{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:GOJYYRJTGSHN5C2XRGWBOUROBI","short_pith_number":"pith:GOJYYRJT","canonical_record":{"source":{"id":"2410.06809","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-09T12:09:30Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"984db862dc7f8c3a1c8241a34fbe725e4bd1d983b60d7715967f7a00127a1c20","abstract_canon_sha256":"80a4d1156d36c547ab1be25cd964f4e6758b9bfe643b907161f8baa8b01ebeff"},"schema_version":"1.0"},"canonical_sha256":"33938c4533348ede8b5789ac17522e0a2e914039ac3e33290f8720654c15b8ca","source":{"kind":"arxiv","id":"2410.06809","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.06809","created_at":"2026-07-05T11:23:18Z"},{"alias_kind":"arxiv_version","alias_value":"2410.06809v3","created_at":"2026-07-05T11:23:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.06809","created_at":"2026-07-05T11:23:18Z"},{"alias_kind":"pith_short_12","alias_value":"GOJYYRJTGSHN","created_at":"2026-07-05T11:23:18Z"},{"alias_kind":"pith_short_16","alias_value":"GOJYYRJTGSHN5C2X","created_at":"2026-07-05T11:23:18Z"},{"alias_kind":"pith_short_8","alias_value":"GOJYYRJT","created_at":"2026-07-05T11:23:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:GOJYYRJTGSHN5C2XRGWBOUROBI","target":"record","payload":{"canonical_record":{"source":{"id":"2410.06809","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-09T12:09:30Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"984db862dc7f8c3a1c8241a34fbe725e4bd1d983b60d7715967f7a00127a1c20","abstract_canon_sha256":"80a4d1156d36c547ab1be25cd964f4e6758b9bfe643b907161f8baa8b01ebeff"},"schema_version":"1.0"},"canonical_sha256":"33938c4533348ede8b5789ac17522e0a2e914039ac3e33290f8720654c15b8ca","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:23:18.708467Z","signature_b64":"utmeJQac/RugtuQWthdSdn+lixtIG74mk0rJeyr9ZB6QDDC9UptGgl0KXRvbKLQqCZ+8dnLPfKwo56M1+kwaDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"33938c4533348ede8b5789ac17522e0a2e914039ac3e33290f8720654c15b8ca","last_reissued_at":"2026-07-05T11:23:18.707866Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:23:18.707866Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.06809","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:23:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oF9mk5VAwgfdBsp3DWhiph8ScvlXbpQjyqBkUEXJOIH7eTVs3nti54f+4sOcYwt4kAFua7zzqWQ28wlnHVrKBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T16:48:40.828289Z"},"content_sha256":"76715228fc1f6999d7a218b7510153b275cc5069e4afac48540a5e32fd1012a1","schema_version":"1.0","event_id":"sha256:76715228fc1f6999d7a218b7510153b275cc5069e4afac48540a5e32fd1012a1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:GOJYYRJTGSHN5C2XRGWBOUROBI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Root Defence Strategies: Ensuring Safety of LLM at the Decoding Level","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CL","authors_text":"Jiawei Chen, Jingyuan Zhang, Xinyi Zeng, Yu Tian, Yuying Shang","submitted_at":"2024-10-09T12:09:30Z","abstract_excerpt":"Large language models (LLMs) have demonstrated immense utility across various industries. However, as LLMs advance, the risk of harmful outputs increases due to incorrect or malicious instruction prompts. While current methods effectively address jailbreak risks, they share common limitations: 1) Judging harmful responses from the prefill-level lacks utilization of the model's decoding outputs, leading to relatively lower effectiveness and robustness. 2) Rejecting potentially harmful responses based on a single evaluation can significantly impair the model's helpfulness.This paper examines the"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.06809","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.06809/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:23:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"46zHyt+/X7K0utg9mFj5I1EUEYBFArrL60AkY8QHDWKjPEy8RjzYy6ZLmEHw9Bh4u0tahfsW27xPRlen0LFiDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T16:48:40.828819Z"},"content_sha256":"ecdfc1c7817192f3e76d5a6779ea66ba3caf9d96dea449983c753d731fa3fb70","schema_version":"1.0","event_id":"sha256:ecdfc1c7817192f3e76d5a6779ea66ba3caf9d96dea449983c753d731fa3fb70"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GOJYYRJTGSHN5C2XRGWBOUROBI/bundle.json","state_url":"https://pith.science/pith/GOJYYRJTGSHN5C2XRGWBOUROBI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GOJYYRJTGSHN5C2XRGWBOUROBI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T16:48:40Z","links":{"resolver":"https://pith.science/pith/GOJYYRJTGSHN5C2XRGWBOUROBI","bundle":"https://pith.science/pith/GOJYYRJTGSHN5C2XRGWBOUROBI/bundle.json","state":"https://pith.science/pith/GOJYYRJTGSHN5C2XRGWBOUROBI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GOJYYRJTGSHN5C2XRGWBOUROBI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:GOJYYRJTGSHN5C2XRGWBOUROBI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"80a4d1156d36c547ab1be25cd964f4e6758b9bfe643b907161f8baa8b01ebeff","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-09T12:09:30Z","title_canon_sha256":"984db862dc7f8c3a1c8241a34fbe725e4bd1d983b60d7715967f7a00127a1c20"},"schema_version":"1.0","source":{"id":"2410.06809","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.06809","created_at":"2026-07-05T11:23:18Z"},{"alias_kind":"arxiv_version","alias_value":"2410.06809v3","created_at":"2026-07-05T11:23:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.06809","created_at":"2026-07-05T11:23:18Z"},{"alias_kind":"pith_short_12","alias_value":"GOJYYRJTGSHN","created_at":"2026-07-05T11:23:18Z"},{"alias_kind":"pith_short_16","alias_value":"GOJYYRJTGSHN5C2X","created_at":"2026-07-05T11:23:18Z"},{"alias_kind":"pith_short_8","alias_value":"GOJYYRJT","created_at":"2026-07-05T11:23:18Z"}],"graph_snapshots":[{"event_id":"sha256:ecdfc1c7817192f3e76d5a6779ea66ba3caf9d96dea449983c753d731fa3fb70","target":"graph","created_at":"2026-07-05T11:23:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.06809/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have demonstrated immense utility across various industries. However, as LLMs advance, the risk of harmful outputs increases due to incorrect or malicious instruction prompts. While current methods effectively address jailbreak risks, they share common limitations: 1) Judging harmful responses from the prefill-level lacks utilization of the model's decoding outputs, leading to relatively lower effectiveness and robustness. 2) Rejecting potentially harmful responses based on a single evaluation can significantly impair the model's helpfulness.This paper examines the","authors_text":"Jiawei Chen, Jingyuan Zhang, Xinyi Zeng, Yu Tian, Yuying Shang","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-09T12:09:30Z","title":"Root Defence Strategies: Ensuring Safety of LLM at the Decoding Level"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.06809","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:76715228fc1f6999d7a218b7510153b275cc5069e4afac48540a5e32fd1012a1","target":"record","created_at":"2026-07-05T11:23:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"80a4d1156d36c547ab1be25cd964f4e6758b9bfe643b907161f8baa8b01ebeff","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-10-09T12:09:30Z","title_canon_sha256":"984db862dc7f8c3a1c8241a34fbe725e4bd1d983b60d7715967f7a00127a1c20"},"schema_version":"1.0","source":{"id":"2410.06809","kind":"arxiv","version":3}},"canonical_sha256":"33938c4533348ede8b5789ac17522e0a2e914039ac3e33290f8720654c15b8ca","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"33938c4533348ede8b5789ac17522e0a2e914039ac3e33290f8720654c15b8ca","first_computed_at":"2026-07-05T11:23:18.707866Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:23:18.707866Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"utmeJQac/RugtuQWthdSdn+lixtIG74mk0rJeyr9ZB6QDDC9UptGgl0KXRvbKLQqCZ+8dnLPfKwo56M1+kwaDA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:23:18.708467Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.06809","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:76715228fc1f6999d7a218b7510153b275cc5069e4afac48540a5e32fd1012a1","sha256:ecdfc1c7817192f3e76d5a6779ea66ba3caf9d96dea449983c753d731fa3fb70"],"state_sha256":"0da1d39f2c718739f86ce938ded5ffa94988062a26fb1787a454933929ff1572"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IRuBj0n6X829uVqF/ZAsH35Z5GQgT1mygahD5ysA/0Y84AIH4NWmHcWCDhuW1MBeJLlAoQKY4LhrUVujogxsBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T16:48:40.834468Z","bundle_sha256":"be01bc1b218e7eb0d92eb8733695a415961a7f4a1114890851eb7f0a7edbb5c0"}}