{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:UR6NTD7I7OCLX235PODHH7N37W","short_pith_number":"pith:UR6NTD7I","canonical_record":{"source":{"id":"2608.08212","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-08-08T16:13:38Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"1cffe068b97f98c853bc3af94fe1ae15d7e86e34cfa6cd6f5e76290b91f0d6bf","abstract_canon_sha256":"916079133b35ea185007216058daad687fc22a721bdc1b413526845272954e24"},"schema_version":"1.0"},"canonical_sha256":"a47cd98fe8fb84bbeb7d7b8673fdbbfd9708e029b3bf2fa9f59519c48e0725ec","source":{"kind":"arxiv","id":"2608.08212","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.08212","created_at":"2026-08-11T01:21:59Z"},{"alias_kind":"arxiv_version","alias_value":"2608.08212v1","created_at":"2026-08-11T01:21:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.08212","created_at":"2026-08-11T01:21:59Z"},{"alias_kind":"pith_short_12","alias_value":"UR6NTD7I7OCL","created_at":"2026-08-11T01:21:59Z"},{"alias_kind":"pith_short_16","alias_value":"UR6NTD7I7OCLX235","created_at":"2026-08-11T01:21:59Z"},{"alias_kind":"pith_short_8","alias_value":"UR6NTD7I","created_at":"2026-08-11T01:21:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:UR6NTD7I7OCLX235PODHH7N37W","target":"record","payload":{"canonical_record":{"source":{"id":"2608.08212","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-08-08T16:13:38Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"1cffe068b97f98c853bc3af94fe1ae15d7e86e34cfa6cd6f5e76290b91f0d6bf","abstract_canon_sha256":"916079133b35ea185007216058daad687fc22a721bdc1b413526845272954e24"},"schema_version":"1.0"},"canonical_sha256":"a47cd98fe8fb84bbeb7d7b8673fdbbfd9708e029b3bf2fa9f59519c48e0725ec","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-11T01:21:59.893283Z","signature_b64":"KkbdfvW5oyXIV+uyPzdpNVD+d5/v4RtZCmDPxqRfPYuQSjA4NF79lpwRxHG7iPnaqHX4xMQ7s8RgAUz8/ca+Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a47cd98fe8fb84bbeb7d7b8673fdbbfd9708e029b3bf2fa9f59519c48e0725ec","last_reissued_at":"2026-08-11T01:21:59.890912Z","signature_status":"signed_v1","first_computed_at":"2026-08-11T01:21:59.890912Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.08212","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-11T01:21:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sT958743tDFrRXnPPB5/kmr7Kw7+bAO0ycpMQ/JJ9+POu0SrhDqTJcy75gm55rEWrNXoQACCOS3/vsCIuly4CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T02:23:59.815772Z"},"content_sha256":"361bfd6e32aee405c7958a912b1f15c31c69cf93aac2c06654a16ffc25f5170d","schema_version":"1.0","event_id":"sha256:361bfd6e32aee405c7958a912b1f15c31c69cf93aac2c06654a16ffc25f5170d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:UR6NTD7I7OCLX235PODHH7N37W","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Harmful Content Is Not Enough: Continuation Framing Moderates In-Context Emergent Misalignment","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.AI","authors_text":"Di Liang, Peiyang Liu, Wei Ye, Xi Wang, Ziqiang Cui","submitted_at":"2026-08-08T16:13:38Z","abstract_excerpt":"In-context learning (ICL) can induce emergent misalignment (EM), where narrow misaligned examples alter answers to unrelated questions. Existing prompts, however, conflate harmful-text exposure with an invitation to continue assistant behavior. We hold harmful answers fixed while varying their delivery as demonstrations, evidence, assistant history, or tool output. Across ten independently sampled contexts, demonstration framing raises broad EM by $30$--$32$ percentage points on a susceptible Gemini model; the gap survives domain exclusion, semantic clustering, unseen questions, and four promp"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.08212","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.08212/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-11T01:21:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WOdgfBcHHVNK4dq/opBfE2vs0stJ52CXiD8mJFIeZrp0uTRGbBb+NN20nAOSprMljbJW9Wu3L+oZKD5YdvQuCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T02:23:59.816284Z"},"content_sha256":"0bf782da87243a10ee3a3cef0d03f1cf8095778101d5f1f84f64c53a54f1c1ed","schema_version":"1.0","event_id":"sha256:0bf782da87243a10ee3a3cef0d03f1cf8095778101d5f1f84f64c53a54f1c1ed"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UR6NTD7I7OCLX235PODHH7N37W/bundle.json","state_url":"https://pith.science/pith/UR6NTD7I7OCLX235PODHH7N37W/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UR6NTD7I7OCLX235PODHH7N37W/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T02:23:59Z","links":{"resolver":"https://pith.science/pith/UR6NTD7I7OCLX235PODHH7N37W","bundle":"https://pith.science/pith/UR6NTD7I7OCLX235PODHH7N37W/bundle.json","state":"https://pith.science/pith/UR6NTD7I7OCLX235PODHH7N37W/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UR6NTD7I7OCLX235PODHH7N37W/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:UR6NTD7I7OCLX235PODHH7N37W","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"916079133b35ea185007216058daad687fc22a721bdc1b413526845272954e24","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-08-08T16:13:38Z","title_canon_sha256":"1cffe068b97f98c853bc3af94fe1ae15d7e86e34cfa6cd6f5e76290b91f0d6bf"},"schema_version":"1.0","source":{"id":"2608.08212","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.08212","created_at":"2026-08-11T01:21:59Z"},{"alias_kind":"arxiv_version","alias_value":"2608.08212v1","created_at":"2026-08-11T01:21:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.08212","created_at":"2026-08-11T01:21:59Z"},{"alias_kind":"pith_short_12","alias_value":"UR6NTD7I7OCL","created_at":"2026-08-11T01:21:59Z"},{"alias_kind":"pith_short_16","alias_value":"UR6NTD7I7OCLX235","created_at":"2026-08-11T01:21:59Z"},{"alias_kind":"pith_short_8","alias_value":"UR6NTD7I","created_at":"2026-08-11T01:21:59Z"}],"graph_snapshots":[{"event_id":"sha256:0bf782da87243a10ee3a3cef0d03f1cf8095778101d5f1f84f64c53a54f1c1ed","target":"graph","created_at":"2026-08-11T01:21:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.08212/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In-context learning (ICL) can induce emergent misalignment (EM), where narrow misaligned examples alter answers to unrelated questions. Existing prompts, however, conflate harmful-text exposure with an invitation to continue assistant behavior. We hold harmful answers fixed while varying their delivery as demonstrations, evidence, assistant history, or tool output. Across ten independently sampled contexts, demonstration framing raises broad EM by $30$--$32$ percentage points on a susceptible Gemini model; the gap survives domain exclusion, semantic clustering, unseen questions, and four promp","authors_text":"Di Liang, Peiyang Liu, Wei Ye, Xi Wang, Ziqiang Cui","cross_cats":["cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-08-08T16:13:38Z","title":"Harmful Content Is Not Enough: Continuation Framing Moderates In-Context Emergent Misalignment"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.08212","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:361bfd6e32aee405c7958a912b1f15c31c69cf93aac2c06654a16ffc25f5170d","target":"record","created_at":"2026-08-11T01:21:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"916079133b35ea185007216058daad687fc22a721bdc1b413526845272954e24","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-08-08T16:13:38Z","title_canon_sha256":"1cffe068b97f98c853bc3af94fe1ae15d7e86e34cfa6cd6f5e76290b91f0d6bf"},"schema_version":"1.0","source":{"id":"2608.08212","kind":"arxiv","version":1}},"canonical_sha256":"a47cd98fe8fb84bbeb7d7b8673fdbbfd9708e029b3bf2fa9f59519c48e0725ec","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a47cd98fe8fb84bbeb7d7b8673fdbbfd9708e029b3bf2fa9f59519c48e0725ec","first_computed_at":"2026-08-11T01:21:59.890912Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-11T01:21:59.890912Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KkbdfvW5oyXIV+uyPzdpNVD+d5/v4RtZCmDPxqRfPYuQSjA4NF79lpwRxHG7iPnaqHX4xMQ7s8RgAUz8/ca+Dw==","signature_status":"signed_v1","signed_at":"2026-08-11T01:21:59.893283Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.08212","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:361bfd6e32aee405c7958a912b1f15c31c69cf93aac2c06654a16ffc25f5170d","sha256:0bf782da87243a10ee3a3cef0d03f1cf8095778101d5f1f84f64c53a54f1c1ed"],"state_sha256":"7647c56fc995a7bd8cb4909aa356b41d130232a6f52c1350992a769be813b24b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RxAea5j6RNnv3dco2fZO4ziDrd8gRbUpkyWIeNzcZgr9/IgXK6l5xylzQCXA1ILLiwsamycJwtycE3i8U/l0DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T02:23:59.820313Z","bundle_sha256":"0156a2efa42bdd34021eb11f9e4c61212f65bfd3c945fc923ea0d579a64d5415"}}