{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:4VQMBQXL74OVA7L4NBDDA6UXAN","short_pith_number":"pith:4VQMBQXL","canonical_record":{"source":{"id":"2410.11459","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-15T10:07:15Z","cross_cats_sorted":[],"title_canon_sha256":"cba3a92ddeb7dc38f4ca93fdf0b4841ab40a81c3c421744ec2207f0ac71c1e14","abstract_canon_sha256":"488c485d7f9314971daef397c17acd233cd058930fc6ded8038018060d4741a9"},"schema_version":"1.0"},"canonical_sha256":"e560c0c2ebff1d507d7c6846307a97036e7c2b23131163616872933a3f5084e3","source":{"kind":"arxiv","id":"2410.11459","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.11459","created_at":"2026-07-05T09:20:54Z"},{"alias_kind":"arxiv_version","alias_value":"2410.11459v1","created_at":"2026-07-05T09:20:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.11459","created_at":"2026-07-05T09:20:54Z"},{"alias_kind":"pith_short_12","alias_value":"4VQMBQXL74OV","created_at":"2026-07-05T09:20:54Z"},{"alias_kind":"pith_short_16","alias_value":"4VQMBQXL74OVA7L4","created_at":"2026-07-05T09:20:54Z"},{"alias_kind":"pith_short_8","alias_value":"4VQMBQXL","created_at":"2026-07-05T09:20:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:4VQMBQXL74OVA7L4NBDDA6UXAN","target":"record","payload":{"canonical_record":{"source":{"id":"2410.11459","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-15T10:07:15Z","cross_cats_sorted":[],"title_canon_sha256":"cba3a92ddeb7dc38f4ca93fdf0b4841ab40a81c3c421744ec2207f0ac71c1e14","abstract_canon_sha256":"488c485d7f9314971daef397c17acd233cd058930fc6ded8038018060d4741a9"},"schema_version":"1.0"},"canonical_sha256":"e560c0c2ebff1d507d7c6846307a97036e7c2b23131163616872933a3f5084e3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:20:54.083649Z","signature_b64":"l/MlxcxAGeWXRChXQpcgu22dQKJp9ncUv4YilQU1+HFK67995SrmwNk1gqkzx5LiimBKHTcKfECUSio1WDzQDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e560c0c2ebff1d507d7c6846307a97036e7c2b23131163616872933a3f5084e3","last_reissued_at":"2026-07-05T09:20:54.083144Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:20:54.083144Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.11459","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:20:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xIU0yBImcDWhP2DK6qVt1yDHY7USwEHNoNqseHps/4IldD3hjBzCjlroI6spbsbjplp4Ia0eHP6YvVfLdB1aDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T07:46:47.836054Z"},"content_sha256":"705e3da4bf451b9ca5953ff38bb1e3b4c2042d3da0d627592a030dead79f0787","schema_version":"1.0","event_id":"sha256:705e3da4bf451b9ca5953ff38bb1e3b4c2042d3da0d627592a030dead79f0787"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:4VQMBQXL74OVA7L4NBDDA6UXAN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Jigsaw Puzzles: Splitting Harmful Questions to Jailbreak Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Ehsan Shareghi, Gholamreza Haffari, Hao Yang, Lizhen Qu","submitted_at":"2024-10-15T10:07:15Z","abstract_excerpt":"Large language models (LLMs) have exhibited outstanding performance in engaging with humans and addressing complex questions by leveraging their vast implicit knowledge and robust reasoning capabilities. However, such models are vulnerable to jailbreak attacks, leading to the generation of harmful responses. Despite recent research on single-turn jailbreak strategies to facilitate the development of defence mechanisms, the challenge of revealing vulnerabilities under multi-turn setting remains relatively under-explored. In this work, we propose Jigsaw Puzzles (JSP), a straightforward yet effec"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.11459","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.11459/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:20:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8kr+KJVBvN+doARQvxPlI6bD3T91K0eWpJScCHRViP91r2B315uJahqkGvyARC8cT//ZwadLtfQ7T22j6S3eAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T07:46:47.836958Z"},"content_sha256":"456fc37fa4218f276f6c15add7faf60beb19e958a9d7b345cb56003deb6cfa86","schema_version":"1.0","event_id":"sha256:456fc37fa4218f276f6c15add7faf60beb19e958a9d7b345cb56003deb6cfa86"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4VQMBQXL74OVA7L4NBDDA6UXAN/bundle.json","state_url":"https://pith.science/pith/4VQMBQXL74OVA7L4NBDDA6UXAN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4VQMBQXL74OVA7L4NBDDA6UXAN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T07:46:47Z","links":{"resolver":"https://pith.science/pith/4VQMBQXL74OVA7L4NBDDA6UXAN","bundle":"https://pith.science/pith/4VQMBQXL74OVA7L4NBDDA6UXAN/bundle.json","state":"https://pith.science/pith/4VQMBQXL74OVA7L4NBDDA6UXAN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4VQMBQXL74OVA7L4NBDDA6UXAN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:4VQMBQXL74OVA7L4NBDDA6UXAN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"488c485d7f9314971daef397c17acd233cd058930fc6ded8038018060d4741a9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-15T10:07:15Z","title_canon_sha256":"cba3a92ddeb7dc38f4ca93fdf0b4841ab40a81c3c421744ec2207f0ac71c1e14"},"schema_version":"1.0","source":{"id":"2410.11459","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.11459","created_at":"2026-07-05T09:20:54Z"},{"alias_kind":"arxiv_version","alias_value":"2410.11459v1","created_at":"2026-07-05T09:20:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.11459","created_at":"2026-07-05T09:20:54Z"},{"alias_kind":"pith_short_12","alias_value":"4VQMBQXL74OV","created_at":"2026-07-05T09:20:54Z"},{"alias_kind":"pith_short_16","alias_value":"4VQMBQXL74OVA7L4","created_at":"2026-07-05T09:20:54Z"},{"alias_kind":"pith_short_8","alias_value":"4VQMBQXL","created_at":"2026-07-05T09:20:54Z"}],"graph_snapshots":[{"event_id":"sha256:456fc37fa4218f276f6c15add7faf60beb19e958a9d7b345cb56003deb6cfa86","target":"graph","created_at":"2026-07-05T09:20:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.11459/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have exhibited outstanding performance in engaging with humans and addressing complex questions by leveraging their vast implicit knowledge and robust reasoning capabilities. However, such models are vulnerable to jailbreak attacks, leading to the generation of harmful responses. Despite recent research on single-turn jailbreak strategies to facilitate the development of defence mechanisms, the challenge of revealing vulnerabilities under multi-turn setting remains relatively under-explored. In this work, we propose Jigsaw Puzzles (JSP), a straightforward yet effec","authors_text":"Ehsan Shareghi, Gholamreza Haffari, Hao Yang, Lizhen Qu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-15T10:07:15Z","title":"Jigsaw Puzzles: Splitting Harmful Questions to Jailbreak Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.11459","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:705e3da4bf451b9ca5953ff38bb1e3b4c2042d3da0d627592a030dead79f0787","target":"record","created_at":"2026-07-05T09:20:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"488c485d7f9314971daef397c17acd233cd058930fc6ded8038018060d4741a9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-15T10:07:15Z","title_canon_sha256":"cba3a92ddeb7dc38f4ca93fdf0b4841ab40a81c3c421744ec2207f0ac71c1e14"},"schema_version":"1.0","source":{"id":"2410.11459","kind":"arxiv","version":1}},"canonical_sha256":"e560c0c2ebff1d507d7c6846307a97036e7c2b23131163616872933a3f5084e3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e560c0c2ebff1d507d7c6846307a97036e7c2b23131163616872933a3f5084e3","first_computed_at":"2026-07-05T09:20:54.083144Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:20:54.083144Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"l/MlxcxAGeWXRChXQpcgu22dQKJp9ncUv4YilQU1+HFK67995SrmwNk1gqkzx5LiimBKHTcKfECUSio1WDzQDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:20:54.083649Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.11459","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:705e3da4bf451b9ca5953ff38bb1e3b4c2042d3da0d627592a030dead79f0787","sha256:456fc37fa4218f276f6c15add7faf60beb19e958a9d7b345cb56003deb6cfa86"],"state_sha256":"d839b14545ba03312ccf96b72d3dd2bb0d4549ba968e88502f83bc1f53557686"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9Y9JEES6nWYHYkJpEzHpltoNTyrdCTRyIuAKdsPiY5B3wTAXfAoCpVhl5lZqANGXlFkT7A+avTvx34TqSvMbCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T07:46:47.844393Z","bundle_sha256":"4e052db773bd3034c320e324f6adfd5600c0ce08cabaa1859d6862efbebe401e"}}