{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:X4NSOE73KOYAVIX2KCNUQBQNPM","short_pith_number":"pith:X4NSOE73","canonical_record":{"source":{"id":"2505.10838","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-16T04:12:16Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"e57143a4dc5676825a7b62ad43fd20190ba84b6ad98dd735f923e96491a5db28","abstract_canon_sha256":"69f3182b68c675a63343271a11a1cb478f3d3c19cb9f54a82ba416768280c1af"},"schema_version":"1.0"},"canonical_sha256":"bf1b2713fb53b00aa2fa509b48060d7b16403f9fe7cc9ff46a754a629ead24f2","source":{"kind":"arxiv","id":"2505.10838","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.10838","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"arxiv_version","alias_value":"2505.10838v1","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.10838","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"pith_short_12","alias_value":"X4NSOE73KOYA","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"pith_short_16","alias_value":"X4NSOE73KOYAVIX2","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"pith_short_8","alias_value":"X4NSOE73","created_at":"2026-07-05T11:04:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:X4NSOE73KOYAVIX2KCNUQBQNPM","target":"record","payload":{"canonical_record":{"source":{"id":"2505.10838","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-16T04:12:16Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"e57143a4dc5676825a7b62ad43fd20190ba84b6ad98dd735f923e96491a5db28","abstract_canon_sha256":"69f3182b68c675a63343271a11a1cb478f3d3c19cb9f54a82ba416768280c1af"},"schema_version":"1.0"},"canonical_sha256":"bf1b2713fb53b00aa2fa509b48060d7b16403f9fe7cc9ff46a754a629ead24f2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:04:06.909028Z","signature_b64":"vhHZ9blPeImyz0OzkK0wPI149H5Jz1o2LqoE8HN7kQ3vn25YOCJF0ojJqS9gVZzfDMINaBn5vLOOGyfWsVhlDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bf1b2713fb53b00aa2fa509b48060d7b16403f9fe7cc9ff46a754a629ead24f2","last_reissued_at":"2026-07-05T11:04:06.908404Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:04:06.908404Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.10838","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:04:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"njMOBwyP7zCnTEqMKl+HOerAKZBzg9jNf2ZeKdvO4JucOedjFAXF2tFL0GfV8/C423WlNufGNF03aEABQ7q1Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T11:43:44.256726Z"},"content_sha256":"3cf9e539863b4d2c3cc135bed354458b8bbe5a0a1ac46e82aaae019109c714c6","schema_version":"1.0","event_id":"sha256:3cf9e539863b4d2c3cc135bed354458b8bbe5a0a1ac46e82aaae019109c714c6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:X4NSOE73KOYAVIX2KCNUQBQNPM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LARGO: Latent Adversarial Reflection through Gradient Optimization for Jailbreaking LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Chengzhi Mao, Hao Wang, Ran Li","submitted_at":"2025-05-16T04:12:16Z","abstract_excerpt":"Efficient red-teaming method to uncover vulnerabilities in Large Language Models (LLMs) is crucial. While recent attacks often use LLMs as optimizers, the discrete language space make gradient-based methods struggle. We introduce LARGO (Latent Adversarial Reflection through Gradient Optimization), a novel latent self-reflection attack that reasserts the power of gradient-based optimization for generating fluent jailbreaking prompts. By operating within the LLM's continuous latent space, LARGO first optimizes an adversarial latent vector and then recursively call the same LLM to decode the late"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.10838","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.10838/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:04:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KecujJV66u1nma3b6IbHwaShhDK+yxOrd6uN2McC+IqQGhqkqXxBBwXKb5nAYB9/L092bsjB2GmCQ26c+shPAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T11:43:44.257126Z"},"content_sha256":"51b7eef0ae65d0a34ed1a06d5012639a1c19c9d1a9e5089ef4c611685a31a6b5","schema_version":"1.0","event_id":"sha256:51b7eef0ae65d0a34ed1a06d5012639a1c19c9d1a9e5089ef4c611685a31a6b5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/X4NSOE73KOYAVIX2KCNUQBQNPM/bundle.json","state_url":"https://pith.science/pith/X4NSOE73KOYAVIX2KCNUQBQNPM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/X4NSOE73KOYAVIX2KCNUQBQNPM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T11:43:44Z","links":{"resolver":"https://pith.science/pith/X4NSOE73KOYAVIX2KCNUQBQNPM","bundle":"https://pith.science/pith/X4NSOE73KOYAVIX2KCNUQBQNPM/bundle.json","state":"https://pith.science/pith/X4NSOE73KOYAVIX2KCNUQBQNPM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/X4NSOE73KOYAVIX2KCNUQBQNPM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:X4NSOE73KOYAVIX2KCNUQBQNPM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"69f3182b68c675a63343271a11a1cb478f3d3c19cb9f54a82ba416768280c1af","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-16T04:12:16Z","title_canon_sha256":"e57143a4dc5676825a7b62ad43fd20190ba84b6ad98dd735f923e96491a5db28"},"schema_version":"1.0","source":{"id":"2505.10838","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.10838","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"arxiv_version","alias_value":"2505.10838v1","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.10838","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"pith_short_12","alias_value":"X4NSOE73KOYA","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"pith_short_16","alias_value":"X4NSOE73KOYAVIX2","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"pith_short_8","alias_value":"X4NSOE73","created_at":"2026-07-05T11:04:06Z"}],"graph_snapshots":[{"event_id":"sha256:51b7eef0ae65d0a34ed1a06d5012639a1c19c9d1a9e5089ef4c611685a31a6b5","target":"graph","created_at":"2026-07-05T11:04:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.10838/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Efficient red-teaming method to uncover vulnerabilities in Large Language Models (LLMs) is crucial. While recent attacks often use LLMs as optimizers, the discrete language space make gradient-based methods struggle. We introduce LARGO (Latent Adversarial Reflection through Gradient Optimization), a novel latent self-reflection attack that reasserts the power of gradient-based optimization for generating fluent jailbreaking prompts. By operating within the LLM's continuous latent space, LARGO first optimizes an adversarial latent vector and then recursively call the same LLM to decode the late","authors_text":"Chengzhi Mao, Hao Wang, Ran Li","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-16T04:12:16Z","title":"LARGO: Latent Adversarial Reflection through Gradient Optimization for Jailbreaking LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.10838","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3cf9e539863b4d2c3cc135bed354458b8bbe5a0a1ac46e82aaae019109c714c6","target":"record","created_at":"2026-07-05T11:04:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"69f3182b68c675a63343271a11a1cb478f3d3c19cb9f54a82ba416768280c1af","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-16T04:12:16Z","title_canon_sha256":"e57143a4dc5676825a7b62ad43fd20190ba84b6ad98dd735f923e96491a5db28"},"schema_version":"1.0","source":{"id":"2505.10838","kind":"arxiv","version":1}},"canonical_sha256":"bf1b2713fb53b00aa2fa509b48060d7b16403f9fe7cc9ff46a754a629ead24f2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bf1b2713fb53b00aa2fa509b48060d7b16403f9fe7cc9ff46a754a629ead24f2","first_computed_at":"2026-07-05T11:04:06.908404Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:04:06.908404Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vhHZ9blPeImyz0OzkK0wPI149H5Jz1o2LqoE8HN7kQ3vn25YOCJF0ojJqS9gVZzfDMINaBn5vLOOGyfWsVhlDg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:04:06.909028Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.10838","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3cf9e539863b4d2c3cc135bed354458b8bbe5a0a1ac46e82aaae019109c714c6","sha256:51b7eef0ae65d0a34ed1a06d5012639a1c19c9d1a9e5089ef4c611685a31a6b5"],"state_sha256":"790f4d1f2cc4b047b96faa114e3e1f901ca7941b41e3caf40f5d066e3770fa65"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zUaN6w5sJ0a6e8AR+vXhxP3b8rbkqRnW0cKrCGpZhfW2A2QTiP/BRIYLobQo7qTI5t8egv9XZpAf3P8TJfETCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T11:43:44.261122Z","bundle_sha256":"05dbc70fd1ac6fb941388edd2d22ed15353106d1a0bc3745fa5fc051fd8c9643"}}