{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:S6CHHJRY7PHSW4EHBZMOIUVJXW","short_pith_number":"pith:S6CHHJRY","canonical_record":{"source":{"id":"2309.05274","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-11T07:15:02Z","cross_cats_sorted":[],"title_canon_sha256":"0a21bfa335f5fc3407a9ee653b263927578cf9fb2a5d1218bfc735539067caab","abstract_canon_sha256":"f242009147af541c032405709dafbf7f979ba7aeaaf1640624afc8dde9cb3134"},"schema_version":"1.0"},"canonical_sha256":"978473a638fbcf2b70870e58e452a9bd9b5e390e2d406794add8d0ea4f00ee2a","source":{"kind":"arxiv","id":"2309.05274","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.05274","created_at":"2026-07-05T08:07:29Z"},{"alias_kind":"arxiv_version","alias_value":"2309.05274v2","created_at":"2026-07-05T08:07:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.05274","created_at":"2026-07-05T08:07:29Z"},{"alias_kind":"pith_short_12","alias_value":"S6CHHJRY7PHS","created_at":"2026-07-05T08:07:29Z"},{"alias_kind":"pith_short_16","alias_value":"S6CHHJRY7PHSW4EH","created_at":"2026-07-05T08:07:29Z"},{"alias_kind":"pith_short_8","alias_value":"S6CHHJRY","created_at":"2026-07-05T08:07:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:S6CHHJRY7PHSW4EHBZMOIUVJXW","target":"record","payload":{"canonical_record":{"source":{"id":"2309.05274","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-11T07:15:02Z","cross_cats_sorted":[],"title_canon_sha256":"0a21bfa335f5fc3407a9ee653b263927578cf9fb2a5d1218bfc735539067caab","abstract_canon_sha256":"f242009147af541c032405709dafbf7f979ba7aeaaf1640624afc8dde9cb3134"},"schema_version":"1.0"},"canonical_sha256":"978473a638fbcf2b70870e58e452a9bd9b5e390e2d406794add8d0ea4f00ee2a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:07:29.232418Z","signature_b64":"Tz9ZWbgIWth8wKHJulnutBFONj7YxjUuW0CY0NytOYZzua3YBBkAZgk+p0lEsSdKiccD8e6EFfj8/g+A0uLADg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"978473a638fbcf2b70870e58e452a9bd9b5e390e2d406794add8d0ea4f00ee2a","last_reissued_at":"2026-07-05T08:07:29.231927Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:07:29.231927Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.05274","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:07:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zHWeZx5k18wxTYwyHMA7zvPSu4uERC82qfKH/LxUI7V7Z4h2SiYC6ew7de2e3Jj+/r/2cu9DRfpagubkE6AhDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T11:44:57.780985Z"},"content_sha256":"c9f5011ddd058ea91a26af629c48dc001f009c91dea414b8e7cac4c37a2a91e7","schema_version":"1.0","event_id":"sha256:c9f5011ddd058ea91a26af629c48dc001f009c91dea414b8e7cac4c37a2a91e7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:S6CHHJRY7PHSW4EHBZMOIUVJXW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FuzzLLM: A Novel and Universal Fuzzing Framework for Proactively Discovering Jailbreak Vulnerabilities in Large Language Models","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Dongyu Yao, Ian G. Harris, Jianshu Zhang, Marcel Carlsson","submitted_at":"2023-09-11T07:15:02Z","abstract_excerpt":"Jailbreak vulnerabilities in Large Language Models (LLMs), which exploit meticulously crafted prompts to elicit content that violates service guidelines, have captured the attention of research communities. While model owners can defend against individual jailbreak prompts through safety training strategies, this relatively passive approach struggles to handle the broader category of similar jailbreaks. To tackle this issue, we introduce FuzzLLM, an automated fuzzing framework designed to proactively test and discover jailbreak vulnerabilities in LLMs. We utilize templates to capture the struc"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.05274","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.05274/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:07:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PWElTUSwx7v0Nb0uWycYdAutXeNgz7hOC5YWtHSfJZYtqhIdQJqOQUOTvsCVKQhl2mBFpOjSBl06BIR+5AL8Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T11:44:57.781495Z"},"content_sha256":"f744678d6ac18b48b4a9ea5459782fcb79eecf182a9d4e889461c3db6987f2e8","schema_version":"1.0","event_id":"sha256:f744678d6ac18b48b4a9ea5459782fcb79eecf182a9d4e889461c3db6987f2e8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/S6CHHJRY7PHSW4EHBZMOIUVJXW/bundle.json","state_url":"https://pith.science/pith/S6CHHJRY7PHSW4EHBZMOIUVJXW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/S6CHHJRY7PHSW4EHBZMOIUVJXW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T11:44:57Z","links":{"resolver":"https://pith.science/pith/S6CHHJRY7PHSW4EHBZMOIUVJXW","bundle":"https://pith.science/pith/S6CHHJRY7PHSW4EHBZMOIUVJXW/bundle.json","state":"https://pith.science/pith/S6CHHJRY7PHSW4EHBZMOIUVJXW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/S6CHHJRY7PHSW4EHBZMOIUVJXW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:S6CHHJRY7PHSW4EHBZMOIUVJXW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f242009147af541c032405709dafbf7f979ba7aeaaf1640624afc8dde9cb3134","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-11T07:15:02Z","title_canon_sha256":"0a21bfa335f5fc3407a9ee653b263927578cf9fb2a5d1218bfc735539067caab"},"schema_version":"1.0","source":{"id":"2309.05274","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.05274","created_at":"2026-07-05T08:07:29Z"},{"alias_kind":"arxiv_version","alias_value":"2309.05274v2","created_at":"2026-07-05T08:07:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.05274","created_at":"2026-07-05T08:07:29Z"},{"alias_kind":"pith_short_12","alias_value":"S6CHHJRY7PHS","created_at":"2026-07-05T08:07:29Z"},{"alias_kind":"pith_short_16","alias_value":"S6CHHJRY7PHSW4EH","created_at":"2026-07-05T08:07:29Z"},{"alias_kind":"pith_short_8","alias_value":"S6CHHJRY","created_at":"2026-07-05T08:07:29Z"}],"graph_snapshots":[{"event_id":"sha256:f744678d6ac18b48b4a9ea5459782fcb79eecf182a9d4e889461c3db6987f2e8","target":"graph","created_at":"2026-07-05T08:07:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.05274/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Jailbreak vulnerabilities in Large Language Models (LLMs), which exploit meticulously crafted prompts to elicit content that violates service guidelines, have captured the attention of research communities. While model owners can defend against individual jailbreak prompts through safety training strategies, this relatively passive approach struggles to handle the broader category of similar jailbreaks. To tackle this issue, we introduce FuzzLLM, an automated fuzzing framework designed to proactively test and discover jailbreak vulnerabilities in LLMs. We utilize templates to capture the struc","authors_text":"Dongyu Yao, Ian G. Harris, Jianshu Zhang, Marcel Carlsson","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-11T07:15:02Z","title":"FuzzLLM: A Novel and Universal Fuzzing Framework for Proactively Discovering Jailbreak Vulnerabilities in Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.05274","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c9f5011ddd058ea91a26af629c48dc001f009c91dea414b8e7cac4c37a2a91e7","target":"record","created_at":"2026-07-05T08:07:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f242009147af541c032405709dafbf7f979ba7aeaaf1640624afc8dde9cb3134","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-11T07:15:02Z","title_canon_sha256":"0a21bfa335f5fc3407a9ee653b263927578cf9fb2a5d1218bfc735539067caab"},"schema_version":"1.0","source":{"id":"2309.05274","kind":"arxiv","version":2}},"canonical_sha256":"978473a638fbcf2b70870e58e452a9bd9b5e390e2d406794add8d0ea4f00ee2a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"978473a638fbcf2b70870e58e452a9bd9b5e390e2d406794add8d0ea4f00ee2a","first_computed_at":"2026-07-05T08:07:29.231927Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:07:29.231927Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Tz9ZWbgIWth8wKHJulnutBFONj7YxjUuW0CY0NytOYZzua3YBBkAZgk+p0lEsSdKiccD8e6EFfj8/g+A0uLADg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:07:29.232418Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.05274","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c9f5011ddd058ea91a26af629c48dc001f009c91dea414b8e7cac4c37a2a91e7","sha256:f744678d6ac18b48b4a9ea5459782fcb79eecf182a9d4e889461c3db6987f2e8"],"state_sha256":"d372a6356e0390dfe0615dfbad7185e7dcb6d300f13f58952019a21bbaa17018"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1vKNcTrocHvEA4D95I/ymez8yfBLYYU+5IkasTs9wwrYEopqAnCfZrakyF+YCY9QgEzl1F3lbhMkQcpsQGKlAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T11:44:57.786287Z","bundle_sha256":"6097c4358755477edbb674e00df883b068d369d11e512b8120bce92b1244f315"}}