{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:YP2IN6J3ILPIKUWMSBYXBE4MU7","short_pith_number":"pith:YP2IN6J3","canonical_record":{"source":{"id":"2412.08201","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-11T08:44:15Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"521f4fa8ee4ffc95afe947cfe7675ff965b6c3ca5329a81d5426440014efd790","abstract_canon_sha256":"e7dbcf765d112bb17d8c68a820a80676017cc69eb7e18510c0f73a7b2d3b826a"},"schema_version":"1.0"},"canonical_sha256":"c3f486f93b42de8552cc907170938ca7f71ebcb5f090bddb53343b7828cb245c","source":{"kind":"arxiv","id":"2412.08201","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.08201","created_at":"2026-07-05T09:47:45Z"},{"alias_kind":"arxiv_version","alias_value":"2412.08201v1","created_at":"2026-07-05T09:47:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.08201","created_at":"2026-07-05T09:47:45Z"},{"alias_kind":"pith_short_12","alias_value":"YP2IN6J3ILPI","created_at":"2026-07-05T09:47:45Z"},{"alias_kind":"pith_short_16","alias_value":"YP2IN6J3ILPIKUWM","created_at":"2026-07-05T09:47:45Z"},{"alias_kind":"pith_short_8","alias_value":"YP2IN6J3","created_at":"2026-07-05T09:47:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:YP2IN6J3ILPIKUWMSBYXBE4MU7","target":"record","payload":{"canonical_record":{"source":{"id":"2412.08201","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-11T08:44:15Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"521f4fa8ee4ffc95afe947cfe7675ff965b6c3ca5329a81d5426440014efd790","abstract_canon_sha256":"e7dbcf765d112bb17d8c68a820a80676017cc69eb7e18510c0f73a7b2d3b826a"},"schema_version":"1.0"},"canonical_sha256":"c3f486f93b42de8552cc907170938ca7f71ebcb5f090bddb53343b7828cb245c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:47:45.931751Z","signature_b64":"XIuKzd+EpfMWXf2ugwFR7DFuhmbfuzqloJyn9IUNxdqNhfvn35SWHSBiDEV506KkuxGm5fT07FNvACaFUJh3CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c3f486f93b42de8552cc907170938ca7f71ebcb5f090bddb53343b7828cb245c","last_reissued_at":"2026-07-05T09:47:45.931353Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:47:45.931353Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.08201","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:47:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Dbi88YUcw5SG1Q4ORvb555Cz/hHD/xTnZXdujHxLf2PbrnuQ/qSbl+P/VW5ioK5NM7HmlKJ1dYHAsvSqJzH6CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T17:35:00.123680Z"},"content_sha256":"2b9c525a701ff1397a20ef21a8adc4a9e7731d8c1fa7afae0ebcfce0056f3bde","schema_version":"1.0","event_id":"sha256:2b9c525a701ff1397a20ef21a8adc4a9e7731d8c1fa7afae0ebcfce0056f3bde"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:YP2IN6J3ILPIKUWMSBYXBE4MU7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Model-Editing-Based Jailbreak against Safety-aligned Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Haoyu Wang, Kailong Wang, Ling Shi, Yuxi Li, Zhibo Zhang","submitted_at":"2024-12-11T08:44:15Z","abstract_excerpt":"Large Language Models (LLMs) have transformed numerous fields by enabling advanced natural language interactions but remain susceptible to critical vulnerabilities, particularly jailbreak attacks. Current jailbreak techniques, while effective, often depend on input modifications, making them detectable and limiting their stealth and scalability. This paper presents Targeted Model Editing (TME), a novel white-box approach that bypasses safety filters by minimally altering internal model structures while preserving the model's intended functionalities. TME identifies and removes safety-critical "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.08201","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.08201/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:47:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OI5GrEC+w0Qt7P56T+eJ0IX4NfXYqL+xPHNoihARNTanqZk35kFnLjKQ68elzsJj+MOM1j/7bi+IEjPr1Uq1BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T17:35:00.124214Z"},"content_sha256":"8d569df51c88698ac13613fa585023ccf43b9457a895d8648aaf374b3876aa34","schema_version":"1.0","event_id":"sha256:8d569df51c88698ac13613fa585023ccf43b9457a895d8648aaf374b3876aa34"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YP2IN6J3ILPIKUWMSBYXBE4MU7/bundle.json","state_url":"https://pith.science/pith/YP2IN6J3ILPIKUWMSBYXBE4MU7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YP2IN6J3ILPIKUWMSBYXBE4MU7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T17:35:00Z","links":{"resolver":"https://pith.science/pith/YP2IN6J3ILPIKUWMSBYXBE4MU7","bundle":"https://pith.science/pith/YP2IN6J3ILPIKUWMSBYXBE4MU7/bundle.json","state":"https://pith.science/pith/YP2IN6J3ILPIKUWMSBYXBE4MU7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YP2IN6J3ILPIKUWMSBYXBE4MU7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:YP2IN6J3ILPIKUWMSBYXBE4MU7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e7dbcf765d112bb17d8c68a820a80676017cc69eb7e18510c0f73a7b2d3b826a","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-11T08:44:15Z","title_canon_sha256":"521f4fa8ee4ffc95afe947cfe7675ff965b6c3ca5329a81d5426440014efd790"},"schema_version":"1.0","source":{"id":"2412.08201","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.08201","created_at":"2026-07-05T09:47:45Z"},{"alias_kind":"arxiv_version","alias_value":"2412.08201v1","created_at":"2026-07-05T09:47:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.08201","created_at":"2026-07-05T09:47:45Z"},{"alias_kind":"pith_short_12","alias_value":"YP2IN6J3ILPI","created_at":"2026-07-05T09:47:45Z"},{"alias_kind":"pith_short_16","alias_value":"YP2IN6J3ILPIKUWM","created_at":"2026-07-05T09:47:45Z"},{"alias_kind":"pith_short_8","alias_value":"YP2IN6J3","created_at":"2026-07-05T09:47:45Z"}],"graph_snapshots":[{"event_id":"sha256:8d569df51c88698ac13613fa585023ccf43b9457a895d8648aaf374b3876aa34","target":"graph","created_at":"2026-07-05T09:47:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.08201/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have transformed numerous fields by enabling advanced natural language interactions but remain susceptible to critical vulnerabilities, particularly jailbreak attacks. Current jailbreak techniques, while effective, often depend on input modifications, making them detectable and limiting their stealth and scalability. This paper presents Targeted Model Editing (TME), a novel white-box approach that bypasses safety filters by minimally altering internal model structures while preserving the model's intended functionalities. TME identifies and removes safety-critical ","authors_text":"Haoyu Wang, Kailong Wang, Ling Shi, Yuxi Li, Zhibo Zhang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-11T08:44:15Z","title":"Model-Editing-Based Jailbreak against Safety-aligned Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.08201","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2b9c525a701ff1397a20ef21a8adc4a9e7731d8c1fa7afae0ebcfce0056f3bde","target":"record","created_at":"2026-07-05T09:47:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e7dbcf765d112bb17d8c68a820a80676017cc69eb7e18510c0f73a7b2d3b826a","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-11T08:44:15Z","title_canon_sha256":"521f4fa8ee4ffc95afe947cfe7675ff965b6c3ca5329a81d5426440014efd790"},"schema_version":"1.0","source":{"id":"2412.08201","kind":"arxiv","version":1}},"canonical_sha256":"c3f486f93b42de8552cc907170938ca7f71ebcb5f090bddb53343b7828cb245c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c3f486f93b42de8552cc907170938ca7f71ebcb5f090bddb53343b7828cb245c","first_computed_at":"2026-07-05T09:47:45.931353Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:47:45.931353Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"XIuKzd+EpfMWXf2ugwFR7DFuhmbfuzqloJyn9IUNxdqNhfvn35SWHSBiDEV506KkuxGm5fT07FNvACaFUJh3CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:47:45.931751Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.08201","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2b9c525a701ff1397a20ef21a8adc4a9e7731d8c1fa7afae0ebcfce0056f3bde","sha256:8d569df51c88698ac13613fa585023ccf43b9457a895d8648aaf374b3876aa34"],"state_sha256":"17bac28619127b0a4069aac629b05f6094c8b44fe5ec2c21c1922c0df55a51db"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vjgpMgFX5l8SAAg1Q3QHrBEws93zXfHldoHAdtzPZWurzP4gwWS6yv/IJn2gX8Vr3uKzhaFOCy+84lUv/o++AQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T17:35:00.128389Z","bundle_sha256":"9d9ae998e6405500a20dc273469c9f47889326ca7ef8cf9d3a1a871051ee25c1"}}