpjwnluhkIMH84uYDXr7N8HKQf/yyoeNLzqRpYqe/13svJdcJtO225oflhKXnCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T06:16:42.036625Z","bundle_sha256":"fc5eaf2e42a6285499e6c71e850002f723c7d3fc709c052f59e744cb08b662b0"}}