{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:TZ4HSZUDOP5NMCLVC6K4SY5JUF","short_pith_number":"pith:TZ4HSZUD","canonical_record":{"source":{"id":"2506.18543","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T11:53:31Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ad08327d4838890a2bd9891c2714268ae3be73b5114c1f96149841c5da198e3d","abstract_canon_sha256":"8ce99bd64d221b27479c81caa09a23e6e3fd44f11af54d8edeb1ea269498ff44"},"schema_version":"1.0"},"canonical_sha256":"9e7879668373fad609751795c963a9a17246fba27026888a17912ce2b4742912","source":{"kind":"arxiv","id":"2506.18543","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.18543","created_at":"2026-05-26T02:03:52Z"},{"alias_kind":"arxiv_version","alias_value":"2506.18543v2","created_at":"2026-05-26T02:03:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.18543","created_at":"2026-05-26T02:03:52Z"},{"alias_kind":"pith_short_12","alias_value":"TZ4HSZUDOP5N","created_at":"2026-05-26T02:03:52Z"},{"alias_kind":"pith_short_16","alias_value":"TZ4HSZUDOP5NMCLV","created_at":"2026-05-26T02:03:52Z"},{"alias_kind":"pith_short_8","alias_value":"TZ4HSZUD","created_at":"2026-05-26T02:03:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:TZ4HSZUDOP5NMCLVC6K4SY5JUF","target":"record","payload":{"canonical_record":{"source":{"id":"2506.18543","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T11:53:31Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ad08327d4838890a2bd9891c2714268ae3be73b5114c1f96149841c5da198e3d","abstract_canon_sha256":"8ce99bd64d221b27479c81caa09a23e6e3fd44f11af54d8edeb1ea269498ff44"},"schema_version":"1.0"},"canonical_sha256":"9e7879668373fad609751795c963a9a17246fba27026888a17912ce2b4742912","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-26T02:03:52.095843Z","signature_b64":"8baPzLYQOioNXCQs+Zj7/QxA805pzJyABVL0wHut449/GIlgVjDL6cJ5k8fDGq4n/MTm8vczt7P2UEL+cRD8BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9e7879668373fad609751795c963a9a17246fba27026888a17912ce2b4742912","last_reissued_at":"2026-05-26T02:03:52.094849Z","signature_status":"signed_v1","first_computed_at":"2026-05-26T02:03:52.094849Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.18543","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-26T02:03:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"k18Upz49D8XKcKdUUk6A/tmSl3BqpZifGnpiWRzsrFFy90lY4uyOhaxf/QhqgwtU/nHJgMdkPeCj38ynxz/ICw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T21:27:46.356615Z"},"content_sha256":"2ebe463fd52da7785cfbce3fc976779827a43918e36d9e738e366ed4bb96ff25","schema_version":"1.0","event_id":"sha256:2ebe463fd52da7785cfbce3fc976779827a43918e36d9e738e366ed4bb96ff25"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:TZ4HSZUDOP5NMCLVC6K4SY5JUF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Jianbing Ni, Lingshuang Liu, Qi Li, Xiangman Li, Xiaodong Wu","submitted_at":"2025-06-23T11:53:31Z","abstract_excerpt":"The rapid proliferation of Large Language Models (LLMs) has heightened concerns regarding their exposure to jailbreak attacks, which craft adversarial inputs designed to elicit unsafe content. Although proprietary models such as GPT-4 have been extensively evaluated, the robustness of emerging open-source systems like DeepSeek remains insufficiently examined, despite their growing use in LLM applications. In this paper, we conduct the first comprehensive jailbreak analysis of the DeepSeek model family, comparing it with GPT-3.5 and GPT-4 through the HarmBench benchmark. We investigate seven re"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.18543","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.18543/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-26T02:03:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aMw6g+T0Id8BfAgekXBv5A2V2i1Tzg2640YPwS+CWihAWklz9Wvo9cf/PWvbuN8UQAlMCwIM8H9vf1pb9StRCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T21:27:46.357496Z"},"content_sha256":"5f2c9dbdc6b13cfc9544da2ce730ddffef36c089744b289449b5a83e33477d6c","schema_version":"1.0","event_id":"sha256:5f2c9dbdc6b13cfc9544da2ce730ddffef36c089744b289449b5a83e33477d6c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TZ4HSZUDOP5NMCLVC6K4SY5JUF/bundle.json","state_url":"https://pith.science/pith/TZ4HSZUDOP5NMCLVC6K4SY5JUF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TZ4HSZUDOP5NMCLVC6K4SY5JUF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T21:27:46Z","links":{"resolver":"https://pith.science/pith/TZ4HSZUDOP5NMCLVC6K4SY5JUF","bundle":"https://pith.science/pith/TZ4HSZUDOP5NMCLVC6K4SY5JUF/bundle.json","state":"https://pith.science/pith/TZ4HSZUDOP5NMCLVC6K4SY5JUF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TZ4HSZUDOP5NMCLVC6K4SY5JUF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:TZ4HSZUDOP5NMCLVC6K4SY5JUF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8ce99bd64d221b27479c81caa09a23e6e3fd44f11af54d8edeb1ea269498ff44","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T11:53:31Z","title_canon_sha256":"ad08327d4838890a2bd9891c2714268ae3be73b5114c1f96149841c5da198e3d"},"schema_version":"1.0","source":{"id":"2506.18543","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.18543","created_at":"2026-05-26T02:03:52Z"},{"alias_kind":"arxiv_version","alias_value":"2506.18543v2","created_at":"2026-05-26T02:03:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.18543","created_at":"2026-05-26T02:03:52Z"},{"alias_kind":"pith_short_12","alias_value":"TZ4HSZUDOP5N","created_at":"2026-05-26T02:03:52Z"},{"alias_kind":"pith_short_16","alias_value":"TZ4HSZUDOP5NMCLV","created_at":"2026-05-26T02:03:52Z"},{"alias_kind":"pith_short_8","alias_value":"TZ4HSZUD","created_at":"2026-05-26T02:03:52Z"}],"graph_snapshots":[{"event_id":"sha256:5f2c9dbdc6b13cfc9544da2ce730ddffef36c089744b289449b5a83e33477d6c","target":"graph","created_at":"2026-05-26T02:03:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.18543/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rapid proliferation of Large Language Models (LLMs) has heightened concerns regarding their exposure to jailbreak attacks, which craft adversarial inputs designed to elicit unsafe content. Although proprietary models such as GPT-4 have been extensively evaluated, the robustness of emerging open-source systems like DeepSeek remains insufficiently examined, despite their growing use in LLM applications. In this paper, we conduct the first comprehensive jailbreak analysis of the DeepSeek model family, comparing it with GPT-3.5 and GPT-4 through the HarmBench benchmark. We investigate seven re","authors_text":"Jianbing Ni, Lingshuang Liu, Qi Li, Xiangman Li, Xiaodong Wu","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T11:53:31Z","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.18543","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2ebe463fd52da7785cfbce3fc976779827a43918e36d9e738e366ed4bb96ff25","target":"record","created_at":"2026-05-26T02:03:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8ce99bd64d221b27479c81caa09a23e6e3fd44f11af54d8edeb1ea269498ff44","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T11:53:31Z","title_canon_sha256":"ad08327d4838890a2bd9891c2714268ae3be73b5114c1f96149841c5da198e3d"},"schema_version":"1.0","source":{"id":"2506.18543","kind":"arxiv","version":2}},"canonical_sha256":"9e7879668373fad609751795c963a9a17246fba27026888a17912ce2b4742912","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9e7879668373fad609751795c963a9a17246fba27026888a17912ce2b4742912","first_computed_at":"2026-05-26T02:03:52.094849Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-26T02:03:52.094849Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8baPzLYQOioNXCQs+Zj7/QxA805pzJyABVL0wHut449/GIlgVjDL6cJ5k8fDGq4n/MTm8vczt7P2UEL+cRD8BA==","signature_status":"signed_v1","signed_at":"2026-05-26T02:03:52.095843Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.18543","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2ebe463fd52da7785cfbce3fc976779827a43918e36d9e738e366ed4bb96ff25","sha256:5f2c9dbdc6b13cfc9544da2ce730ddffef36c089744b289449b5a83e33477d6c"],"state_sha256":"a2beb0663f35c29c92a61960061644589eafda02320fe9536d8e6f7ea9e6b716"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GSiYlZPPgmAqi9B+Cs68iXRAJ1364Q3iBQPdRHtPIMfsyRZ2UzqXn5vvAFAQ3bFyEOQJwXim/WqYzwf2+rT5AQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T21:27:46.363158Z","bundle_sha256":"af28f9421a04c8bae5ccdf905d03d303ac5bf80203b8f4ab16d3fd63f31a17f5"}}