{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:V6B3FAPR2ROTKKJDQT53BTVMU3","short_pith_number":"pith:V6B3FAPR","canonical_record":{"source":{"id":"2412.16633","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.RO","submitted_at":"2024-12-21T13:58:27Z","cross_cats_sorted":["cs.AI","cs.CY"],"title_canon_sha256":"7d42293b71bb0c0dd80de93c786940cd3b772776ea01fc39b0c4e36bd7388270","abstract_canon_sha256":"af1cda2e279dd82ad46655d9122da16c7a03bd426f11ae14bebecb9abbc9a51a"},"schema_version":"1.0"},"canonical_sha256":"af83b281f1d45d35292384fbb0ceaca6cb754cef597159e6210ca6ae6a96bd32","source":{"kind":"arxiv","id":"2412.16633","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.16633","created_at":"2026-07-05T11:51:20Z"},{"alias_kind":"arxiv_version","alias_value":"2412.16633v3","created_at":"2026-07-05T11:51:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.16633","created_at":"2026-07-05T11:51:20Z"},{"alias_kind":"pith_short_12","alias_value":"V6B3FAPR2ROT","created_at":"2026-07-05T11:51:20Z"},{"alias_kind":"pith_short_16","alias_value":"V6B3FAPR2ROTKKJD","created_at":"2026-07-05T11:51:20Z"},{"alias_kind":"pith_short_8","alias_value":"V6B3FAPR","created_at":"2026-07-05T11:51:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:V6B3FAPR2ROTKKJDQT53BTVMU3","target":"record","payload":{"canonical_record":{"source":{"id":"2412.16633","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.RO","submitted_at":"2024-12-21T13:58:27Z","cross_cats_sorted":["cs.AI","cs.CY"],"title_canon_sha256":"7d42293b71bb0c0dd80de93c786940cd3b772776ea01fc39b0c4e36bd7388270","abstract_canon_sha256":"af1cda2e279dd82ad46655d9122da16c7a03bd426f11ae14bebecb9abbc9a51a"},"schema_version":"1.0"},"canonical_sha256":"af83b281f1d45d35292384fbb0ceaca6cb754cef597159e6210ca6ae6a96bd32","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:51:20.310766Z","signature_b64":"iI2yPezxYHljbnbHbmWD+1wCXNE6SL3m2sejvQLB5QjKEN5tfk5706pTyZKBeD0iUZFTxMMZF17dP+i0Au9IDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"af83b281f1d45d35292384fbb0ceaca6cb754cef597159e6210ca6ae6a96bd32","last_reissued_at":"2026-07-05T11:51:20.310206Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:51:20.310206Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.16633","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:51:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lHBlv1minWzngKcUkPmaqbItdKRymB23Wd08Yiex2QnWBh2AlXLqwbxEkez5kgECSQNzSB6xaYWEtS64ivaCCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T05:57:48.092921Z"},"content_sha256":"9b3dd27e4864282748e0471427d5645ccef8475c0230a7519aa31ec02e64ca0d","schema_version":"1.0","event_id":"sha256:9b3dd27e4864282748e0471427d5645ccef8475c0230a7519aa31ec02e64ca0d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:V6B3FAPR2ROTKKJDQT53BTVMU3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"POEX: Towards Policy Executable Jailbreak Attacks Against the LLM-based Robots","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.CY"],"primary_cat":"cs.RO","authors_text":"Chi Zhang, Wenyuan Xu, Xiaoyu Ji, Xinfeng Li, Xuancun Lu, Zhengxian Huang","submitted_at":"2024-12-21T13:58:27Z","abstract_excerpt":"The integration of LLMs into robots has witnessed significant growth, where LLMs can convert instructions into executable robot policies. However, the inherent vulnerability of LLMs to jailbreak attacks brings critical security risks from the digital domain to the physical world. An attacked LLM-based robot could execute harmful policies and cause physical harm. In this paper, we investigate the feasibility and rationale of jailbreak attacks against LLM-based robots and answer three research questions: (1) How applicable are existing LLM jailbreak attacks against LLM-based robots? (2) What uni"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.16633","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.16633/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:51:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NwMwqEcFOqCLvw8oOaHnpaJ9Pqr6TTVYQkEmhp05xJrHQ19JZoNuV/dggJrIMcdoxjpOJsXrXZmINDWzQpYECw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T05:57:48.093445Z"},"content_sha256":"548830eabb6cfd42b6f210b7955333a5e55cfaa14e0780e8cc55441ca228e312","schema_version":"1.0","event_id":"sha256:548830eabb6cfd42b6f210b7955333a5e55cfaa14e0780e8cc55441ca228e312"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/V6B3FAPR2ROTKKJDQT53BTVMU3/bundle.json","state_url":"https://pith.science/pith/V6B3FAPR2ROTKKJDQT53BTVMU3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/V6B3FAPR2ROTKKJDQT53BTVMU3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T05:57:48Z","links":{"resolver":"https://pith.science/pith/V6B3FAPR2ROTKKJDQT53BTVMU3","bundle":"https://pith.science/pith/V6B3FAPR2ROTKKJDQT53BTVMU3/bundle.json","state":"https://pith.science/pith/V6B3FAPR2ROTKKJDQT53BTVMU3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/V6B3FAPR2ROTKKJDQT53BTVMU3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:V6B3FAPR2ROTKKJDQT53BTVMU3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"af1cda2e279dd82ad46655d9122da16c7a03bd426f11ae14bebecb9abbc9a51a","cross_cats_sorted":["cs.AI","cs.CY"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.RO","submitted_at":"2024-12-21T13:58:27Z","title_canon_sha256":"7d42293b71bb0c0dd80de93c786940cd3b772776ea01fc39b0c4e36bd7388270"},"schema_version":"1.0","source":{"id":"2412.16633","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.16633","created_at":"2026-07-05T11:51:20Z"},{"alias_kind":"arxiv_version","alias_value":"2412.16633v3","created_at":"2026-07-05T11:51:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.16633","created_at":"2026-07-05T11:51:20Z"},{"alias_kind":"pith_short_12","alias_value":"V6B3FAPR2ROT","created_at":"2026-07-05T11:51:20Z"},{"alias_kind":"pith_short_16","alias_value":"V6B3FAPR2ROTKKJD","created_at":"2026-07-05T11:51:20Z"},{"alias_kind":"pith_short_8","alias_value":"V6B3FAPR","created_at":"2026-07-05T11:51:20Z"}],"graph_snapshots":[{"event_id":"sha256:548830eabb6cfd42b6f210b7955333a5e55cfaa14e0780e8cc55441ca228e312","target":"graph","created_at":"2026-07-05T11:51:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.16633/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The integration of LLMs into robots has witnessed significant growth, where LLMs can convert instructions into executable robot policies. However, the inherent vulnerability of LLMs to jailbreak attacks brings critical security risks from the digital domain to the physical world. An attacked LLM-based robot could execute harmful policies and cause physical harm. In this paper, we investigate the feasibility and rationale of jailbreak attacks against LLM-based robots and answer three research questions: (1) How applicable are existing LLM jailbreak attacks against LLM-based robots? (2) What uni","authors_text":"Chi Zhang, Wenyuan Xu, Xiaoyu Ji, Xinfeng Li, Xuancun Lu, Zhengxian Huang","cross_cats":["cs.AI","cs.CY"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.RO","submitted_at":"2024-12-21T13:58:27Z","title":"POEX: Towards Policy Executable Jailbreak Attacks Against the LLM-based Robots"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.16633","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9b3dd27e4864282748e0471427d5645ccef8475c0230a7519aa31ec02e64ca0d","target":"record","created_at":"2026-07-05T11:51:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"af1cda2e279dd82ad46655d9122da16c7a03bd426f11ae14bebecb9abbc9a51a","cross_cats_sorted":["cs.AI","cs.CY"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.RO","submitted_at":"2024-12-21T13:58:27Z","title_canon_sha256":"7d42293b71bb0c0dd80de93c786940cd3b772776ea01fc39b0c4e36bd7388270"},"schema_version":"1.0","source":{"id":"2412.16633","kind":"arxiv","version":3}},"canonical_sha256":"af83b281f1d45d35292384fbb0ceaca6cb754cef597159e6210ca6ae6a96bd32","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"af83b281f1d45d35292384fbb0ceaca6cb754cef597159e6210ca6ae6a96bd32","first_computed_at":"2026-07-05T11:51:20.310206Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:51:20.310206Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"iI2yPezxYHljbnbHbmWD+1wCXNE6SL3m2sejvQLB5QjKEN5tfk5706pTyZKBeD0iUZFTxMMZF17dP+i0Au9IDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:51:20.310766Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.16633","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9b3dd27e4864282748e0471427d5645ccef8475c0230a7519aa31ec02e64ca0d","sha256:548830eabb6cfd42b6f210b7955333a5e55cfaa14e0780e8cc55441ca228e312"],"state_sha256":"103324e528bb687776cdcede4746697590ef44861a5b07231a19bb260f4ad5f7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IFx+vaR89MdOvQ+nGUl9UXdp3sa+CckzTM4LtG0jOq0WseemlZ/0n9871c3f12xJi/rwI/Ad2v9ykh8SO16SAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T05:57:48.098030Z","bundle_sha256":"3f6fc50261fafd94ed7db2301a884716c9f38d1cc53bd5d2b79345437977c74f"}}