{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:WWOG7BNK6NB6T4WLEW7GAYPSVZ","short_pith_number":"pith:WWOG7BNK","canonical_record":{"source":{"id":"2510.15476","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-10-17T09:38:54Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"d0e51901e8c96a2c29d7a2cf494d08b49246c8051b6b9f3bd6be922ee7c2fb70","abstract_canon_sha256":"fad9a3ae32ae6ee9d21e2a60d342aecbd40097be9b4ddc609dfcda68079461c2"},"schema_version":"1.0"},"canonical_sha256":"b59c6f85aaf343e9f2cb25be6061f2ae62cd8d58c8b5889b6c8e419b3cad1f7c","source":{"kind":"arxiv","id":"2510.15476","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2510.15476","created_at":"2026-07-07T02:17:12Z"},{"alias_kind":"arxiv_version","alias_value":"2510.15476v3","created_at":"2026-07-07T02:17:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2510.15476","created_at":"2026-07-07T02:17:12Z"},{"alias_kind":"pith_short_12","alias_value":"WWOG7BNK6NB6","created_at":"2026-07-07T02:17:12Z"},{"alias_kind":"pith_short_16","alias_value":"WWOG7BNK6NB6T4WL","created_at":"2026-07-07T02:17:12Z"},{"alias_kind":"pith_short_8","alias_value":"WWOG7BNK","created_at":"2026-07-07T02:17:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:WWOG7BNK6NB6T4WLEW7GAYPSVZ","target":"record","payload":{"canonical_record":{"source":{"id":"2510.15476","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-10-17T09:38:54Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"d0e51901e8c96a2c29d7a2cf494d08b49246c8051b6b9f3bd6be922ee7c2fb70","abstract_canon_sha256":"fad9a3ae32ae6ee9d21e2a60d342aecbd40097be9b4ddc609dfcda68079461c2"},"schema_version":"1.0"},"canonical_sha256":"b59c6f85aaf343e9f2cb25be6061f2ae62cd8d58c8b5889b6c8e419b3cad1f7c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-07T02:17:12.100223Z","signature_b64":"IHIxnPJign69XX7H+N3JBPaHADnoqvVrJQkS/5ZdWuE3nPFvgmz2aX47TOSPmJavc7yqQ1x8zwHldZ+OYZuSBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b59c6f85aaf343e9f2cb25be6061f2ae62cd8d58c8b5889b6c8e419b3cad1f7c","last_reissued_at":"2026-07-07T02:17:12.099279Z","signature_status":"signed_v1","first_computed_at":"2026-07-07T02:17:12.099279Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2510.15476","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T02:17:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pnw2dQAjQjZUhqpg91tnNiHxtqiZZIVVlBB/PCXtPP5NwPr+krp6tN6EalLKL1CKaezQTlxlhHdzZmWqS7v5BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T05:01:34.466194Z"},"content_sha256":"0a2fb247fdee41822c2db76513209ceb52968d95e4509c7d3e37470bc358dedd","schema_version":"1.0","event_id":"sha256:0a2fb247fdee41822c2db76513209ceb52968d95e4509c7d3e37470bc358dedd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:WWOG7BNK6NB6T4WLEW7GAYPSVZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Ali Arastehfard, Hanbin Hong, Heqing Huang, Jingyu Zhang, Nima Naderloui, Shenao Yan, Shuang Wu, Shuya Feng, Yuan Hong","submitted_at":"2025-10-17T09:38:54Z","abstract_excerpt":"Large Language Models (LLMs) are increasingly used as interfaces to information, code, and real-world services, making prompt-level security failures a practical concern. Although jailbreak attacks, defenses, datasets, and automated judgers have advanced rapidly, evaluation remains fragmented across threat models, access assumptions, cost budgets, datasets, and success criteria. This makes reported attack success rates and defense gains hard to compare. This SoK systematizes LLM prompt security across concepts, data, tooling, and measurement. We propose linked taxonomies for jailbreak attacks,"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2510.15476","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2510.15476/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T02:17:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F1caod2JNMZ0rl77Kr9MLF3loDh161GkPnVFiPXFzcmNanxpEHCw11DoJSq+kh8aOMmpPmy8lI4ShmwYptsmCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T05:01:34.466594Z"},"content_sha256":"4bdba8c96cf049ab23f8df80d92504d5b78e820df578928a010ebcacf524d627","schema_version":"1.0","event_id":"sha256:4bdba8c96cf049ab23f8df80d92504d5b78e820df578928a010ebcacf524d627"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WWOG7BNK6NB6T4WLEW7GAYPSVZ/bundle.json","state_url":"https://pith.science/pith/WWOG7BNK6NB6T4WLEW7GAYPSVZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WWOG7BNK6NB6T4WLEW7GAYPSVZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-09T05:01:34Z","links":{"resolver":"https://pith.science/pith/WWOG7BNK6NB6T4WLEW7GAYPSVZ","bundle":"https://pith.science/pith/WWOG7BNK6NB6T4WLEW7GAYPSVZ/bundle.json","state":"https://pith.science/pith/WWOG7BNK6NB6T4WLEW7GAYPSVZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WWOG7BNK6NB6T4WLEW7GAYPSVZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:WWOG7BNK6NB6T4WLEW7GAYPSVZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fad9a3ae32ae6ee9d21e2a60d342aecbd40097be9b4ddc609dfcda68079461c2","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-10-17T09:38:54Z","title_canon_sha256":"d0e51901e8c96a2c29d7a2cf494d08b49246c8051b6b9f3bd6be922ee7c2fb70"},"schema_version":"1.0","source":{"id":"2510.15476","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2510.15476","created_at":"2026-07-07T02:17:12Z"},{"alias_kind":"arxiv_version","alias_value":"2510.15476v3","created_at":"2026-07-07T02:17:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2510.15476","created_at":"2026-07-07T02:17:12Z"},{"alias_kind":"pith_short_12","alias_value":"WWOG7BNK6NB6","created_at":"2026-07-07T02:17:12Z"},{"alias_kind":"pith_short_16","alias_value":"WWOG7BNK6NB6T4WL","created_at":"2026-07-07T02:17:12Z"},{"alias_kind":"pith_short_8","alias_value":"WWOG7BNK","created_at":"2026-07-07T02:17:12Z"}],"graph_snapshots":[{"event_id":"sha256:4bdba8c96cf049ab23f8df80d92504d5b78e820df578928a010ebcacf524d627","target":"graph","created_at":"2026-07-07T02:17:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2510.15476/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) are increasingly used as interfaces to information, code, and real-world services, making prompt-level security failures a practical concern. Although jailbreak attacks, defenses, datasets, and automated judgers have advanced rapidly, evaluation remains fragmented across threat models, access assumptions, cost budgets, datasets, and success criteria. This makes reported attack success rates and defense gains hard to compare. This SoK systematizes LLM prompt security across concepts, data, tooling, and measurement. We propose linked taxonomies for jailbreak attacks,","authors_text":"Ali Arastehfard, Hanbin Hong, Heqing Huang, Jingyu Zhang, Nima Naderloui, Shenao Yan, Shuang Wu, Shuya Feng, Yuan Hong","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2510.15476","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0a2fb247fdee41822c2db76513209ceb52968d95e4509c7d3e37470bc358dedd","target":"record","created_at":"2026-07-07T02:17:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fad9a3ae32ae6ee9d21e2a60d342aecbd40097be9b4ddc609dfcda68079461c2","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-10-17T09:38:54Z","title_canon_sha256":"d0e51901e8c96a2c29d7a2cf494d08b49246c8051b6b9f3bd6be922ee7c2fb70"},"schema_version":"1.0","source":{"id":"2510.15476","kind":"arxiv","version":3}},"canonical_sha256":"b59c6f85aaf343e9f2cb25be6061f2ae62cd8d58c8b5889b6c8e419b3cad1f7c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b59c6f85aaf343e9f2cb25be6061f2ae62cd8d58c8b5889b6c8e419b3cad1f7c","first_computed_at":"2026-07-07T02:17:12.099279Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-07T02:17:12.099279Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IHIxnPJign69XX7H+N3JBPaHADnoqvVrJQkS/5ZdWuE3nPFvgmz2aX47TOSPmJavc7yqQ1x8zwHldZ+OYZuSBA==","signature_status":"signed_v1","signed_at":"2026-07-07T02:17:12.100223Z","signed_message":"canonical_sha256_bytes"},"source_id":"2510.15476","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0a2fb247fdee41822c2db76513209ceb52968d95e4509c7d3e37470bc358dedd","sha256:4bdba8c96cf049ab23f8df80d92504d5b78e820df578928a010ebcacf524d627"],"state_sha256":"d2c61dd938fe14f5a48604ace9863c166413986000cc2bd7f5139a6b000df14d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cz73E/rE5i3aGoXJ8Ol6drr7l2ro/JhIWnMPVYcAzIq71VX1DiceBdFzgTCoWqPSqR7U/7v86uvKdjHtEbNeDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-09T05:01:34.468567Z","bundle_sha256":"2b040d5dd2aa62e26ded3952620ce1105ea997d4de0d6b83d38eb188c5179cea"}}