{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:YKPYPOCJ7TF247C32R6VAXPX5E","short_pith_number":"pith:YKPYPOCJ","canonical_record":{"source":{"id":"2503.15560","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-18T22:30:17Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"45f19127ca8e564aecb3ba143f17c59d0f8e8408eb6a0da3f7b33704c45b9825","abstract_canon_sha256":"a5e6eb90bccc7e2266bf8811ae258998906dc3eecf3258ac9f68b0b98c955a84"},"schema_version":"1.0"},"canonical_sha256":"c29f87b849fccbae7c5bd47d505df7e90da86d723d7d9f2724c93a2a35207640","source":{"kind":"arxiv","id":"2503.15560","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.15560","created_at":"2026-07-05T10:35:52Z"},{"alias_kind":"arxiv_version","alias_value":"2503.15560v1","created_at":"2026-07-05T10:35:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.15560","created_at":"2026-07-05T10:35:52Z"},{"alias_kind":"pith_short_12","alias_value":"YKPYPOCJ7TF2","created_at":"2026-07-05T10:35:52Z"},{"alias_kind":"pith_short_16","alias_value":"YKPYPOCJ7TF247C3","created_at":"2026-07-05T10:35:52Z"},{"alias_kind":"pith_short_8","alias_value":"YKPYPOCJ","created_at":"2026-07-05T10:35:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:YKPYPOCJ7TF247C32R6VAXPX5E","target":"record","payload":{"canonical_record":{"source":{"id":"2503.15560","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-18T22:30:17Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"45f19127ca8e564aecb3ba143f17c59d0f8e8408eb6a0da3f7b33704c45b9825","abstract_canon_sha256":"a5e6eb90bccc7e2266bf8811ae258998906dc3eecf3258ac9f68b0b98c955a84"},"schema_version":"1.0"},"canonical_sha256":"c29f87b849fccbae7c5bd47d505df7e90da86d723d7d9f2724c93a2a35207640","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:35:52.683092Z","signature_b64":"wlUflwfV2InPV24PCqJiXjZVNUwIodbmvLr3u1Gnv9gHCMH88lDy8PDyDFJHvihud4xGOF1ZWMMaisYFbbpwBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c29f87b849fccbae7c5bd47d505df7e90da86d723d7d9f2724c93a2a35207640","last_reissued_at":"2026-07-05T10:35:52.682562Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:35:52.682562Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.15560","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:35:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O2zEiucALFMGdNn+5bAxraJRUclDmbIN5A1clOtAPs1mWgPlk+sy2diDevVtbjEvsFenpsY1nZVkfCSa+gvECQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T15:56:57.925813Z"},"content_sha256":"2502dea4d8a8b171c744191e342b6e6159afae73f3d3b12561a9af01c9168ef5","schema_version":"1.0","event_id":"sha256:2502dea4d8a8b171c744191e342b6e6159afae73f3d3b12561a9af01c9168ef5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:YKPYPOCJ7TF247C32R6VAXPX5E","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Temporal Context Awareness: A Defense Framework Against Multi-turn Manipulation Attacks on Large Language Models","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Assaf Namer, Prashant Kulkarni","submitted_at":"2025-03-18T22:30:17Z","abstract_excerpt":"Large Language Models (LLMs) are increasingly vulnerable to sophisticated multi-turn manipulation attacks, where adversaries strategically build context through seemingly benign conversational turns to circumvent safety measures and elicit harmful or unauthorized responses. These attacks exploit the temporal nature of dialogue to evade single-turn detection methods, representing a critical security vulnerability with significant implications for real-world deployments.\n  This paper introduces the Temporal Context Awareness (TCA) framework, a novel defense mechanism designed to address this cha"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.15560","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.15560/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:35:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oYHUkgpAbuR9BKpnNlv+CZ1pGkc9RY9vCGFs9GtJeNE/jjWi9k+aXJimKr1hfVnsbJJRkuCbxE3WAl6D4oCJCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T15:56:57.926205Z"},"content_sha256":"9bb5453e474d3046261eeba9930d8ce59c9c0bc84133735657a6c4e57740fd31","schema_version":"1.0","event_id":"sha256:9bb5453e474d3046261eeba9930d8ce59c9c0bc84133735657a6c4e57740fd31"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YKPYPOCJ7TF247C32R6VAXPX5E/bundle.json","state_url":"https://pith.science/pith/YKPYPOCJ7TF247C32R6VAXPX5E/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YKPYPOCJ7TF247C32R6VAXPX5E/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T15:56:57Z","links":{"resolver":"https://pith.science/pith/YKPYPOCJ7TF247C32R6VAXPX5E","bundle":"https://pith.science/pith/YKPYPOCJ7TF247C32R6VAXPX5E/bundle.json","state":"https://pith.science/pith/YKPYPOCJ7TF247C32R6VAXPX5E/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YKPYPOCJ7TF247C32R6VAXPX5E/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:YKPYPOCJ7TF247C32R6VAXPX5E","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a5e6eb90bccc7e2266bf8811ae258998906dc3eecf3258ac9f68b0b98c955a84","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-18T22:30:17Z","title_canon_sha256":"45f19127ca8e564aecb3ba143f17c59d0f8e8408eb6a0da3f7b33704c45b9825"},"schema_version":"1.0","source":{"id":"2503.15560","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.15560","created_at":"2026-07-05T10:35:52Z"},{"alias_kind":"arxiv_version","alias_value":"2503.15560v1","created_at":"2026-07-05T10:35:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.15560","created_at":"2026-07-05T10:35:52Z"},{"alias_kind":"pith_short_12","alias_value":"YKPYPOCJ7TF2","created_at":"2026-07-05T10:35:52Z"},{"alias_kind":"pith_short_16","alias_value":"YKPYPOCJ7TF247C3","created_at":"2026-07-05T10:35:52Z"},{"alias_kind":"pith_short_8","alias_value":"YKPYPOCJ","created_at":"2026-07-05T10:35:52Z"}],"graph_snapshots":[{"event_id":"sha256:9bb5453e474d3046261eeba9930d8ce59c9c0bc84133735657a6c4e57740fd31","target":"graph","created_at":"2026-07-05T10:35:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.15560/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) are increasingly vulnerable to sophisticated multi-turn manipulation attacks, where adversaries strategically build context through seemingly benign conversational turns to circumvent safety measures and elicit harmful or unauthorized responses. These attacks exploit the temporal nature of dialogue to evade single-turn detection methods, representing a critical security vulnerability with significant implications for real-world deployments.\n  This paper introduces the Temporal Context Awareness (TCA) framework, a novel defense mechanism designed to address this cha","authors_text":"Assaf Namer, Prashant Kulkarni","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-18T22:30:17Z","title":"Temporal Context Awareness: A Defense Framework Against Multi-turn Manipulation Attacks on Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.15560","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2502dea4d8a8b171c744191e342b6e6159afae73f3d3b12561a9af01c9168ef5","target":"record","created_at":"2026-07-05T10:35:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a5e6eb90bccc7e2266bf8811ae258998906dc3eecf3258ac9f68b0b98c955a84","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-18T22:30:17Z","title_canon_sha256":"45f19127ca8e564aecb3ba143f17c59d0f8e8408eb6a0da3f7b33704c45b9825"},"schema_version":"1.0","source":{"id":"2503.15560","kind":"arxiv","version":1}},"canonical_sha256":"c29f87b849fccbae7c5bd47d505df7e90da86d723d7d9f2724c93a2a35207640","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c29f87b849fccbae7c5bd47d505df7e90da86d723d7d9f2724c93a2a35207640","first_computed_at":"2026-07-05T10:35:52.682562Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:35:52.682562Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"wlUflwfV2InPV24PCqJiXjZVNUwIodbmvLr3u1Gnv9gHCMH88lDy8PDyDFJHvihud4xGOF1ZWMMaisYFbbpwBw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:35:52.683092Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.15560","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2502dea4d8a8b171c744191e342b6e6159afae73f3d3b12561a9af01c9168ef5","sha256:9bb5453e474d3046261eeba9930d8ce59c9c0bc84133735657a6c4e57740fd31"],"state_sha256":"5f57719e5f2585c392514ddb50c12f6a53ec8f780e6fbec6917ffef50f67a62b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F4BjLVC+ffxGP0QwD6ZlyAe5JDbbgkpxvQSuJieZE1cNtxlqnRshFpOkaZLnwBDAKm+8NUgh1eT+mk8aE9SpCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T15:56:57.928598Z","bundle_sha256":"5b8f0e269b00ca3b6ff44ac97a31ac4cfd08893600d473a37e24c8dc94f7e4f7"}}