{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:Z23KPAS3OZROZ6T7SXT5HUR7EF","short_pith_number":"pith:Z23KPAS3","canonical_record":{"source":{"id":"2410.09102","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-09T12:52:41Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"title_canon_sha256":"3b913c983fabc60bdd4b0602e9d35919dd747d80bc2f0dfb18abb047ca49925c","abstract_canon_sha256":"d9af68f3ee3063ae9bed9b3f9280497237c90f9378b7e851739d1d7374a34168"},"schema_version":"1.0"},"canonical_sha256":"ceb6a7825b7662ecfa7f95e7d3d23f214b704f9827bea945c4c26c0f9a7924c8","source":{"kind":"arxiv","id":"2410.09102","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.09102","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"arxiv_version","alias_value":"2410.09102v2","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.09102","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"pith_short_12","alias_value":"Z23KPAS3OZRO","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"pith_short_16","alias_value":"Z23KPAS3OZROZ6T7","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"pith_short_8","alias_value":"Z23KPAS3","created_at":"2026-07-05T11:10:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:Z23KPAS3OZROZ6T7SXT5HUR7EF","target":"record","payload":{"canonical_record":{"source":{"id":"2410.09102","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-09T12:52:41Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"title_canon_sha256":"3b913c983fabc60bdd4b0602e9d35919dd747d80bc2f0dfb18abb047ca49925c","abstract_canon_sha256":"d9af68f3ee3063ae9bed9b3f9280497237c90f9378b7e851739d1d7374a34168"},"schema_version":"1.0"},"canonical_sha256":"ceb6a7825b7662ecfa7f95e7d3d23f214b704f9827bea945c4c26c0f9a7924c8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:10:32.370660Z","signature_b64":"paL5rDNka2RVQPCH87Aml6Usz21COQGTLbx2qxorpmkYyD3v59xdpBbaTZBzQ7y1VqdSZKtOSMjyS97uBvooCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ceb6a7825b7662ecfa7f95e7d3d23f214b704f9827bea945c4c26c0f9a7924c8","last_reissued_at":"2026-07-05T11:10:32.370164Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:10:32.370164Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.09102","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:10:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/Q4qPcIYusEBEUXXpFrap/DboNyoe0Iw36nMpvc0UC9f6xIDAckCzaaTVLe7JUsy4DPYRrXSQgfXYdIXVU8dAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T09:13:13.209068Z"},"content_sha256":"98894960b1db05739f3e922dee968a0455e65e7b55443c79c0b3eb2246820570","schema_version":"1.0","event_id":"sha256:98894960b1db05739f3e922dee968a0455e65e7b55443c79c0b3eb2246820570"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:Z23KPAS3OZROZ6T7SXT5HUR7EF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Instructional Segment Embedding: Improving LLM Safety with Instruction Hierarchy","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Chong Xiang, Kaiqiang Song, Prateek Mittal, Ravi Agrawal, Sanqiang Zhao, Sathish Reddy Indurthi, Shujian Zhang, Silei Xu, Tong Wu, Wenxuan Zhou","submitted_at":"2024-10-09T12:52:41Z","abstract_excerpt":"Large Language Models (LLMs) are susceptible to security and safety threats, such as prompt injection, prompt extraction, and harmful requests. One major cause of these vulnerabilities is the lack of an instruction hierarchy. Modern LLM architectures treat all inputs equally, failing to distinguish between and prioritize various types of instructions, such as system messages, user prompts, and data. As a result, lower-priority user prompts may override more critical system instructions, including safety protocols. Existing approaches to achieving instruction hierarchy, such as delimiters and i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.09102","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.09102/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:10:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tI90GTBjFvMrpyUywhfB6IAmLGf4G6d43SBsU7gm3/2DUwlnyD6JiCi+lyjVI6rtVmYTUGSQKRtPOvmQwzv9CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T09:13:13.209590Z"},"content_sha256":"35951196c77894b28a5e4aded3d5e2e1ce0c3b16091be96ea267ca68d947037b","schema_version":"1.0","event_id":"sha256:35951196c77894b28a5e4aded3d5e2e1ce0c3b16091be96ea267ca68d947037b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Z23KPAS3OZROZ6T7SXT5HUR7EF/bundle.json","state_url":"https://pith.science/pith/Z23KPAS3OZROZ6T7SXT5HUR7EF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Z23KPAS3OZROZ6T7SXT5HUR7EF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T09:13:13Z","links":{"resolver":"https://pith.science/pith/Z23KPAS3OZROZ6T7SXT5HUR7EF","bundle":"https://pith.science/pith/Z23KPAS3OZROZ6T7SXT5HUR7EF/bundle.json","state":"https://pith.science/pith/Z23KPAS3OZROZ6T7SXT5HUR7EF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Z23KPAS3OZROZ6T7SXT5HUR7EF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:Z23KPAS3OZROZ6T7SXT5HUR7EF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d9af68f3ee3063ae9bed9b3f9280497237c90f9378b7e851739d1d7374a34168","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-09T12:52:41Z","title_canon_sha256":"3b913c983fabc60bdd4b0602e9d35919dd747d80bc2f0dfb18abb047ca49925c"},"schema_version":"1.0","source":{"id":"2410.09102","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.09102","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"arxiv_version","alias_value":"2410.09102v2","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.09102","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"pith_short_12","alias_value":"Z23KPAS3OZRO","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"pith_short_16","alias_value":"Z23KPAS3OZROZ6T7","created_at":"2026-07-05T11:10:32Z"},{"alias_kind":"pith_short_8","alias_value":"Z23KPAS3","created_at":"2026-07-05T11:10:32Z"}],"graph_snapshots":[{"event_id":"sha256:35951196c77894b28a5e4aded3d5e2e1ce0c3b16091be96ea267ca68d947037b","target":"graph","created_at":"2026-07-05T11:10:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.09102/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) are susceptible to security and safety threats, such as prompt injection, prompt extraction, and harmful requests. One major cause of these vulnerabilities is the lack of an instruction hierarchy. Modern LLM architectures treat all inputs equally, failing to distinguish between and prioritize various types of instructions, such as system messages, user prompts, and data. As a result, lower-priority user prompts may override more critical system instructions, including safety protocols. Existing approaches to achieving instruction hierarchy, such as delimiters and i","authors_text":"Chong Xiang, Kaiqiang Song, Prateek Mittal, Ravi Agrawal, Sanqiang Zhao, Sathish Reddy Indurthi, Shujian Zhang, Silei Xu, Tong Wu, Wenxuan Zhou","cross_cats":["cs.AI","cs.CL","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-09T12:52:41Z","title":"Instructional Segment Embedding: Improving LLM Safety with Instruction Hierarchy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.09102","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:98894960b1db05739f3e922dee968a0455e65e7b55443c79c0b3eb2246820570","target":"record","created_at":"2026-07-05T11:10:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d9af68f3ee3063ae9bed9b3f9280497237c90f9378b7e851739d1d7374a34168","cross_cats_sorted":["cs.AI","cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-10-09T12:52:41Z","title_canon_sha256":"3b913c983fabc60bdd4b0602e9d35919dd747d80bc2f0dfb18abb047ca49925c"},"schema_version":"1.0","source":{"id":"2410.09102","kind":"arxiv","version":2}},"canonical_sha256":"ceb6a7825b7662ecfa7f95e7d3d23f214b704f9827bea945c4c26c0f9a7924c8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ceb6a7825b7662ecfa7f95e7d3d23f214b704f9827bea945c4c26c0f9a7924c8","first_computed_at":"2026-07-05T11:10:32.370164Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:10:32.370164Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"paL5rDNka2RVQPCH87Aml6Usz21COQGTLbx2qxorpmkYyD3v59xdpBbaTZBzQ7y1VqdSZKtOSMjyS97uBvooCg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:10:32.370660Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.09102","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:98894960b1db05739f3e922dee968a0455e65e7b55443c79c0b3eb2246820570","sha256:35951196c77894b28a5e4aded3d5e2e1ce0c3b16091be96ea267ca68d947037b"],"state_sha256":"fd1d0fa5490e82094392ddd51956dc4bbfccbaf91d299f9640a92a36748414e6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Haf95Cmqjim96UMfjf4dJQ5HZLagZONwfZGhk9/F53nSysZOTivWDtnVP2ZOp1vkkWrDBRfP8Jhytrx0LBmDCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T09:13:13.212852Z","bundle_sha256":"1d4daf5cca4793733127b94859aecb3c96314a406974a0f15bbacc01b74f7ca4"}}