{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/code/get-embedding-matrix","entry":"get_embedding_matrix","source":"Syntology graph, per-sample; not an archive number","read_at":"2026-09-24T18:15:14+00:00","claim":"Names are grouped by exact entry-name string. Same-named routines are NOT asserted to be equivalent; 'ran' means executed on a synthesized fixture, not correctness. n_samples_ran = sum of by_status over every status except 'unverified' (ran_draft_wrong and ran_fixture are failures of Syntology's instrument, not of the code); n_papers_ran = papers with at least one such sample.","status_vocabulary":{"ran_honours":"ran, honoured the contract we drafted","ran_violates":"ran, violated the contract we drafted","ran_draft_wrong":"ran; our contract draft was wrong, not the code","ran_fixture":"ran; our fixture could not drive it","ran":"ran on a synthesized input","unverified":"unverified (harvested, no recorded run)"},"n_papers":16,"n_papers_ran":2,"units":"n_samples, n_samples_ran, n_samples_fingerprinted and by_status count distinct code bodies (code_sha256); n_places and n_places_pointer_only count places, one per (paper, code body) pair, which is also the unit of the samples list","n_samples":10,"n_samples_ran":2,"n_samples_fingerprinted":0,"n_places":16,"n_places_pointer_only":7,"by_status":{"ran_honours":0,"ran_violates":0,"ran_draft_wrong":0,"ran_fixture":1,"ran":1,"unverified":8},"syntology":{"atlas_url":null,"mcp":null,"mcp_per_sample":{"tool":"get_code","arguments_in":"samples[].mcp_get_code"},"developers":"https://syntology.ai/developers"},"samples":[{"arxiv_id":"2603.03081","paper":"/paper/arxiv-2603-03081","title":"TAO-Attack: Toward Advanced Optimization-Based Jailbreak Attacks for Large Language Models","date":null,"month_inferred_from_arxiv_id":"2026-03","title_source":"syntology","repo":"ZevineXu/TAO-Attack","path":"llm_attacks/base/attack_manager.py","file_url":"https://github.com/ZevineXu/TAO-Attack/blob/HEAD/llm_attacks/base/attack_manager.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"688aaeba506e3329","mcp_get_code":{"code_sha256":"688aaeba506e3329"}},{"arxiv_id":"2601.12263","paper":"/paper/arxiv-2601-12263","title":"Multimodal Generative Engine Optimization: Rank Manipulation for Vision-Language Model Rankers","date":null,"month_inferred_from_arxiv_id":"2026-01","title_source":"syntology","repo":"glad-lab/MGEO","path":"attack_autodan.py","file_url":"https://github.com/glad-lab/MGEO/blob/HEAD/attack_autodan.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"27171d1b04633a6f","mcp_get_code":{"code_sha256":"27171d1b04633a6f"}},{"arxiv_id":"2406.01288","paper":"/paper/improved-few-shot-jailbreaking-can-circumvent","title":"Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defenses","date":"2024-06-03","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"sail-sg/I-FSJ","path":"llm_attacks/base/attack_manager.py","file_url":"https://github.com/sail-sg/I-FSJ/blob/HEAD/llm_attacks/base/attack_manager.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"688aaeba506e3329","mcp_get_code":{"code_sha256":"688aaeba506e3329"}},{"arxiv_id":"2405.21018","paper":"/paper/improved-techniques-for-optimization-based","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","date":"2024-05-31","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"jiaxiaojunqaq/i-gcg","path":"llm_attacks/base/attack_manager.py","file_url":"https://github.com/jiaxiaojunqaq/i-gcg/blob/HEAD/llm_attacks/base/attack_manager.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"688aaeba506e3329","mcp_get_code":{"code_sha256":"688aaeba506e3329"}},{"arxiv_id":"2405.18780","paper":"/paper/quantitative-certification-of-bias-in-large","title":"Quantitative Certification of Bias in Large Language Models","date":"2024-05-29","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"uiuc-focal-lab/LLMCert-B","path":"utils.py","file_url":"https://github.com/uiuc-focal-lab/LLMCert-B/blob/HEAD/utils.py","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"AGPL-3.0","inline_ok":false,"code_sha256_prefix":"5940b71f90ca6d39","mcp_get_code":{"code_sha256":"5940b71f90ca6d39"}},{"arxiv_id":"2404.13968","paper":"/paper/protecting-your-llms-with-information","title":"Protecting Your LLMs with Information Bottleneck","date":"2024-04-22","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"llm-attacks/llm-attacks","path":"llm_attacks/base/attack_manager.py","file_url":"https://github.com/llm-attacks/llm-attacks/blob/HEAD/llm_attacks/base/attack_manager.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"688aaeba506e3329","mcp_get_code":{"code_sha256":"688aaeba506e3329"}},{"arxiv_id":"2403.04957","paper":"/paper/automatic-and-universal-prompt-injection","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","date":"2024-03-07","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"sheltonliu-n/universal-prompt-injection","path":"utils/opt_utils.py","file_url":"https://github.com/sheltonliu-n/universal-prompt-injection/blob/HEAD/utils/opt_utils.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"688aaeba506e3329","mcp_get_code":{"code_sha256":"688aaeba506e3329"}},{"arxiv_id":"2403.01251","paper":"/paper/accelerating-greedy-coordinate-gradient-via","title":"Accelerating Greedy Coordinate Gradient and General Prompt Optimization via Probe Sampling","date":"2024-03-02","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"zhaoyiran924/probe-sampling","path":"llm_attacks/base/attack_manager.py","file_url":"https://github.com/zhaoyiran924/probe-sampling/blob/HEAD/llm_attacks/base/attack_manager.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"4c1661dc05e88ceb","mcp_get_code":{"code_sha256":"4c1661dc05e88ceb"}},{"arxiv_id":"2402.16459","paper":"/paper/defending-llms-against-jailbreaking-attacks","title":"Defending LLMs against Jailbreaking Attacks via Backtranslation","date":"2024-02-26","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"yihanwang617/llm-jailbreaking-defense-backtranslation","path":"GCG/llm_attacks/base/attack_manager.py","file_url":"https://github.com/yihanwang617/llm-jailbreaking-defense-backtranslation/blob/HEAD/GCG/llm_attacks/base/attack_manager.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"BSD-3-Clause","inline_ok":true,"code_sha256_prefix":"688aaeba506e3329","mcp_get_code":{"code_sha256":"688aaeba506e3329"}},{"arxiv_id":"2402.13459","paper":"/paper/learning-to-poison-large-language-models","title":"Learning to Poison Large Language Models for Downstream Manipulation","date":"2024-02-21","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"rookiezxy/gbtl","path":"llm_attacks/base/attack_manager.py","file_url":"https://github.com/rookiezxy/gbtl/blob/HEAD/llm_attacks/base/attack_manager.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"bc2492114c568283","mcp_get_code":{"code_sha256":"bc2492114c568283"}},{"arxiv_id":"2402.09063","paper":"/paper/soft-prompt-threats-attacking-safety","title":"Soft Prompt Threats: Attacking Safety Alignment and Unlearning in Open-Source LLMs through the Embedding Space","date":"2024-02-14","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"schwinnl/llm_embedding_attack","path":"embedding_attack_toxic.py","file_url":"https://github.com/schwinnl/llm_embedding_attack/blob/HEAD/embedding_attack_toxic.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"688aaeba506e3329","mcp_get_code":{"code_sha256":"688aaeba506e3329"}},{"arxiv_id":"2402.05467","paper":"/paper/rapid-optimization-for-jailbreaking-llms-via","title":"Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia","date":"2024-02-08","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"solidshen/ripple_official","path":"src/utils/attack_manager.py","file_url":"https://github.com/solidshen/ripple_official/blob/HEAD/src/utils/attack_manager.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"de7dc9c0c5b053d7","mcp_get_code":{"code_sha256":"de7dc9c0c5b053d7"}},{"arxiv_id":"2401.17263","paper":"/paper/robust-prompt-optimization-for-defending","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","date":"2024-01-30","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"lapisrocks/rpo","path":"rpo/opt_utils.py","file_url":"https://github.com/lapisrocks/rpo/blob/HEAD/rpo/opt_utils.py","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"89682b91f1fa30ee","mcp_get_code":{"code_sha256":"89682b91f1fa30ee"}},{"arxiv_id":"2311.09948","paper":"/paper/hijacking-large-language-models-via","title":"Hijacking Large Language Models via Adversarial In-Context Learning","date":"2023-11-16","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"RookieZxy/GGI-attack","path":"GGI-attack/llm_attacks/base/attack_manager.py","file_url":"https://github.com/RookieZxy/GGI-attack/blob/HEAD/GGI-attack/llm_attacks/base/attack_manager.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"2703f8b621b73255","mcp_get_code":{"code_sha256":"2703f8b621b73255"}},{"arxiv_id":"2310.15140","paper":"/paper/autodan-automatic-and-interpretable","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","date":"2023-10-23","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"rotaryhammer/code-autodan","path":"autodan/autodan/attack_manager.py","file_url":"https://github.com/rotaryhammer/code-autodan/blob/HEAD/autodan/autodan/attack_manager.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"7dd95b29871075f9","mcp_get_code":{"code_sha256":"7dd95b29871075f9"}},{"arxiv_id":"2307.15043","paper":"/paper/universal-and-transferable-adversarial","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","date":"2023-07-27","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"sj21j/Regularized_Relaxation","path":"helper.py","file_url":"https://github.com/sj21j/Regularized_Relaxation/blob/HEAD/helper.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"8e6c241c57e9b7d0","mcp_get_code":{"code_sha256":"8e6c241c57e9b7d0"}}]}