{"as_of":"2026-08-09T22:45:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ca8c2170e4b6845e720054bb236b2b7efeefcc0b9987686445e7a2ec321c705f","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:48:16.431715Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":2,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.16192","last_updated":"2024-02-28T23:11:33Z","snapshot_observed_at":"2026-08-09T20:10:52.906428Z","submitted_at":"2024-02-25T20:36:03Z","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","version":2},"cited_work":{"arxiv_id":"2402.16192","doi":"10.48550/arxiv.2402.16192","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16192","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Defending large language models against jailbreak attacks via semantic smoothing","venue":"arXiv (Cornell University)","work_id":"6f0458ba-95b0-479f-8704-1317c465f4a7","year":2024},"citing_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-12T09:48:31.721745Z"},"links":{"cited_paper":"/paper/2402.16192","citing_paper":"/paper/2310.08419"},"observation_digest":"sha256:609a5dfbb2277b55127953b3dcb918dc7d23616fa37841fc17ea765b1aff6e6b","observation_id":"851cee9c-4b98-4b66-bf12-123aa26c98f5","resolution":{"observed_at":"2026-05-12T09:48:33.323477Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16192","last_updated":"2024-02-28T23:11:33Z","snapshot_observed_at":"2026-08-09T20:10:52.906428Z","submitted_at":"2024-02-25T20:36:03Z","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","version":2},"cited_work":{"arxiv_id":"2402.16192","doi":"10.48550/arxiv.2402.16192","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16192","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Defending large language models against jailbreak attacks via semantic smoothing","venue":"arXiv (Cornell University)","work_id":"6f0458ba-95b0-479f-8704-1317c465f4a7","year":2024},"citing_paper":{"arxiv_id":"2404.01318","last_updated":"2024-10-31T22:26:40Z","snapshot_observed_at":"2026-08-02T14:59:12.115203Z","submitted_at":"2024-03-28T02:44:02Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","version":5},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-05-15T06:08:05.386345Z"},"links":{"cited_paper":"/paper/2402.16192","citing_paper":"/paper/2404.01318"},"observation_digest":"sha256:7b6e28c6c689399501660db496f43c9f3ba4edc60abea5a4b7877074ea304431","observation_id":"658d527c-31f9-449c-a5a1-f82f5704d7a6","resolution":{"observed_at":"2026-05-15T06:08:05.612858Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16192","last_updated":"2024-02-28T23:11:33Z","snapshot_observed_at":"2026-08-09T20:10:52.906428Z","submitted_at":"2024-02-25T20:36:03Z","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","version":2},"cited_work":{"arxiv_id":"2402.16192","doi":"10.48550/arxiv.2402.16192","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16192","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Defending large language models against jailbreak attacks via semantic smoothing","venue":"arXiv (Cornell University)","work_id":"6f0458ba-95b0-479f-8704-1317c465f4a7","year":2024},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2402.16192","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:9778b2ca9353a9bda34cb017ab9751d3399e6faca2684f057cbcedec32334641","observation_id":"94aca1d0-4dc8-4c3f-9676-d7c0afe9b4a4","resolution":{"observed_at":"2026-05-15T02:20:44.676943Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16192","last_updated":"2024-02-28T23:11:33Z","snapshot_observed_at":"2026-08-09T20:10:52.906428Z","submitted_at":"2024-02-25T20:36:03Z","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","version":2},"cited_work":{"arxiv_id":"2402.16192","doi":"10.48550/arxiv.2402.16192","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16192","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Defending large language models against jailbreak attacks via semantic smoothing","venue":"arXiv (Cornell University)","work_id":"6f0458ba-95b0-479f-8704-1317c465f4a7","year":2024},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2402.16192","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:297601e3d87b91e226a07c46d99659f9276a5897092741e9060ef70d2a072c34","observation_id":"84c78bb9-f4ba-4775-9539-fe5041345449","resolution":{"observed_at":"2026-05-23T04:42:34.176759Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16192","last_updated":"2024-02-28T23:11:33Z","snapshot_observed_at":"2026-08-09T20:10:52.906428Z","submitted_at":"2024-02-25T20:36:03Z","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16192","snapshot_observed_at":"2026-08-07T14:48:16.431715Z","title":"Defending large language models against jailbreak attacks via semantic smoothing","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17598","last_updated":"2025-05-23T08:02:38Z","snapshot_observed_at":"2026-08-08T05:50:23.787611Z","submitted_at":"2025-05-23T08:02:38Z","title":"One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T14:48:16.431715Z"},"links":{"cited_paper":"/paper/2402.16192","citing_paper":"/paper/2505.17598"},"observation_digest":"sha256:89f13be809d6424de989aa997d49cbacd0744569b7273d448e8b90f818cc11f3","observation_id":"cd90a318-fbaa-4d84-af95-b6006dfb8448","resolution":{"observed_at":"2026-08-07T14:48:16.431715Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16192","last_updated":"2024-02-28T23:11:33Z","snapshot_observed_at":"2026-08-09T20:10:52.906428Z","submitted_at":"2024-02-25T20:36:03Z","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16192","snapshot_observed_at":"2026-08-07T00:51:13.884686Z","title":"Pappas, Hamed Hassani, Yang Zhang, Eric Wong, and Shiyu Chang","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12707","last_updated":"2025-06-15T03:39:13Z","snapshot_observed_at":"2026-08-09T13:13:14.108440Z","submitted_at":"2025-06-15T03:39:13Z","title":"SecurityLingua: Efficient Defense of LLM Jailbreak Attacks via Security-Aware Prompt Compression","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T00:51:13.884686Z"},"links":{"cited_paper":"/paper/2402.16192","citing_paper":"/paper/2506.12707"},"observation_digest":"sha256:895202f706376babea4bf3be06c726ff0d1508ddf9e9bc063dc6fe86f6d799de","observation_id":"377b48aa-47e9-4eee-be41-0e4328e2ad8d","resolution":{"observed_at":"2026-08-07T00:51:13.884686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16192","last_updated":"2024-02-28T23:11:33Z","snapshot_observed_at":"2026-08-09T20:10:52.906428Z","submitted_at":"2024-02-25T20:36:03Z","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","version":2},"cited_work":{"arxiv_id":"2402.16192","doi":"10.48550/arxiv.2402.16192","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16192","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Defending large language models against jailbreak attacks via semantic smoothing","venue":"arXiv (Cornell University)","work_id":"6f0458ba-95b0-479f-8704-1317c465f4a7","year":2024},"citing_paper":{"arxiv_id":"2508.04204","last_updated":"2026-05-06T06:58:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-08-06T08:35:10Z","title":"ReasoningGuard: Safeguarding Large Reasoning Models with Inference-time Safety Aha Moments","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-19T01:02:07.088724Z"},"links":{"cited_paper":"/paper/2402.16192","citing_paper":"/paper/2508.04204"},"observation_digest":"sha256:2330b69eb23bdbd9a7cd164f936dbae34285683662bbca2512e8aaa170b4c807","observation_id":"29918652-899f-4d11-bb5a-699dd97b0454","resolution":{"observed_at":"2026-05-19T01:02:54.825892Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16192","last_updated":"2024-02-28T23:11:33Z","snapshot_observed_at":"2026-08-09T20:10:52.906428Z","submitted_at":"2024-02-25T20:36:03Z","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16192","snapshot_observed_at":"2026-08-04T17:46:19.358696Z","title":"Defending large language models against jailbreak attacks via semantic smoothing,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.10682","last_updated":"2025-09-12T20:26:16Z","snapshot_observed_at":"2026-08-04T21:00:53.508626Z","submitted_at":"2025-09-12T20:26:16Z","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","version":1},"reference_index":142,"source":"pdf_text","source_observed_at":"2026-08-04T17:46:19.358696Z"},"links":{"cited_paper":"/paper/2402.16192","citing_paper":"/paper/2509.10682"},"observation_digest":"sha256:7339314b11e58ee2539c5513487d8395271576f15141d4a3786982385aed3249","observation_id":"d2cc6b0a-54a1-4be7-9671-c16798d25494","resolution":{"observed_at":"2026-08-04T17:46:19.358696Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16192","last_updated":"2024-02-28T23:11:33Z","snapshot_observed_at":"2026-08-09T20:10:52.906428Z","submitted_at":"2024-02-25T20:36:03Z","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","version":2},"cited_work":{"arxiv_id":"2402.16192","doi":"10.48550/arxiv.2402.16192","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16192","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Defending large language models against jailbreak attacks via semantic smoothing","venue":"arXiv (Cornell University)","work_id":"6f0458ba-95b0-479f-8704-1317c465f4a7","year":2024},"citing_paper":{"arxiv_id":"2604.18756","last_updated":"2026-04-20T19:00:09Z","snapshot_observed_at":"2026-07-06T23:05:30.879164Z","submitted_at":"2026-04-20T19:00:09Z","title":"Towards Understanding the Robustness of Sparse Autoencoders","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-10T05:44:24.532548Z"},"links":{"cited_paper":"/paper/2402.16192","citing_paper":"/paper/2604.18756"},"observation_digest":"sha256:4689219ba2800c23a1072affb1c1653888f3157545ff92bfb99d2822e0a1d1ec","observation_id":"41ae444c-8d08-4abf-8c2a-1c001310b466","resolution":{"observed_at":"2026-05-10T05:46:10.271963Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16192","last_updated":"2024-02-28T23:11:33Z","snapshot_observed_at":"2026-08-09T20:10:52.906428Z","submitted_at":"2024-02-25T20:36:03Z","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","version":2},"cited_work":{"arxiv_id":"2402.16192","doi":"10.48550/arxiv.2402.16192","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16192","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Defending large language models against jailbreak attacks via semantic smoothing","venue":"arXiv (Cornell University)","work_id":"6f0458ba-95b0-479f-8704-1317c465f4a7","year":2024},"citing_paper":{"arxiv_id":"2605.24552","last_updated":"2026-05-23T12:39:25Z","snapshot_observed_at":"2026-08-07T01:16:57.528849Z","submitted_at":"2026-05-23T12:39:25Z","title":"Ellipsoid Control: A White-list Jailbreak Defense via Benign Latent Modeling","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-30T13:10:44.728498Z"},"links":{"cited_paper":"/paper/2402.16192","citing_paper":"/paper/2605.24552"},"observation_digest":"sha256:609418b06074077ccd6490f75fd6e84ed21ce2ef93965f3be379396071a0bf5d","observation_id":"e956a31d-3298-4ea6-a5dc-fcbcff75ef51","resolution":{"observed_at":"2026-06-30T13:14:40.146333Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16192","last_updated":"2024-02-28T23:11:33Z","snapshot_observed_at":"2026-08-09T20:10:52.906428Z","submitted_at":"2024-02-25T20:36:03Z","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","version":2},"cited_work":{"arxiv_id":"2402.16192","doi":"10.48550/arxiv.2402.16192","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16192","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Defending large language models against jailbreak attacks via semantic smoothing","venue":"arXiv (Cornell University)","work_id":"6f0458ba-95b0-479f-8704-1317c465f4a7","year":2024},"citing_paper":{"arxiv_id":"2606.05609","last_updated":"2026-06-04T02:31:29Z","snapshot_observed_at":"2026-08-05T14:48:48.513078Z","submitted_at":"2026-06-04T02:31:29Z","title":"SlotGCG: Exploiting the Positional Vulnerability in LLMs for Jailbreak Attacks","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-06-28T01:16:07.252429Z"},"links":{"cited_paper":"/paper/2402.16192","citing_paper":"/paper/2606.05609"},"observation_digest":"sha256:d6488f868e2269941c0a657d03d1ca8306180f29ce6b502893d7647641f48e3e","observation_id":"5539136f-d450-45c1-af33-59414cc9fa8d","resolution":{"observed_at":"2026-07-02T13:26:59.336556Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2402.16192/citation-record","integrity":"/paper/2402.16192/integrity","json":"/paper/2402.16192/citation-record.json","paper":"/paper/2402.16192"},"outbound":[],"paper":{"arxiv_id":"2402.16192","last_updated":"2024-02-28T23:11:33Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-09T20:10:52.906428Z","submitted_at":"2024-02-25T20:36:03Z","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 11 inbound Pith citation observations for arXiv:2402.16192."}