{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:BW75UQDKD3PP3TNTWKWTSDKDGF","short_pith_number":"pith:BW75UQDK","canonical_record":{"source":{"id":"2411.14738","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2024-11-22T05:17:18Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"1c5203e364385b95d33d93440711bd137c04f7a3bce1e1376d368c5817c6e64c","abstract_canon_sha256":"b9ee5489b808212093dce4237d0a9603613803854c9c224d61052b9e4d1b7af9"},"schema_version":"1.0"},"canonical_sha256":"0dbfda406a1edefdcdb3b2ad390d43314e53d65747b2daa817e0d7254b7b13fb","source":{"kind":"arxiv","id":"2411.14738","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.14738","created_at":"2026-07-05T09:38:56Z"},{"alias_kind":"arxiv_version","alias_value":"2411.14738v1","created_at":"2026-07-05T09:38:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.14738","created_at":"2026-07-05T09:38:56Z"},{"alias_kind":"pith_short_12","alias_value":"BW75UQDKD3PP","created_at":"2026-07-05T09:38:56Z"},{"alias_kind":"pith_short_16","alias_value":"BW75UQDKD3PP3TNT","created_at":"2026-07-05T09:38:56Z"},{"alias_kind":"pith_short_8","alias_value":"BW75UQDK","created_at":"2026-07-05T09:38:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:BW75UQDKD3PP3TNTWKWTSDKDGF","target":"record","payload":{"canonical_record":{"source":{"id":"2411.14738","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2024-11-22T05:17:18Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"1c5203e364385b95d33d93440711bd137c04f7a3bce1e1376d368c5817c6e64c","abstract_canon_sha256":"b9ee5489b808212093dce4237d0a9603613803854c9c224d61052b9e4d1b7af9"},"schema_version":"1.0"},"canonical_sha256":"0dbfda406a1edefdcdb3b2ad390d43314e53d65747b2daa817e0d7254b7b13fb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:38:56.688565Z","signature_b64":"nUNj2TJNUBjy4Cdm3tXRjWzRlXU1jHBB/nwjmUeHUpSvCYvrhCckffwUnA4HWdJ7nxGDEOuIbjlegcQljtk9Bg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0dbfda406a1edefdcdb3b2ad390d43314e53d65747b2daa817e0d7254b7b13fb","last_reissued_at":"2026-07-05T09:38:56.688064Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:38:56.688064Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.14738","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:38:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8+zbVzVZBWjs1Gxt4xTuu4itxH5UTf+HVokBZE0ij3PybU6yvFzGIXDg7xwdlMI7aaP7PSJORRDL8fmhizZ3AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T22:28:18.433284Z"},"content_sha256":"8b5de8f28d05198c2b26d6c4047de13359463a0fa088f6c652316cbd71550532","schema_version":"1.0","event_id":"sha256:8b5de8f28d05198c2b26d6c4047de13359463a0fa088f6c652316cbd71550532"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:BW75UQDKD3PP3TNTWKWTSDKDGF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.CL","authors_text":"Guancheng Li, Jiashuo Liang, Yang Yu","submitted_at":"2024-11-22T05:17:18Z","abstract_excerpt":"Large language models (LLMs) have been widely adopted in applications such as automated content generation and even critical decision-making systems. However, the risk of prompt injection allows for potential manipulation of LLM outputs. While numerous attack methods have been documented, achieving full control over these outputs remains challenging, often requiring experienced attackers to make multiple attempts and depending heavily on the prompt context. Recent advancements in gradient-based white-box attack techniques have shown promise in tasks like jailbreaks and system prompt leaks. Our"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.14738","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.14738/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:38:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ovtetr7KQbz2xEbNnXiV2krjANDNb+El6Ixy2xDaVuEpYVmTUI3bbxerJeOq1Oi5L4FE0RSg1a+/IUbNkS3SBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T22:28:18.433950Z"},"content_sha256":"b6467927e636c53e10af78ee38f1aa5c13db8e096439a21fbf9f09190e5b8d09","schema_version":"1.0","event_id":"sha256:b6467927e636c53e10af78ee38f1aa5c13db8e096439a21fbf9f09190e5b8d09"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BW75UQDKD3PP3TNTWKWTSDKDGF/bundle.json","state_url":"https://pith.science/pith/BW75UQDKD3PP3TNTWKWTSDKDGF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BW75UQDKD3PP3TNTWKWTSDKDGF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T22:28:18Z","links":{"resolver":"https://pith.science/pith/BW75UQDKD3PP3TNTWKWTSDKDGF","bundle":"https://pith.science/pith/BW75UQDKD3PP3TNTWKWTSDKDGF/bundle.json","state":"https://pith.science/pith/BW75UQDKD3PP3TNTWKWTSDKDGF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BW75UQDKD3PP3TNTWKWTSDKDGF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:BW75UQDKD3PP3TNTWKWTSDKDGF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b9ee5489b808212093dce4237d0a9603613803854c9c224d61052b9e4d1b7af9","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2024-11-22T05:17:18Z","title_canon_sha256":"1c5203e364385b95d33d93440711bd137c04f7a3bce1e1376d368c5817c6e64c"},"schema_version":"1.0","source":{"id":"2411.14738","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.14738","created_at":"2026-07-05T09:38:56Z"},{"alias_kind":"arxiv_version","alias_value":"2411.14738v1","created_at":"2026-07-05T09:38:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.14738","created_at":"2026-07-05T09:38:56Z"},{"alias_kind":"pith_short_12","alias_value":"BW75UQDKD3PP","created_at":"2026-07-05T09:38:56Z"},{"alias_kind":"pith_short_16","alias_value":"BW75UQDKD3PP3TNT","created_at":"2026-07-05T09:38:56Z"},{"alias_kind":"pith_short_8","alias_value":"BW75UQDK","created_at":"2026-07-05T09:38:56Z"}],"graph_snapshots":[{"event_id":"sha256:b6467927e636c53e10af78ee38f1aa5c13db8e096439a21fbf9f09190e5b8d09","target":"graph","created_at":"2026-07-05T09:38:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.14738/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have been widely adopted in applications such as automated content generation and even critical decision-making systems. However, the risk of prompt injection allows for potential manipulation of LLM outputs. While numerous attack methods have been documented, achieving full control over these outputs remains challenging, often requiring experienced attackers to make multiple attempts and depending heavily on the prompt context. Recent advancements in gradient-based white-box attack techniques have shown promise in tasks like jailbreaks and system prompt leaks. Our","authors_text":"Guancheng Li, Jiashuo Liang, Yang Yu","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.14738","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8b5de8f28d05198c2b26d6c4047de13359463a0fa088f6c652316cbd71550532","target":"record","created_at":"2026-07-05T09:38:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b9ee5489b808212093dce4237d0a9603613803854c9c224d61052b9e4d1b7af9","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2024-11-22T05:17:18Z","title_canon_sha256":"1c5203e364385b95d33d93440711bd137c04f7a3bce1e1376d368c5817c6e64c"},"schema_version":"1.0","source":{"id":"2411.14738","kind":"arxiv","version":1}},"canonical_sha256":"0dbfda406a1edefdcdb3b2ad390d43314e53d65747b2daa817e0d7254b7b13fb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0dbfda406a1edefdcdb3b2ad390d43314e53d65747b2daa817e0d7254b7b13fb","first_computed_at":"2026-07-05T09:38:56.688064Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:38:56.688064Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nUNj2TJNUBjy4Cdm3tXRjWzRlXU1jHBB/nwjmUeHUpSvCYvrhCckffwUnA4HWdJ7nxGDEOuIbjlegcQljtk9Bg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:38:56.688565Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.14738","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8b5de8f28d05198c2b26d6c4047de13359463a0fa088f6c652316cbd71550532","sha256:b6467927e636c53e10af78ee38f1aa5c13db8e096439a21fbf9f09190e5b8d09"],"state_sha256":"40cdb660032cb5fd92917bc0422dfb1706aa6750cf6d00cc047a458b5a549af2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O61bXPH0PsdNvleKIzSiqi+2wMcXrj2V90+ysmJoM6OS5HujDDOLVguQx64NcGVK6y/ZreF0e0rIvqrVJ4KTBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T22:28:18.445704Z","bundle_sha256":"b964d9f3a1d25bf0c481c81f3f756738e8e496d4c4e528b11d64a230713a2ba2"}}