{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:X4NSOE73KOYAVIX2KCNUQBQNPM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"69f3182b68c675a63343271a11a1cb478f3d3c19cb9f54a82ba416768280c1af","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-16T04:12:16Z","title_canon_sha256":"e57143a4dc5676825a7b62ad43fd20190ba84b6ad98dd735f923e96491a5db28"},"schema_version":"1.0","source":{"id":"2505.10838","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.10838","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"arxiv_version","alias_value":"2505.10838v1","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.10838","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"pith_short_12","alias_value":"X4NSOE73KOYA","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"pith_short_16","alias_value":"X4NSOE73KOYAVIX2","created_at":"2026-07-05T11:04:06Z"},{"alias_kind":"pith_short_8","alias_value":"X4NSOE73","created_at":"2026-07-05T11:04:06Z"}],"graph_snapshots":[{"event_id":"sha256:51b7eef0ae65d0a34ed1a06d5012639a1c19c9d1a9e5089ef4c611685a31a6b5","target":"graph","created_at":"2026-07-05T11:04:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.10838/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Efficient red-teaming method to uncover vulnerabilities in Large Language Models (LLMs) is crucial. While recent attacks often use LLMs as optimizers, the discrete language space make gradient-based methods struggle. We introduce LARGO (Latent Adversarial Reflection through Gradient Optimization), a novel latent self-reflection attack that reasserts the power of gradient-based optimization for generating fluent jailbreaking prompts. By operating within the LLM's continuous latent space, LARGO first optimizes an adversarial latent vector and then recursively call the same LLM to decode the late","authors_text":"Chengzhi Mao, Hao Wang, Ran Li","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-16T04:12:16Z","title":"LARGO: Latent Adversarial Reflection through Gradient Optimization for Jailbreaking LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.10838","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3cf9e539863b4d2c3cc135bed354458b8bbe5a0a1ac46e82aaae019109c714c6","target":"record","created_at":"2026-07-05T11:04:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"69f3182b68c675a63343271a11a1cb478f3d3c19cb9f54a82ba416768280c1af","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-16T04:12:16Z","title_canon_sha256":"e57143a4dc5676825a7b62ad43fd20190ba84b6ad98dd735f923e96491a5db28"},"schema_version":"1.0","source":{"id":"2505.10838","kind":"arxiv","version":1}},"canonical_sha256":"bf1b2713fb53b00aa2fa509b48060d7b16403f9fe7cc9ff46a754a629ead24f2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bf1b2713fb53b00aa2fa509b48060d7b16403f9fe7cc9ff46a754a629ead24f2","first_computed_at":"2026-07-05T11:04:06.908404Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:04:06.908404Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vhHZ9blPeImyz0OzkK0wPI149H5Jz1o2LqoE8HN7kQ3vn25YOCJF0ojJqS9gVZzfDMINaBn5vLOOGyfWsVhlDg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:04:06.909028Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.10838","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3cf9e539863b4d2c3cc135bed354458b8bbe5a0a1ac46e82aaae019109c714c6","sha256:51b7eef0ae65d0a34ed1a06d5012639a1c19c9d1a9e5089ef4c611685a31a6b5"],"state_sha256":"790f4d1f2cc4b047b96faa114e3e1f901ca7941b41e3caf40f5d066e3770fa65"}