{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:UQXYEM5CGSESLKEUS6DUNCMLG5","short_pith_number":"pith:UQXYEM5C","canonical_record":{"source":{"id":"2410.08660","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-11T09:39:11Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"43788f47362a1a6c7aa8b7abf51aef3012c22f9390f17bf702bfa810464eefde","abstract_canon_sha256":"15edf1a2428366934c05ae30a79dd8ac7f0ab00ad14631562228ac5cbabb286d"},"schema_version":"1.0"},"canonical_sha256":"a42f8233a2348925a894978746898b3749f136ee0a30287606bfb1c794b0a0a1","source":{"kind":"arxiv","id":"2410.08660","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.08660","created_at":"2026-07-05T09:41:42Z"},{"alias_kind":"arxiv_version","alias_value":"2410.08660v3","created_at":"2026-07-05T09:41:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.08660","created_at":"2026-07-05T09:41:42Z"},{"alias_kind":"pith_short_12","alias_value":"UQXYEM5CGSES","created_at":"2026-07-05T09:41:42Z"},{"alias_kind":"pith_short_16","alias_value":"UQXYEM5CGSESLKEU","created_at":"2026-07-05T09:41:42Z"},{"alias_kind":"pith_short_8","alias_value":"UQXYEM5C","created_at":"2026-07-05T09:41:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:UQXYEM5CGSESLKEUS6DUNCMLG5","target":"record","payload":{"canonical_record":{"source":{"id":"2410.08660","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-11T09:39:11Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"43788f47362a1a6c7aa8b7abf51aef3012c22f9390f17bf702bfa810464eefde","abstract_canon_sha256":"15edf1a2428366934c05ae30a79dd8ac7f0ab00ad14631562228ac5cbabb286d"},"schema_version":"1.0"},"canonical_sha256":"a42f8233a2348925a894978746898b3749f136ee0a30287606bfb1c794b0a0a1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:41:42.967919Z","signature_b64":"a07P6Yos5oiHajSeecVt8o9kTepfkuxzfIE5/v0bNJSQXAfRt2Q2v2bQkI+mskKHuVyV4KBZYiGTtbgGy6o9Cw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a42f8233a2348925a894978746898b3749f136ee0a30287606bfb1c794b0a0a1","last_reissued_at":"2026-07-05T09:41:42.967423Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:41:42.967423Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.08660","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:41:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ak7sKRbudM8O/HNQJtBHI3Li+2XvDXqTptGPIzgdKG1WFHdxkrdsdxrh0AGtKfOiqAjvJo5bSCkYAVmX8UkjDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:28:47.619761Z"},"content_sha256":"297125af9ba5172f1402fdbc457eee532b1b0f134699b8c069a3da1df0c812a5","schema_version":"1.0","event_id":"sha256:297125af9ba5172f1402fdbc457eee532b1b0f134699b8c069a3da1df0c812a5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:UQXYEM5CGSESLKEUS6DUNCMLG5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"RePD: Defending Jailbreak Attack through a Retrieval-based Prompt Decomposition Process","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Chaowei Xiao, Peiran Wang, Xiaogeng Liu","submitted_at":"2024-10-11T09:39:11Z","abstract_excerpt":"In this study, we introduce RePD, an innovative attack Retrieval-based Prompt Decomposition framework designed to mitigate the risk of jailbreak attacks on large language models (LLMs). Despite rigorous pretraining and finetuning focused on ethical alignment, LLMs are still susceptible to jailbreak exploits. RePD operates on a one-shot learning model, wherein it accesses a database of pre-collected jailbreak prompt templates to identify and decompose harmful inquiries embedded within user prompts. This process involves integrating the decomposition of the jailbreak prompt into the user's origi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.08660","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.08660/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:41:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LUBVC+tbrvU9vLzA53I50HtUSxKRK7gNMD3zfg1pKJDfwOQU372xs5j/cyZQSbw8M3SL7vrr6lq6e3pY2qExAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T23:28:47.620283Z"},"content_sha256":"b519be12610fe1012e8d4c16e36e7b76ad5bb8e0b007e2b86ce83c81f5efde9c","schema_version":"1.0","event_id":"sha256:b519be12610fe1012e8d4c16e36e7b76ad5bb8e0b007e2b86ce83c81f5efde9c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UQXYEM5CGSESLKEUS6DUNCMLG5/bundle.json","state_url":"https://pith.science/pith/UQXYEM5CGSESLKEUS6DUNCMLG5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UQXYEM5CGSESLKEUS6DUNCMLG5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T23:28:47Z","links":{"resolver":"https://pith.science/pith/UQXYEM5CGSESLKEUS6DUNCMLG5","bundle":"https://pith.science/pith/UQXYEM5CGSESLKEUS6DUNCMLG5/bundle.json","state":"https://pith.science/pith/UQXYEM5CGSESLKEUS6DUNCMLG5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UQXYEM5CGSESLKEUS6DUNCMLG5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:UQXYEM5CGSESLKEUS6DUNCMLG5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"15edf1a2428366934c05ae30a79dd8ac7f0ab00ad14631562228ac5cbabb286d","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-11T09:39:11Z","title_canon_sha256":"43788f47362a1a6c7aa8b7abf51aef3012c22f9390f17bf702bfa810464eefde"},"schema_version":"1.0","source":{"id":"2410.08660","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.08660","created_at":"2026-07-05T09:41:42Z"},{"alias_kind":"arxiv_version","alias_value":"2410.08660v3","created_at":"2026-07-05T09:41:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.08660","created_at":"2026-07-05T09:41:42Z"},{"alias_kind":"pith_short_12","alias_value":"UQXYEM5CGSES","created_at":"2026-07-05T09:41:42Z"},{"alias_kind":"pith_short_16","alias_value":"UQXYEM5CGSESLKEU","created_at":"2026-07-05T09:41:42Z"},{"alias_kind":"pith_short_8","alias_value":"UQXYEM5C","created_at":"2026-07-05T09:41:42Z"}],"graph_snapshots":[{"event_id":"sha256:b519be12610fe1012e8d4c16e36e7b76ad5bb8e0b007e2b86ce83c81f5efde9c","target":"graph","created_at":"2026-07-05T09:41:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.08660/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this study, we introduce RePD, an innovative attack Retrieval-based Prompt Decomposition framework designed to mitigate the risk of jailbreak attacks on large language models (LLMs). Despite rigorous pretraining and finetuning focused on ethical alignment, LLMs are still susceptible to jailbreak exploits. RePD operates on a one-shot learning model, wherein it accesses a database of pre-collected jailbreak prompt templates to identify and decompose harmful inquiries embedded within user prompts. This process involves integrating the decomposition of the jailbreak prompt into the user's origi","authors_text":"Chaowei Xiao, Peiran Wang, Xiaogeng Liu","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-11T09:39:11Z","title":"RePD: Defending Jailbreak Attack through a Retrieval-based Prompt Decomposition Process"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.08660","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:297125af9ba5172f1402fdbc457eee532b1b0f134699b8c069a3da1df0c812a5","target":"record","created_at":"2026-07-05T09:41:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"15edf1a2428366934c05ae30a79dd8ac7f0ab00ad14631562228ac5cbabb286d","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-11T09:39:11Z","title_canon_sha256":"43788f47362a1a6c7aa8b7abf51aef3012c22f9390f17bf702bfa810464eefde"},"schema_version":"1.0","source":{"id":"2410.08660","kind":"arxiv","version":3}},"canonical_sha256":"a42f8233a2348925a894978746898b3749f136ee0a30287606bfb1c794b0a0a1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a42f8233a2348925a894978746898b3749f136ee0a30287606bfb1c794b0a0a1","first_computed_at":"2026-07-05T09:41:42.967423Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:41:42.967423Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"a07P6Yos5oiHajSeecVt8o9kTepfkuxzfIE5/v0bNJSQXAfRt2Q2v2bQkI+mskKHuVyV4KBZYiGTtbgGy6o9Cw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:41:42.967919Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.08660","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:297125af9ba5172f1402fdbc457eee532b1b0f134699b8c069a3da1df0c812a5","sha256:b519be12610fe1012e8d4c16e36e7b76ad5bb8e0b007e2b86ce83c81f5efde9c"],"state_sha256":"2aaf5d59ccc167941e7a6055af9a5221d47c03460f29aa05e06aa1585c8595cf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zFZbecgtZV2RzpIlafb6RfizRdR/e1jI8q32JjRhtgZDmO2CVWGfbDMVsiRCn2xCKLtjvJr8fzUv0O50rvIDCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T23:28:47.625262Z","bundle_sha256":"ae3157d0342e83033a0ac6514e4c469e9d47849f6a5f0d1de48e817e326ea847"}}