{"as_of":"2026-08-09T18:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f0244f8beb003d05bc48e6da777152eefc5db6109f2d3abfeb687a9327dd691a","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T10:29:50.195132Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T12:45:44.896570Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2401.17263","last_updated":"2024-11-08T06:57:05Z","snapshot_observed_at":"2026-08-06T04:09:50.828544Z","submitted_at":"2024-01-30T18:56:08Z","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","version":5},"cited_work":{"arxiv_id":"2401.17263","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.17263","snapshot_observed_at":"2026-07-01T12:45:44.896570Z","title":"”Robust prompt optimization for defending language models against jailbreaking attacks.” arXiv preprint arXiv:2401.17263 (2024)","venue":null,"work_id":"c53682b9-9177-440c-a27f-68ecf75fae42","year":2024},"citing_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-12T09:48:31.721745Z"},"links":{"cited_paper":"/paper/2401.17263","citing_paper":"/paper/2310.08419"},"observation_digest":"sha256:b271b3ebf14d1e7bd82432d470a6115d9a2811aad236a0b2f3148f3f9e954b0a","observation_id":"99b24150-1a03-4ac5-9292-e69d1235d680","resolution":{"observed_at":"2026-05-12T09:48:33.327484Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.17263","last_updated":"2024-11-08T06:57:05Z","snapshot_observed_at":"2026-08-06T04:09:50.828544Z","submitted_at":"2024-01-30T18:56:08Z","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","version":5},"cited_work":{"arxiv_id":"2401.17263","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.17263","snapshot_observed_at":"2026-07-01T12:45:44.896570Z","title":"”Robust prompt optimization for defending language models against jailbreaking attacks.” arXiv preprint arXiv:2401.17263 (2024)","venue":null,"work_id":"c53682b9-9177-440c-a27f-68ecf75fae42","year":2024},"citing_paper":{"arxiv_id":"2402.17177","last_updated":"2024-04-17T18:41:39Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-02-27T03:30:58Z","title":"Sora: A Review on Background, Technology, Limitations, and Opportunities of Large Vision Models","version":3},"reference_index":115,"source":"pdf_text","source_observed_at":"2026-05-13T13:43:11.024069Z"},"links":{"cited_paper":"/paper/2401.17263","citing_paper":"/paper/2402.17177"},"observation_digest":"sha256:e2517190d2a4f20aa01fc363a8c7235fa149b91a70ca1df8123a8beb69732bd9","observation_id":"726cd05c-10cf-47d5-b5b6-234880d752ae","resolution":{"observed_at":"2026-05-13T13:43:11.175792Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.17263","last_updated":"2024-11-08T06:57:05Z","snapshot_observed_at":"2026-08-06T04:09:50.828544Z","submitted_at":"2024-01-30T18:56:08Z","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","version":5},"cited_work":{"arxiv_id":"2401.17263","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.17263","snapshot_observed_at":"2026-07-01T12:45:44.896570Z","title":"”Robust prompt optimization for defending language models against jailbreaking attacks.” arXiv preprint arXiv:2401.17263 (2024)","venue":null,"work_id":"c53682b9-9177-440c-a27f-68ecf75fae42","year":2024},"citing_paper":{"arxiv_id":"2403.10559","last_updated":"2026-04-21T03:03:43Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-14T06:51:26Z","title":"Generative Models and Connected and Automated Vehicles: A Survey in Exploring the Intersection of Transportation and AI","version":4},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-24T02:48:10.934475Z"},"links":{"cited_paper":"/paper/2401.17263","citing_paper":"/paper/2403.10559"},"observation_digest":"sha256:726c18b5ee55567cd409c3add4e7597df8f76dd4cd634e09b10a937606fe4249","observation_id":"83210014-3757-4040-b399-720360c5d0be","resolution":{"observed_at":"2026-05-24T02:48:47.341043Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.17263","last_updated":"2024-11-08T06:57:05Z","snapshot_observed_at":"2026-08-06T04:09:50.828544Z","submitted_at":"2024-01-30T18:56:08Z","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","version":5},"cited_work":{"arxiv_id":"2401.17263","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.17263","snapshot_observed_at":"2026-07-01T12:45:44.896570Z","title":"”Robust prompt optimization for defending language models against jailbreaking attacks.” arXiv preprint arXiv:2401.17263 (2024)","venue":null,"work_id":"c53682b9-9177-440c-a27f-68ecf75fae42","year":2024},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":121,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2401.17263","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:ba9390360bc13fe75b3bcae280f6118eec672a1827209d6a33cc74f712484fbd","observation_id":"6b540e4d-dbc5-4bb3-bb7f-fe88a09f5578","resolution":{"observed_at":"2026-05-15T02:20:44.517990Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.17263","last_updated":"2024-11-08T06:57:05Z","snapshot_observed_at":"2026-08-06T04:09:50.828544Z","submitted_at":"2024-01-30T18:56:08Z","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.17263","snapshot_observed_at":"2026-08-09T10:29:50.195132Z","title":"Robust prompt optimization for defending language models against jailbreaking attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.02960","last_updated":"2025-02-05T07:54:07Z","snapshot_observed_at":"2026-08-09T10:25:22.459556Z","submitted_at":"2025-02-05T07:54:07Z","title":"Large Language Model Adversarial Landscape Through the Lens of Attack Objectives","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-09T10:29:50.195132Z"},"links":{"cited_paper":"/paper/2401.17263","citing_paper":"/paper/2502.02960"},"observation_digest":"sha256:925483ebfdbe09066dbd326e177c8db227deab03033bf6f579dd7f1df4d745e4","observation_id":"be87d481-dcf7-4fbc-b8cd-485ef85dbc5d","resolution":{"observed_at":"2026-08-09T10:29:50.195132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.17263","last_updated":"2024-11-08T06:57:05Z","snapshot_observed_at":"2026-08-06T04:09:50.828544Z","submitted_at":"2024-01-30T18:56:08Z","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.17263","snapshot_observed_at":"2026-08-06T04:47:25.685053Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":199,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.685053Z"},"links":{"cited_paper":"/paper/2401.17263","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:d79ce7f3cbd29761593bcd424a2793ca81e1c5c91a8bd9c76419a8d12cbda878","observation_id":"b3e86dd3-3943-422a-8225-1743929d5e3a","resolution":{"observed_at":"2026-08-06T04:47:25.685053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.17263","last_updated":"2024-11-08T06:57:05Z","snapshot_observed_at":"2026-08-06T04:09:50.828544Z","submitted_at":"2024-01-30T18:56:08Z","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","version":5},"cited_work":{"arxiv_id":"2401.17263","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.17263","snapshot_observed_at":"2026-07-01T12:45:44.896570Z","title":"”Robust prompt optimization for defending language models against jailbreaking attacks.” arXiv preprint arXiv:2401.17263 (2024)","venue":null,"work_id":"c53682b9-9177-440c-a27f-68ecf75fae42","year":2024},"citing_paper":{"arxiv_id":"2508.04204","last_updated":"2026-05-06T06:58:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-08-06T08:35:10Z","title":"ReasoningGuard: Safeguarding Large Reasoning Models with Inference-time Safety Aha Moments","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-19T01:02:07.088724Z"},"links":{"cited_paper":"/paper/2401.17263","citing_paper":"/paper/2508.04204"},"observation_digest":"sha256:cd34280cc600537c820d04b59f8978a679df07619c0dad5ad90c3af962b157ca","observation_id":"c141b216-a031-4b87-b6b4-07cf68b46eed","resolution":{"observed_at":"2026-05-19T01:02:54.687751Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.17263","last_updated":"2024-11-08T06:57:05Z","snapshot_observed_at":"2026-08-06T04:09:50.828544Z","submitted_at":"2024-01-30T18:56:08Z","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.17263","snapshot_observed_at":"2026-08-05T22:24:23.388868Z","title":"Ro- bust prompt optimization for defending lan- guage models against jailbreaking attacks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.07139","last_updated":"2025-08-10T01:59:07Z","snapshot_observed_at":"2026-08-06T02:11:07.077923Z","submitted_at":"2025-08-10T01:59:07Z","title":"A Real-Time, Self-Tuning Moderator Framework for Adversarial Prompt Detection","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T22:24:23.388868Z"},"links":{"cited_paper":"/paper/2401.17263","citing_paper":"/paper/2508.07139"},"observation_digest":"sha256:15ef4d603354ea4fc12f4ff0d8ecb4ff2f98f0b63e7ae334799d8315fd652f7d","observation_id":"cadf9baa-dbf5-470b-94e7-9452b8d9df02","resolution":{"observed_at":"2026-08-05T22:24:23.388868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.17263","last_updated":"2024-11-08T06:57:05Z","snapshot_observed_at":"2026-08-06T04:09:50.828544Z","submitted_at":"2024-01-30T18:56:08Z","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","version":5},"cited_work":{"arxiv_id":"2401.17263","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.17263","snapshot_observed_at":"2026-07-01T12:45:44.896570Z","title":"”Robust prompt optimization for defending language models against jailbreaking attacks.” arXiv preprint arXiv:2401.17263 (2024)","venue":null,"work_id":"c53682b9-9177-440c-a27f-68ecf75fae42","year":2024},"citing_paper":{"arxiv_id":"2511.12710","last_updated":"2026-05-18T06:50:41Z","snapshot_observed_at":"2026-07-06T22:35:55.936840Z","submitted_at":"2025-11-16T17:52:07Z","title":"Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-05-21T18:58:53.183734Z"},"links":{"cited_paper":"/paper/2401.17263","citing_paper":"/paper/2511.12710"},"observation_digest":"sha256:dafdf1c4b8287508a557ec4ba3d1fc5f63dfb299794979372f39894faa2f6b5d","observation_id":"4e06eab7-6159-4db0-bf0c-3751c1185b78","resolution":{"observed_at":"2026-05-21T19:00:30.330609Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.17263","last_updated":"2024-11-08T06:57:05Z","snapshot_observed_at":"2026-08-06T04:09:50.828544Z","submitted_at":"2024-01-30T18:56:08Z","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","version":5},"cited_work":{"arxiv_id":"2401.17263","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.17263","snapshot_observed_at":"2026-07-01T12:45:44.896570Z","title":"”Robust prompt optimization for defending language models against jailbreaking attacks.” arXiv preprint arXiv:2401.17263 (2024)","venue":null,"work_id":"c53682b9-9177-440c-a27f-68ecf75fae42","year":2024},"citing_paper":{"arxiv_id":"2606.30783","last_updated":"2026-06-29T18:11:17Z","snapshot_observed_at":"2026-08-08T22:30:38.879886Z","submitted_at":"2026-06-29T18:11:17Z","title":"Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-07-01T01:44:07.700127Z"},"links":{"cited_paper":"/paper/2401.17263","citing_paper":"/paper/2606.30783"},"observation_digest":"sha256:4520fe9d1ff9de3b01a79c9a883579e5577ef51d24212c5a5b2666fad46d7c12","observation_id":"a854484c-64cc-4376-b63d-9fb68d732f7f","resolution":{"observed_at":"2026-07-01T12:45:44.898063Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.17263","last_updated":"2024-11-08T06:57:05Z","snapshot_observed_at":"2026-08-06T04:09:50.828544Z","submitted_at":"2024-01-30T18:56:08Z","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","version":5},"cited_work":{"arxiv_id":"2401.17263","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.17263","snapshot_observed_at":"2026-07-01T12:45:44.896570Z","title":"”Robust prompt optimization for defending language models against jailbreaking attacks.” arXiv preprint arXiv:2401.17263 (2024)","venue":null,"work_id":"c53682b9-9177-440c-a27f-68ecf75fae42","year":2024},"citing_paper":{"arxiv_id":"2606.31748","last_updated":"2026-06-30T14:38:49Z","snapshot_observed_at":"2026-07-07T00:05:27.130060Z","submitted_at":"2026-06-30T14:38:49Z","title":"Addressing Over-Refusal in LLMs with Competing Rewards","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-07-01T06:59:12.695984Z"},"links":{"cited_paper":"/paper/2401.17263","citing_paper":"/paper/2606.31748"},"observation_digest":"sha256:19c2dffaf18bb8d3e7c89720d332f61804d88d5d7cfaa9e9e7e0a29b1e2e3ab9","observation_id":"ba88e58f-69c8-4f31-95aa-c3b55c7e41b4","resolution":{"observed_at":"2026-07-01T08:55:35.592963Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2401.17263/citation-record","integrity":"/paper/2401.17263/integrity","json":"/paper/2401.17263/citation-record.json","paper":"/paper/2401.17263"},"outbound":[],"paper":{"arxiv_id":"2401.17263","last_updated":"2024-11-08T06:57:05Z","latest_version":5,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-06T04:09:50.828544Z","submitted_at":"2024-01-30T18:56:08Z","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 11 inbound Pith citation observations for arXiv:2401.17263."}