{"as_of":"2026-08-09T20:59:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1d0b72fa6fde589d8e5dd8466baec5912f972fa36d780afb80538656bd115fbf","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T13:02:43.211841Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-19T10:57:16.524772Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.15180","last_updated":"2024-02-27T01:39:20Z","snapshot_observed_at":"2026-07-06T17:34:28.430476Z","submitted_at":"2024-02-23T08:22:24Z","title":"Break the Breakout: Reinventing LM Defense Against Jailbreak Attacks with Self-Refinement","version":2},"cited_work":{"arxiv_id":"2402.15180","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.15180","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Break the breakout: Rein- venting lm defense against jailbreak attacks with self-refinement","venue":null,"work_id":"c4c1c7e4-1546-47d2-aac1-fddc008ee309","year":2024},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2402.15180","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:0d1c6be890a1ded69dfa6e74b35a7f5f0b5a366fbd4b745e3baee44307804ee2","observation_id":"2fe70c4b-f7fc-4c78-8891-8845a5691583","resolution":{"observed_at":"2026-05-15T02:20:44.697101Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.15180","last_updated":"2024-02-27T01:39:20Z","snapshot_observed_at":"2026-07-06T17:34:28.430476Z","submitted_at":"2024-02-23T08:22:24Z","title":"Break the Breakout: Reinventing LM Defense Against Jailbreak Attacks with Self-Refinement","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.15180","snapshot_observed_at":"2026-08-07T13:02:43.211841Z","title":"Break the breakout: Reinventing lm defense against jailbreak attacks with self-refinement","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.22960","last_updated":"2025-06-20T03:07:38Z","snapshot_observed_at":"2026-08-09T05:48:09.867209Z","submitted_at":"2025-05-29T01:02:55Z","title":"Revisiting Multi-Agent Debate as Test-Time Scaling: A Systematic Study of Conditional Effectiveness","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T13:02:43.211841Z"},"links":{"cited_paper":"/paper/2402.15180","citing_paper":"/paper/2505.22960"},"observation_digest":"sha256:d779e35588d1eeb68ea75da74113031e73bce95c0d51114ab5d2a2f04c3377a4","observation_id":"b8eb9045-ce00-42b4-8d31-5e0cb97648ca","resolution":{"observed_at":"2026-08-07T13:02:43.211841Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.15180","last_updated":"2024-02-27T01:39:20Z","snapshot_observed_at":"2026-07-06T17:34:28.430476Z","submitted_at":"2024-02-23T08:22:24Z","title":"Break the Breakout: Reinventing LM Defense Against Jailbreak Attacks with Self-Refinement","version":2},"cited_work":{"arxiv_id":"2402.15180","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.15180","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Break the breakout: Rein- venting lm defense against jailbreak attacks with self-refinement","venue":null,"work_id":"c4c1c7e4-1546-47d2-aac1-fddc008ee309","year":2024},"citing_paper":{"arxiv_id":"2506.09067","last_updated":"2026-04-09T22:50:08Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-06-08T16:26:51Z","title":"Enhancing the Safety of Medical Vision-Language Models by Synthetic Demonstrations","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-19T10:54:55.262180Z"},"links":{"cited_paper":"/paper/2402.15180","citing_paper":"/paper/2506.09067"},"observation_digest":"sha256:b7613f799cbabdfb41a2bf058047d5d30d7564af20ca0059f98869169a048629","observation_id":"8bc3f7c1-24e2-4613-a87f-ad6c7de19e8b","resolution":{"observed_at":"2026-05-19T10:57:16.527088Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.15180","last_updated":"2024-02-27T01:39:20Z","snapshot_observed_at":"2026-07-06T17:34:28.430476Z","submitted_at":"2024-02-23T08:22:24Z","title":"Break the Breakout: Reinventing LM Defense Against Jailbreak Attacks with Self-Refinement","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.15180","snapshot_observed_at":"2026-08-06T12:09:39.696496Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22037","last_updated":"2025-07-29T17:39:48Z","snapshot_observed_at":"2026-08-06T15:54:16.679483Z","submitted_at":"2025-07-29T17:39:48Z","title":"Secure Tug-of-War (SecTOW): Iterative Defense-Attack Training with Reinforcement Learning for Multimodal Model Security","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-06T12:09:39.696496Z"},"links":{"cited_paper":"/paper/2402.15180","citing_paper":"/paper/2507.22037"},"observation_digest":"sha256:3c14f3b1a16748249a7e0a9533dc21cc37aceaed210b43d0874cbcd2f97bc01b","observation_id":"b88c5562-03a5-4f26-a6b7-0a5c1f784bd3","resolution":{"observed_at":"2026-08-06T12:09:39.696496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.15180","last_updated":"2024-02-27T01:39:20Z","snapshot_observed_at":"2026-07-06T17:34:28.430476Z","submitted_at":"2024-02-23T08:22:24Z","title":"Break the Breakout: Reinventing LM Defense Against Jailbreak Attacks with Self-Refinement","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.15180","snapshot_observed_at":"2026-08-04T09:25:44.871354Z","title":"Break the breakout: Reinventing LM defense against jailbreak attacks with self-refinement.CoRR, abs/2402.15180, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-06T02:45:04.316908Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:44.871354Z"},"links":{"cited_paper":"/paper/2402.15180","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:a2f76938a7def9baa346f05721becd6a3e465dd27789f1b1dc6e5e17cc595027","observation_id":"59b80ef8-a9d3-4ade-9607-bfd534c63dad","resolution":{"observed_at":"2026-08-04T09:25:44.871354Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.15180","last_updated":"2024-02-27T01:39:20Z","snapshot_observed_at":"2026-07-06T17:34:28.430476Z","submitted_at":"2024-02-23T08:22:24Z","title":"Break the Breakout: Reinventing LM Defense Against Jailbreak Attacks with Self-Refinement","version":2},"cited_work":{"arxiv_id":"2402.15180","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.15180","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Break the breakout: Rein- venting lm defense against jailbreak attacks with self-refinement","venue":null,"work_id":"c4c1c7e4-1546-47d2-aac1-fddc008ee309","year":2024},"citing_paper":{"arxiv_id":"2604.15789","last_updated":"2026-04-17T07:50:42Z","snapshot_observed_at":"2026-07-06T23:03:16.345488Z","submitted_at":"2026-04-17T07:50:42Z","title":"A Systematic Study of Training-Free Methods for Trustworthy Large Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-10T08:19:42.671690Z"},"links":{"cited_paper":"/paper/2402.15180","citing_paper":"/paper/2604.15789"},"observation_digest":"sha256:fd97204050b606abd5fb245131db77bf2390ac49e7a1c5fb7a71a7b2f22d771a","observation_id":"6d22ec0c-7b69-40dc-8aee-72a222d00e69","resolution":{"observed_at":"2026-05-10T08:22:37.372133Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.15180","last_updated":"2024-02-27T01:39:20Z","snapshot_observed_at":"2026-07-06T17:34:28.430476Z","submitted_at":"2024-02-23T08:22:24Z","title":"Break the Breakout: Reinventing LM Defense Against Jailbreak Attacks with Self-Refinement","version":2},"cited_work":{"arxiv_id":"2402.15180","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.15180","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Break the breakout: Rein- venting lm defense against jailbreak attacks with self-refinement","venue":null,"work_id":"c4c1c7e4-1546-47d2-aac1-fddc008ee309","year":2024},"citing_paper":{"arxiv_id":"2605.05846","last_updated":"2026-05-07T08:21:51Z","snapshot_observed_at":"2026-08-02T22:13:21.752885Z","submitted_at":"2026-05-07T08:21:51Z","title":"LoopTrap: Termination Poisoning Attacks on LLM Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-08T09:25:11.059634Z"},"links":{"cited_paper":"/paper/2402.15180","citing_paper":"/paper/2605.05846"},"observation_digest":"sha256:420314586832a3bc92026245a94fe7ac71e3e53de39ea230d5b3778f135ba215","observation_id":"628cf611-9da9-4043-82fc-74f79ec7db3a","resolution":{"observed_at":"2026-05-11T20:21:10.547786Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.15180","last_updated":"2024-02-27T01:39:20Z","snapshot_observed_at":"2026-07-06T17:34:28.430476Z","submitted_at":"2024-02-23T08:22:24Z","title":"Break the Breakout: Reinventing LM Defense Against Jailbreak Attacks with Self-Refinement","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.15180","snapshot_observed_at":"2026-08-02T13:36:54.864997Z","title":"Break the","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.21610","last_updated":"2026-05-20T04:43:02Z","snapshot_observed_at":"2026-08-06T13:09:35.487490Z","submitted_at":"2026-05-20T04:43:02Z","title":"SCOPE and SCION: A Benchmark and an Auditable Reference Pipeline for Schema Induction and Fusion from Text","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-02T13:36:54.864997Z"},"links":{"cited_paper":"/paper/2402.15180","citing_paper":"/paper/2607.21610"},"observation_digest":"sha256:ee875d6b97a5d4231a46fd9917a6fbeafeb24831aa7710b4da6ab4154a6cc7c0","observation_id":"e027582c-d013-4221-9c20-6890a882666f","resolution":{"observed_at":"2026-08-02T13:36:54.864997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2402.15180/citation-record","integrity":"/paper/2402.15180/integrity","json":"/paper/2402.15180/citation-record.json","paper":"/paper/2402.15180"},"outbound":[],"paper":{"arxiv_id":"2402.15180","last_updated":"2024-02-27T01:39:20Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-07-06T17:34:28.430476Z","submitted_at":"2024-02-23T08:22:24Z","title":"Break the Breakout: Reinventing LM Defense Against Jailbreak Attacks with Self-Refinement"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2402.15180."}