{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:Y43GHIV445LYYOCURLAXX65ZS7","short_pith_number":"pith:Y43GHIV4","canonical_record":{"source":{"id":"2403.04957","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-03-07T23:46:20Z","cross_cats_sorted":[],"title_canon_sha256":"9d2511eca603a845f13d0cf78db5819de3548a54215cbe4b5f7a1dd138cdbbf2","abstract_canon_sha256":"683e2bc30582a9b079f0b92f1dfeee100b6aa4ec158d4840d8d0af5b0106cd8e"},"schema_version":"1.0"},"canonical_sha256":"c73663a2bce7578c38548ac17bfbb997c48b8e5b1cb18f93099aaa6df6b8b5ce","source":{"kind":"arxiv","id":"2403.04957","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.04957","created_at":"2026-07-05T07:53:36Z"},{"alias_kind":"arxiv_version","alias_value":"2403.04957v1","created_at":"2026-07-05T07:53:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.04957","created_at":"2026-07-05T07:53:36Z"},{"alias_kind":"pith_short_12","alias_value":"Y43GHIV445LY","created_at":"2026-07-05T07:53:36Z"},{"alias_kind":"pith_short_16","alias_value":"Y43GHIV445LYYOCU","created_at":"2026-07-05T07:53:36Z"},{"alias_kind":"pith_short_8","alias_value":"Y43GHIV4","created_at":"2026-07-05T07:53:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:Y43GHIV445LYYOCURLAXX65ZS7","target":"record","payload":{"canonical_record":{"source":{"id":"2403.04957","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-03-07T23:46:20Z","cross_cats_sorted":[],"title_canon_sha256":"9d2511eca603a845f13d0cf78db5819de3548a54215cbe4b5f7a1dd138cdbbf2","abstract_canon_sha256":"683e2bc30582a9b079f0b92f1dfeee100b6aa4ec158d4840d8d0af5b0106cd8e"},"schema_version":"1.0"},"canonical_sha256":"c73663a2bce7578c38548ac17bfbb997c48b8e5b1cb18f93099aaa6df6b8b5ce","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:53:36.517761Z","signature_b64":"N8bSdSsvsZha1nDxdpF2mHb61g9bxIRJVdqVAxsIpCo7CpVBYjh6KMFgqozptHNomXM40gdwWyuYwtdwYRxoAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c73663a2bce7578c38548ac17bfbb997c48b8e5b1cb18f93099aaa6df6b8b5ce","last_reissued_at":"2026-07-05T07:53:36.517249Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:53:36.517249Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.04957","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:53:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7mr5D1jeYKIOZwFlajSGXHxnQVKOE04/OHWeBHY9rdRV1GmBBnctmKX1SEj5WD2otUPeSr+Wg/QdPiGYHtaTCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T22:47:16.657811Z"},"content_sha256":"1cc790ed5f3b1d9c7ac15a609a535db08c976436b5229f072bd4e0748ee3f60b","schema_version":"1.0","event_id":"sha256:1cc790ed5f3b1d9c7ac15a609a535db08c976436b5229f072bd4e0748ee3f60b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:Y43GHIV445LYYOCURLAXX65ZS7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.AI","authors_text":"Chaowei Xiao, Ning Zhang, Xiaogeng Liu, Yizhe Zhang, Zhiyuan Yu","submitted_at":"2024-03-07T23:46:20Z","abstract_excerpt":"Large Language Models (LLMs) excel in processing and generating human language, powered by their ability to interpret and follow instructions. However, their capabilities can be exploited through prompt injection attacks. These attacks manipulate LLM-integrated applications into producing responses aligned with the attacker's injected content, deviating from the user's actual requests. The substantial risks posed by these attacks underscore the need for a thorough understanding of the threats. Yet, research in this area faces challenges due to the lack of a unified goal for such attacks and th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.04957","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.04957/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:53:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IA6QDp7/Aphgmoi0P7sdUyB17oodAaYcRxv4cMhZO1AGAd/mYhLIRUkn05atw09Zy4Ek025V+IKoi5jcjT8XDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T22:47:16.658357Z"},"content_sha256":"37888efd4213e69e839785416a80e2a422e6cfe8df93fdfdd4498a225b7b124d","schema_version":"1.0","event_id":"sha256:37888efd4213e69e839785416a80e2a422e6cfe8df93fdfdd4498a225b7b124d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Y43GHIV445LYYOCURLAXX65ZS7/bundle.json","state_url":"https://pith.science/pith/Y43GHIV445LYYOCURLAXX65ZS7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Y43GHIV445LYYOCURLAXX65ZS7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T22:47:16Z","links":{"resolver":"https://pith.science/pith/Y43GHIV445LYYOCURLAXX65ZS7","bundle":"https://pith.science/pith/Y43GHIV445LYYOCURLAXX65ZS7/bundle.json","state":"https://pith.science/pith/Y43GHIV445LYYOCURLAXX65ZS7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Y43GHIV445LYYOCURLAXX65ZS7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:Y43GHIV445LYYOCURLAXX65ZS7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"683e2bc30582a9b079f0b92f1dfeee100b6aa4ec158d4840d8d0af5b0106cd8e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-03-07T23:46:20Z","title_canon_sha256":"9d2511eca603a845f13d0cf78db5819de3548a54215cbe4b5f7a1dd138cdbbf2"},"schema_version":"1.0","source":{"id":"2403.04957","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.04957","created_at":"2026-07-05T07:53:36Z"},{"alias_kind":"arxiv_version","alias_value":"2403.04957v1","created_at":"2026-07-05T07:53:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.04957","created_at":"2026-07-05T07:53:36Z"},{"alias_kind":"pith_short_12","alias_value":"Y43GHIV445LY","created_at":"2026-07-05T07:53:36Z"},{"alias_kind":"pith_short_16","alias_value":"Y43GHIV445LYYOCU","created_at":"2026-07-05T07:53:36Z"},{"alias_kind":"pith_short_8","alias_value":"Y43GHIV4","created_at":"2026-07-05T07:53:36Z"}],"graph_snapshots":[{"event_id":"sha256:37888efd4213e69e839785416a80e2a422e6cfe8df93fdfdd4498a225b7b124d","target":"graph","created_at":"2026-07-05T07:53:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.04957/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) excel in processing and generating human language, powered by their ability to interpret and follow instructions. However, their capabilities can be exploited through prompt injection attacks. These attacks manipulate LLM-integrated applications into producing responses aligned with the attacker's injected content, deviating from the user's actual requests. The substantial risks posed by these attacks underscore the need for a thorough understanding of the threats. Yet, research in this area faces challenges due to the lack of a unified goal for such attacks and th","authors_text":"Chaowei Xiao, Ning Zhang, Xiaogeng Liu, Yizhe Zhang, Zhiyuan Yu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.04957","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1cc790ed5f3b1d9c7ac15a609a535db08c976436b5229f072bd4e0748ee3f60b","target":"record","created_at":"2026-07-05T07:53:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"683e2bc30582a9b079f0b92f1dfeee100b6aa4ec158d4840d8d0af5b0106cd8e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2024-03-07T23:46:20Z","title_canon_sha256":"9d2511eca603a845f13d0cf78db5819de3548a54215cbe4b5f7a1dd138cdbbf2"},"schema_version":"1.0","source":{"id":"2403.04957","kind":"arxiv","version":1}},"canonical_sha256":"c73663a2bce7578c38548ac17bfbb997c48b8e5b1cb18f93099aaa6df6b8b5ce","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c73663a2bce7578c38548ac17bfbb997c48b8e5b1cb18f93099aaa6df6b8b5ce","first_computed_at":"2026-07-05T07:53:36.517249Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:53:36.517249Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"N8bSdSsvsZha1nDxdpF2mHb61g9bxIRJVdqVAxsIpCo7CpVBYjh6KMFgqozptHNomXM40gdwWyuYwtdwYRxoAw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:53:36.517761Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.04957","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1cc790ed5f3b1d9c7ac15a609a535db08c976436b5229f072bd4e0748ee3f60b","sha256:37888efd4213e69e839785416a80e2a422e6cfe8df93fdfdd4498a225b7b124d"],"state_sha256":"b0908575ba3769306a5a66ff9c6db02bd230aedb0a0843efaf8e88296c520d47"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zNr2AEkLZdDg1Iqw9+yotWhe5V5iyzrmq20cJwqk4eQxVI65YJGA4ZNLfjLvNBH9APcmca2K+g3bMlE4T7/GCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T22:47:16.662136Z","bundle_sha256":"158e039a7ac812a65a23de801f8ea54b65ba54a4972293e33c2ceb3704813363"}}