{"as_of":"2026-08-09T15:47:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:013d5d9bb7e6e240e123527170160433e7074cf364fe5814516a1e043c10279e","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":16,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":16,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":16,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":16,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T14:37:39.700462Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-30T13:14:40.788988Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":"2309.14348","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-06-30T13:14:40.788988Z","title":"Defending against alignment-breaking attacks via robustly aligned llm","venue":null,"work_id":"d7a9a1c5-eebe-42d4-ba4d-b7f932432274","year":2023},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:c4baef1bf30ca55fac99f8b460607a854b8cd26ce48ca8b274dfe629f5db4a56","observation_id":"aeaa40a0-7599-463a-b09e-f0b523f7175e","resolution":{"observed_at":"2026-05-15T02:20:44.561823Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":"2309.14348","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-06-30T13:14:40.788988Z","title":"Defending against alignment-breaking attacks via robustly aligned llm","venue":null,"work_id":"d7a9a1c5-eebe-42d4-ba4d-b7f932432274","year":2023},"citing_paper":{"arxiv_id":"2409.18169","last_updated":"2026-04-23T18:48:49Z","snapshot_observed_at":"2026-07-06T19:22:58.341345Z","submitted_at":"2024-09-26T17:55:22Z","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","version":6},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-23T20:58:16.237327Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2409.18169"},"observation_digest":"sha256:a398634e5d1c57b0d2ad461ff776230a9db3cb060aa124b7a038a12e6cf043d2","observation_id":"89d4f606-6489-4d8a-9803-2cf5ee4b2273","resolution":{"observed_at":"2026-05-23T20:58:25.804371Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-08-09T14:37:39.700462Z","title":"arXiv preprint arXiv:2309.14348 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.01764","last_updated":"2025-02-03T19:09:05Z","snapshot_observed_at":"2026-08-09T14:30:32.974073Z","submitted_at":"2025-02-03T19:09:05Z","title":"Training Users Against Human and GPT-4 Generated Social Engineering Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-09T14:37:39.700462Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2502.01764"},"observation_digest":"sha256:6a5f65fbb030470d14b346bbb64d47c67b50e764f26f0617df076619387a86be","observation_id":"1987a853-bb8e-40d6-a5bc-1edff36c0992","resolution":{"observed_at":"2026-08-09T14:37:39.700462Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-08-09T10:29:50.240137Z","title":"Defending against alignment-breaking attacks via robustly aligned llm,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.02960","last_updated":"2025-02-05T07:54:07Z","snapshot_observed_at":"2026-08-09T10:25:22.459556Z","submitted_at":"2025-02-05T07:54:07Z","title":"Large Language Model Adversarial Landscape Through the Lens of Attack Objectives","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-09T10:29:50.240137Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2502.02960"},"observation_digest":"sha256:25f0f16819ba94ec205f89ff46414502bfd09463bfb776758634b6edbb93d759","observation_id":"64256897-cf8a-4449-8d82-8bfdd6f80501","resolution":{"observed_at":"2026-08-09T10:29:50.240137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-08-08T12:25:30.523910Z","title":"Defending against alignment-breaking attacks via ro- bustly aligned llm","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.07557","last_updated":"2025-02-11T13:50:50Z","snapshot_observed_at":"2026-08-09T03:24:13.351555Z","submitted_at":"2025-02-11T13:50:50Z","title":"JBShield: Defending Large Language Models from Jailbreak Attacks through Activated Concept Analysis and Manipulation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-08T12:25:30.523910Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2502.07557"},"observation_digest":"sha256:bcb54329e9681cf5bdfad4df88dd85a00c211ba3130593201964535c5cf2dc67","observation_id":"6b0d11a4-0216-4169-b477-edaa041104e2","resolution":{"observed_at":"2026-08-08T12:25:30.523910Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-08-07T14:44:44.993336Z","title":"Defending against alignment-breaking attacks via robustly aligned llm","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.17735","last_updated":"2025-07-18T07:34:40Z","snapshot_observed_at":"2026-08-09T15:26:41.311808Z","submitted_at":"2025-05-23T10:56:06Z","title":"SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T14:44:44.993336Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2505.17735"},"observation_digest":"sha256:6a4344b8f9decb5bc65d3ec7499c60e52e85074d83b7d621595912828ffaa1aa","observation_id":"0bd44a55-90f6-4db0-8a57-d90f4b2cfaa9","resolution":{"observed_at":"2026-08-07T14:44:44.993336Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-08-07T13:35:55.748392Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.21277","last_updated":"2025-05-28T14:16:10Z","snapshot_observed_at":"2026-08-09T03:35:23.473114Z","submitted_at":"2025-05-27T14:48:44Z","title":"Breaking the Ceiling: Exploring the Potential of Jailbreak Attacks through Expanding Strategy Space","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T13:35:55.748392Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2505.21277"},"observation_digest":"sha256:8ac3bac4d0b1ca72194157b41adf813960705cf0bc982f957908a16288b8e097","observation_id":"4538763a-b358-4a70-9d37-fc0f6b1d787a","resolution":{"observed_at":"2026-08-07T13:35:55.748392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-08-06T16:28:49.811945Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13474","last_updated":"2025-07-17T18:33:50Z","snapshot_observed_at":"2026-08-09T05:14:52.776386Z","submitted_at":"2025-07-17T18:33:50Z","title":"Paper Summary Attack: Jailbreaking LLMs through LLM Safety Papers","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-06T16:28:49.811945Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2507.13474"},"observation_digest":"sha256:be0c5aed2397ff434ea3bda4ec524bef1fdca7e7adcaa2fe0365ca13ca400939","observation_id":"4b1863eb-3d29-49fb-a8e3-40e0256476e6","resolution":{"observed_at":"2026-08-06T16:28:49.811945Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-08-06T04:46:10.420990Z","title":"thinking","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-06T08:33:34.142274Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.420990Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:23ff08b9683f4643ae7375c985380e4db8255f9a63c7a43750baa3ea3f5b0fca","observation_id":"fd3d5b42-2e5e-4763-ab2e-2b2addca7818","resolution":{"observed_at":"2026-08-06T04:46:10.420990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":"2309.14348","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-06-30T13:14:40.788988Z","title":"Defending against alignment-breaking attacks via robustly aligned llm","venue":null,"work_id":"d7a9a1c5-eebe-42d4-ba4d-b7f932432274","year":2023},"citing_paper":{"arxiv_id":"2508.04204","last_updated":"2026-05-06T06:58:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-08-06T08:35:10Z","title":"ReasoningGuard: Safeguarding Large Reasoning Models with Inference-time Safety Aha Moments","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-19T01:02:07.088724Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2508.04204"},"observation_digest":"sha256:711fcddd5f5b62fc8291a5960ecb4b88a99f72bf4290c1330bfe9581aa61d31d","observation_id":"ea5ea22f-bccc-43c0-ae88-8d3c153020ed","resolution":{"observed_at":"2026-05-19T01:02:54.673549Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-08-04T22:33:31.926040Z","title":"Defending against alignment-breaking attacks via robustly aligned llm,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.07287","last_updated":"2025-09-08T23:44:00Z","snapshot_observed_at":"2026-08-09T14:00:07.903618Z","submitted_at":"2025-09-08T23:44:00Z","title":"Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm","version":1},"reference_index":124,"source":"pdf_text","source_observed_at":"2026-08-04T22:33:31.926040Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2509.07287"},"observation_digest":"sha256:41d0a15892dc7b9cd7d1b1646f2a5a96677fb211ceddd193b98bd2cbb62dea88","observation_id":"b66173f8-dd3b-4e8b-abdb-0f16668dd1ca","resolution":{"observed_at":"2026-08-04T22:33:31.926040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":"2309.14348","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-06-30T13:14:40.788988Z","title":"Defending against alignment-breaking attacks via robustly aligned llm","venue":null,"work_id":"d7a9a1c5-eebe-42d4-ba4d-b7f932432274","year":2023},"citing_paper":{"arxiv_id":"2604.04749","last_updated":"2026-04-06T15:14:10Z","snapshot_observed_at":"2026-08-02T13:43:47.705599Z","submitted_at":"2026-04-06T15:14:10Z","title":"AI Trust OS -- A Continuous Governance Framework for Autonomous AI Observability and Zero-Trust Compliance in Enterprise Environments","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-10T18:48:26.121708Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2604.04749"},"observation_digest":"sha256:6d274bee3c5d2b42fd62e450425ce50885d9dfc3210a370270c950ad16e3ab30","observation_id":"c72c90da-83e9-4b29-bd0f-a194d0003486","resolution":{"observed_at":"2026-05-10T23:55:50.655648Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":"2309.14348","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-06-30T13:14:40.788988Z","title":"Defending against alignment-breaking attacks via robustly aligned llm","venue":null,"work_id":"d7a9a1c5-eebe-42d4-ba4d-b7f932432274","year":2023},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-07-06T22:58:34.504325Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:91b7ce21a658c36cfcad0c6c8eb1c498e098af5eb33dcbe53add5981df956762","observation_id":"751e182f-d888-4e85-bff5-6d7c21639e53","resolution":{"observed_at":"2026-05-11T05:45:57.624741Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":"2309.14348","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-06-30T13:14:40.788988Z","title":"Defending against alignment-breaking attacks via robustly aligned llm","venue":null,"work_id":"d7a9a1c5-eebe-42d4-ba4d-b7f932432274","year":2023},"citing_paper":{"arxiv_id":"2605.24552","last_updated":"2026-05-23T12:39:25Z","snapshot_observed_at":"2026-08-07T01:16:57.528849Z","submitted_at":"2026-05-23T12:39:25Z","title":"Ellipsoid Control: A White-list Jailbreak Defense via Benign Latent Modeling","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-30T13:10:44.728498Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2605.24552"},"observation_digest":"sha256:8ad02afec3ac40c7c1b75d24ee53c4bdbd8c2bbda0a854efda732a6797557e93","observation_id":"c63dfc51-94c3-4b1c-b58a-251dc347d6bf","resolution":{"observed_at":"2026-06-30T13:14:40.790523Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-07-13T18:51:10.298187Z","title":"Cao, et al., Defending against alignment-breaking attacks via robustly aligned llm, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.00003","last_updated":"2026-03-25T15:36:15Z","snapshot_observed_at":"2026-07-13T18:51:10.077827Z","submitted_at":"2026-03-25T15:36:15Z","title":"Learning from Mistakes: Can LLM Self-Recover after Misalignment?","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-13T18:51:10.298187Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2606.00003"},"observation_digest":"sha256:857daaedef43a01d5f658ec0d980fd76f49383dfb2a12975f612a384ab63be0d","observation_id":"5e6ea70a-49cb-425d-bb61-b5a8cff0c5f5","resolution":{"observed_at":"2026-07-13T18:51:10.298187Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-08-04T01:16:13.252157Z","title":"Defending against alignment-breaking attacks via robustly aligned llm,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.00134","last_updated":"2026-07-31T14:04:49Z","snapshot_observed_at":"2026-08-07T20:59:09.642310Z","submitted_at":"2026-07-31T14:04:49Z","title":"Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:13.252157Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2608.00134"},"observation_digest":"sha256:35605c9f28015683cc0c944dd85a4b61003902110b0d1d21f6aadb6cfaee15c8","observation_id":"ba8886ca-b654-4e61-8022-fc96553d7efc","resolution":{"observed_at":"2026-08-04T01:16:13.252157Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2309.14348/citation-record","integrity":"/paper/2309.14348/integrity","json":"/paper/2309.14348/citation-record.json","paper":"/paper/2309.14348"},"outbound":[],"paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","latest_version":3,"primary_category":"cs.CL","snapshot_observed_at":"2026-07-06T16:23:26.584450Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 16 inbound Pith citation observations for arXiv:2309.14348."}