{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:VMUCLLLKZHBUO4ACCDSNQFPNLM","short_pith_number":"pith:VMUCLLLK","canonical_record":{"source":{"id":"2501.18837","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-01-31T01:09:32Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"e2e59553af0da3be4c45976e562d5a37e236d8a86a7d730f7dd339d2fdcac4e5","abstract_canon_sha256":"fa51f2606de6e59ca1cc0eeb6c766735b2853db0874167eacdd98202ae0c9d0b"},"schema_version":"1.0"},"canonical_sha256":"ab2825ad6ac9c347700210e4d815ed5b1154375600fd2b870c409c3a559e8f34","source":{"kind":"arxiv","id":"2501.18837","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.18837","created_at":"2026-05-17T23:38:12Z"},{"alias_kind":"arxiv_version","alias_value":"2501.18837v1","created_at":"2026-05-17T23:38:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.18837","created_at":"2026-05-17T23:38:12Z"},{"alias_kind":"pith_short_12","alias_value":"VMUCLLLKZHBU","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_16","alias_value":"VMUCLLLKZHBUO4AC","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_8","alias_value":"VMUCLLLK","created_at":"2026-05-18T12:33:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:VMUCLLLKZHBUO4ACCDSNQFPNLM","target":"record","payload":{"canonical_record":{"source":{"id":"2501.18837","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-01-31T01:09:32Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"e2e59553af0da3be4c45976e562d5a37e236d8a86a7d730f7dd339d2fdcac4e5","abstract_canon_sha256":"fa51f2606de6e59ca1cc0eeb6c766735b2853db0874167eacdd98202ae0c9d0b"},"schema_version":"1.0"},"canonical_sha256":"ab2825ad6ac9c347700210e4d815ed5b1154375600fd2b870c409c3a559e8f34","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:38:12.857231Z","signature_b64":"VAAv7Gu9zMYZ2LuUnxQNRl8HwSV+gFGY/knk/zdBWUMTVzYe4dvf9WCZrenwpbwxYT+YYn+G+XBCfPtT9IDxAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ab2825ad6ac9c347700210e4d815ed5b1154375600fd2b870c409c3a559e8f34","last_reissued_at":"2026-05-17T23:38:12.856714Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:38:12.856714Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.18837","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:38:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tgK9H5BlbkfrKiUYCHU02dLk2X1I96KYa61vl9wef04qAiwEislj2P5QqdG+tI62eoFXkM+Uwi1o6h5CwtE7DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-18T21:20:09.968064Z"},"content_sha256":"a6b45be8228920bec4778c8ea868acd42426611f4f179a84a70789a1a67b2c3a","schema_version":"1.0","event_id":"sha256:a6b45be8228920bec4778c8ea868acd42426611f4f179a84a70789a1a67b2c3a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:VMUCLLLKZHBUO4ACCDSNQFPNLM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teaming","license":"http://creativecommons.org/licenses/by/4.0/","headline":"Classifiers trained on data from natural language rules block universal jailbreaks in language models.","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CL","authors_text":"Alex Silverstein, Alwin Peng, Amanda Askell, Andy Dau, Anjali Gopal, Catherine Olsson, Cem Anil, Clare O'Hara, Constantin Weisser, Emma Bluemke, Eric Christiansen, Ethan Perez, Euan Ong, Francesco Mosconi, Giulio Zhou, Hoagy Cunningham, Jan Leike, Jared Kaplan, Jerry Wei, Jesse Mu, Joe Benton, Jorrit Kruthoff, Kevin K. Troy, Kevin Lin, Leonard Tang, Linda Petrini, Logan Graham, Logan Howard, Meg Tong, Mrinank Sharma, Nathan Bailey, Nikhil Saxena, Nimit Kalra, Peter Lofgren, Raj Agarwal, Rob Gilson, Ruiqi Zhong, Samir Rajani, Samuel R. Bowman, Scott Goodfriend, Taesung Lee, Tanya Singh, Theodore Sumers","submitted_at":"2025-01-31T01:09:32Z","abstract_excerpt":"Large language models (LLMs) are vulnerable to universal jailbreaks-prompting strategies that systematically bypass model safeguards and enable users to carry out harmful processes that require many model interactions, like manufacturing illegal substances at scale. To defend against these attacks, we introduce Constitutional Classifiers: safeguards trained on synthetic data, generated by prompting LLMs with natural language rules (i.e., a constitution) specifying permitted and restricted content. In over 3,000 estimated hours of red teaming, no red teamer found a universal jailbreak that coul"},"claims":{"count":4,"items":[{"kind":"strongest_claim","text":"In over 3,000 estimated hours of red teaming, no red teamer found a universal jailbreak that could extract information from an early classifier-guarded LLM at a similar level of detail to an unguarded model across most target queries.","source":"verdict.strongest_claim","status":"machine_extracted","claim_id":"C1","attestation":"unclaimed"},{"kind":"weakest_assumption","text":"The red teaming process, even at large scale, sufficiently covers the space of possible universal jailbreaks so that absence of success implies robustness rather than incomplete search.","source":"verdict.weakest_assumption","status":"machine_extracted","claim_id":"C2","attestation":"unclaimed"},{"kind":"one_line_summary","text":"Constitutional Classifiers trained on synthetic data from natural language constitutions defend LLMs against universal jailbreaks, with no successful bypass found in over 3000 hours of red teaming and only minor deployment overhead.","source":"verdict.one_line_summary","status":"machine_extracted","claim_id":"C3","attestation":"unclaimed"},{"kind":"headline","text":"Classifiers trained on data from natural language rules block universal jailbreaks in language models.","source":"verdict.pith_extraction.headline","status":"machine_extracted","claim_id":"C4","attestation":"unclaimed"}],"snapshot_sha256":"7e2e55cbb7829d3be64a2d2e70901342201bf9831c899868516a2429e65972cd"},"source":{"id":"2501.18837","kind":"arxiv","version":1},"verdict":{"id":"a7d31d77-0052-499d-90aa-6c5745071dc3","model_set":{"reader":"grok-4.3"},"created_at":"2026-05-17T22:16:48.439431Z","strongest_claim":"In over 3,000 estimated hours of red teaming, no red teamer found a universal jailbreak that could extract information from an early classifier-guarded LLM at a similar level of detail to an unguarded model across most target queries.","one_line_summary":"Constitutional Classifiers trained on synthetic data from natural language constitutions defend LLMs against universal jailbreaks, with no successful bypass found in over 3000 hours of red teaming and only minor deployment overhead.","pipeline_version":"pith-pipeline@v0.9.0","weakest_assumption":"The red teaming process, even at large scale, sufficiently covers the space of possible universal jailbreaks so that absence of success implies robustness rather than incomplete search.","pith_extraction_headline":"Classifiers trained on data from natural language rules block universal jailbreaks in language models."},"references":{"count":160,"sample":[{"doi":"","year":2023,"title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","work_id":"1aabd84d-3779-4ba9-ba2f-15ce264a9b1e","ref_index":1,"cited_arxiv_id":"2209.07858","is_internal_anchor":true},{"doi":"","year":2024,"title":"Training language models to follow instructions with human feedback","work_id":"52aff42f-4fa9-4fcf-bdb3-1459b9bebf65","ref_index":2,"cited_arxiv_id":"2203.02155","is_internal_anchor":true},{"doi":"","year":2024,"title":"C., Lupu, A., Hambro, E., Markosyan, A","work_id":"d6939128-25f0-4e03-8c04-3dd198db6a8e","ref_index":3,"cited_arxiv_id":"","is_internal_anchor":false},{"doi":"","year":2024,"title":"Detecting Pretraining Data from Large Language Models","work_id":"1ff0530f-0b29-487b-ba43-d22a740293b1","ref_index":4,"cited_arxiv_id":"2310.16789","is_internal_anchor":true},{"doi":"","year":null,"title":"out-of-distribution","work_id":"4c01af3e-8b3f-41d9-b413-ff824ef8995c","ref_index":5,"cited_arxiv_id":"","is_internal_anchor":false}],"resolved_work":160,"snapshot_sha256":"c7d8f53bcb3848f7723dd83a338da5b2517d96228fb8deb46d09ae8c17c110b9","internal_anchors":3},"formal_canon":{"evidence_count":2,"snapshot_sha256":"939a8d5551982341ab6b1830777b1d7f02635fb7e2203f2643637b5ae7c1805f"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":"a7d31d77-0052-499d-90aa-6c5745071dc3"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:38:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1OIlNI3UF9odXixUNkuh8+cmUSJcFXwFi7OT79y6mjPYtdu/E/kjMI/wwKebbQbRkb7AAgDyesfMigDhNkbhBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-18T21:20:09.969140Z"},"content_sha256":"c15178299b9484b027587e1540398286b4b0c2d149c2a14bc3a8c2848ce18d57","schema_version":"1.0","event_id":"sha256:c15178299b9484b027587e1540398286b4b0c2d149c2a14bc3a8c2848ce18d57"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VMUCLLLKZHBUO4ACCDSNQFPNLM/bundle.json","state_url":"https://pith.science/pith/VMUCLLLKZHBUO4ACCDSNQFPNLM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VMUCLLLKZHBUO4ACCDSNQFPNLM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-18T21:20:09Z","links":{"resolver":"https://pith.science/pith/VMUCLLLKZHBUO4ACCDSNQFPNLM","bundle":"https://pith.science/pith/VMUCLLLKZHBUO4ACCDSNQFPNLM/bundle.json","state":"https://pith.science/pith/VMUCLLLKZHBUO4ACCDSNQFPNLM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VMUCLLLKZHBUO4ACCDSNQFPNLM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:VMUCLLLKZHBUO4ACCDSNQFPNLM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fa51f2606de6e59ca1cc0eeb6c766735b2853db0874167eacdd98202ae0c9d0b","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-01-31T01:09:32Z","title_canon_sha256":"e2e59553af0da3be4c45976e562d5a37e236d8a86a7d730f7dd339d2fdcac4e5"},"schema_version":"1.0","source":{"id":"2501.18837","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.18837","created_at":"2026-05-17T23:38:12Z"},{"alias_kind":"arxiv_version","alias_value":"2501.18837v1","created_at":"2026-05-17T23:38:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.18837","created_at":"2026-05-17T23:38:12Z"},{"alias_kind":"pith_short_12","alias_value":"VMUCLLLKZHBU","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_16","alias_value":"VMUCLLLKZHBUO4AC","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_8","alias_value":"VMUCLLLK","created_at":"2026-05-18T12:33:37Z"}],"graph_snapshots":[{"event_id":"sha256:c15178299b9484b027587e1540398286b4b0c2d149c2a14bc3a8c2848ce18d57","target":"graph","created_at":"2026-05-17T23:38:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":4,"items":[{"attestation":"unclaimed","claim_id":"C1","kind":"strongest_claim","source":"verdict.strongest_claim","status":"machine_extracted","text":"In over 3,000 estimated hours of red teaming, no red teamer found a universal jailbreak that could extract information from an early classifier-guarded LLM at a similar level of detail to an unguarded model across most target queries."},{"attestation":"unclaimed","claim_id":"C2","kind":"weakest_assumption","source":"verdict.weakest_assumption","status":"machine_extracted","text":"The red teaming process, even at large scale, sufficiently covers the space of possible universal jailbreaks so that absence of success implies robustness rather than incomplete search."},{"attestation":"unclaimed","claim_id":"C3","kind":"one_line_summary","source":"verdict.one_line_summary","status":"machine_extracted","text":"Constitutional Classifiers trained on synthetic data from natural language constitutions defend LLMs against universal jailbreaks, with no successful bypass found in over 3000 hours of red teaming and only minor deployment overhead."},{"attestation":"unclaimed","claim_id":"C4","kind":"headline","source":"verdict.pith_extraction.headline","status":"machine_extracted","text":"Classifiers trained on data from natural language rules block universal jailbreaks in language models."}],"snapshot_sha256":"7e2e55cbb7829d3be64a2d2e70901342201bf9831c899868516a2429e65972cd"},"formal_canon":{"evidence_count":2,"snapshot_sha256":"939a8d5551982341ab6b1830777b1d7f02635fb7e2203f2643637b5ae7c1805f"},"paper":{"abstract_excerpt":"Large language models (LLMs) are vulnerable to universal jailbreaks-prompting strategies that systematically bypass model safeguards and enable users to carry out harmful processes that require many model interactions, like manufacturing illegal substances at scale. To defend against these attacks, we introduce Constitutional Classifiers: safeguards trained on synthetic data, generated by prompting LLMs with natural language rules (i.e., a constitution) specifying permitted and restricted content. In over 3,000 estimated hours of red teaming, no red teamer found a universal jailbreak that coul","authors_text":"Alex Silverstein, Alwin Peng, Amanda Askell, Andy Dau, Anjali Gopal, Catherine Olsson, Cem Anil, Clare O'Hara, Constantin Weisser, Emma Bluemke, Eric Christiansen, Ethan Perez, Euan Ong, Francesco Mosconi, Giulio Zhou, Hoagy Cunningham, Jan Leike, Jared Kaplan, Jerry Wei, Jesse Mu, Joe Benton, Jorrit Kruthoff, Kevin K. Troy, Kevin Lin, Leonard Tang, Linda Petrini, Logan Graham, Logan Howard, Meg Tong, Mrinank Sharma, Nathan Bailey, Nikhil Saxena, Nimit Kalra, Peter Lofgren, Raj Agarwal, Rob Gilson, Ruiqi Zhong, Samir Rajani, Samuel R. Bowman, Scott Goodfriend, Taesung Lee, Tanya Singh, Theodore Sumers","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"Classifiers trained on data from natural language rules block universal jailbreaks in language models.","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-01-31T01:09:32Z","title":"Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teaming"},"references":{"count":160,"internal_anchors":3,"resolved_work":160,"sample":[{"cited_arxiv_id":"2209.07858","doi":"","is_internal_anchor":true,"ref_index":1,"title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","work_id":"1aabd84d-3779-4ba9-ba2f-15ce264a9b1e","year":2023},{"cited_arxiv_id":"2203.02155","doi":"","is_internal_anchor":true,"ref_index":2,"title":"Training language models to follow instructions with human feedback","work_id":"52aff42f-4fa9-4fcf-bdb3-1459b9bebf65","year":2024},{"cited_arxiv_id":"","doi":"","is_internal_anchor":false,"ref_index":3,"title":"C., Lupu, A., Hambro, E., Markosyan, A","work_id":"d6939128-25f0-4e03-8c04-3dd198db6a8e","year":2024},{"cited_arxiv_id":"2310.16789","doi":"","is_internal_anchor":true,"ref_index":4,"title":"Detecting Pretraining Data from Large Language Models","work_id":"1ff0530f-0b29-487b-ba43-d22a740293b1","year":2024},{"cited_arxiv_id":"","doi":"","is_internal_anchor":false,"ref_index":5,"title":"out-of-distribution","work_id":"4c01af3e-8b3f-41d9-b413-ff824ef8995c","year":null}],"snapshot_sha256":"c7d8f53bcb3848f7723dd83a338da5b2517d96228fb8deb46d09ae8c17c110b9"},"source":{"id":"2501.18837","kind":"arxiv","version":1},"verdict":{"created_at":"2026-05-17T22:16:48.439431Z","id":"a7d31d77-0052-499d-90aa-6c5745071dc3","model_set":{"reader":"grok-4.3"},"one_line_summary":"Constitutional Classifiers trained on synthetic data from natural language constitutions defend LLMs against universal jailbreaks, with no successful bypass found in over 3000 hours of red teaming and only minor deployment overhead.","pipeline_version":"pith-pipeline@v0.9.0","pith_extraction_headline":"Classifiers trained on data from natural language rules block universal jailbreaks in language models.","strongest_claim":"In over 3,000 estimated hours of red teaming, no red teamer found a universal jailbreak that could extract information from an early classifier-guarded LLM at a similar level of detail to an unguarded model across most target queries.","weakest_assumption":"The red teaming process, even at large scale, sufficiently covers the space of possible universal jailbreaks so that absence of success implies robustness rather than incomplete search."}},"verdict_id":"a7d31d77-0052-499d-90aa-6c5745071dc3"}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a6b45be8228920bec4778c8ea868acd42426611f4f179a84a70789a1a67b2c3a","target":"record","created_at":"2026-05-17T23:38:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fa51f2606de6e59ca1cc0eeb6c766735b2853db0874167eacdd98202ae0c9d0b","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-01-31T01:09:32Z","title_canon_sha256":"e2e59553af0da3be4c45976e562d5a37e236d8a86a7d730f7dd339d2fdcac4e5"},"schema_version":"1.0","source":{"id":"2501.18837","kind":"arxiv","version":1}},"canonical_sha256":"ab2825ad6ac9c347700210e4d815ed5b1154375600fd2b870c409c3a559e8f34","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ab2825ad6ac9c347700210e4d815ed5b1154375600fd2b870c409c3a559e8f34","first_computed_at":"2026-05-17T23:38:12.856714Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:38:12.856714Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VAAv7Gu9zMYZ2LuUnxQNRl8HwSV+gFGY/knk/zdBWUMTVzYe4dvf9WCZrenwpbwxYT+YYn+G+XBCfPtT9IDxAA==","signature_status":"signed_v1","signed_at":"2026-05-17T23:38:12.857231Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.18837","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a6b45be8228920bec4778c8ea868acd42426611f4f179a84a70789a1a67b2c3a","sha256:c15178299b9484b027587e1540398286b4b0c2d149c2a14bc3a8c2848ce18d57"],"state_sha256":"7720b27db367230c484e0f9c28723d731eacac299a8850d2c48b1650974a1a5f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lLfJO430weGmd/8mIx7OuVG0Bt7hpUugaYhZe/KlEKwSFhTtQJrcexFqhto4oAtewNYhFFduTmtBOrDmRn2KDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-18T21:20:09.972281Z","bundle_sha256":"d591d0e17a3c3a2d94b108cc25210180b6c36b2c9a9cf7ef98a424a8ac55bb32"}}