{"as_of":"2026-08-08T14:12:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:95622ac53c476f4c1b75ea0def64ac6a3015892dd6421226d1eb3bf39fcc2216","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":30,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":30,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":30,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":30,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T19:32:24.048917Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":3,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2310.03684","last_updated":"2024-06-11T19:02:52Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:01:53Z","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","version":4},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-14T17:11:00.639293Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2310.03684"},"observation_digest":"sha256:0f74c461f25d47027ba579713f2571a61ed2eba02dc88ee0f837a3e52d371df7","observation_id":"e167bc2b-a129-4d71-b912-7f46349e554d","resolution":{"observed_at":"2026-05-14T17:11:00.743086Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2406.11717","last_updated":"2024-10-30T18:57:07Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-17T16:36:12Z","title":"Refusal in Language Models Is Mediated by a Single Direction","version":3},"reference_index":150,"source":"arxiv_source","source_observed_at":"2026-05-13T10:47:55.934081Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2406.11717"},"observation_digest":"sha256:d2e0bb0d25281a6257f78988bf3a83a0c8d70ebc72856022390c7c88895208c3","observation_id":"29bc60ff-b98b-465d-bc3f-ff4475b2c917","resolution":{"observed_at":"2026-05-13T10:47:56.022221Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2410.15362","last_updated":"2026-05-19T04:19:17Z","snapshot_observed_at":"2026-07-06T19:36:36.994783Z","submitted_at":"2024-10-20T11:27:41Z","title":"Faster-GCG: Efficient Discrete Optimization Jailbreak Attacks against Aligned Large Language Models","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-23T19:01:43.922848Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2410.15362"},"observation_digest":"sha256:525cafcbe3ef08719ddc085de087c374423a7e9791cf78010f13e5cb52c9658b","observation_id":"f44fc6dc-2f40-41d6-8ac9-eeea7e200a0d","resolution":{"observed_at":"2026-05-23T19:03:21.381656Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-07T19:32:24.048917Z","title":"AmpleGCG: Learning a universal and transferable generative model of adversarial suffixes for jailbreaking both open and closed llms","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.10487","last_updated":"2025-02-14T11:15:27Z","snapshot_observed_at":"2026-08-08T01:20:33.533802Z","submitted_at":"2025-02-14T11:15:27Z","title":"Fast Proxies for LLM Robustness Evaluation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T19:32:24.048917Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2502.10487"},"observation_digest":"sha256:df575e55fa642b613fb915d734221df9830ce9eb497ef442d29f3091a415ffab","observation_id":"feb381d0-e013-4b82-8a6d-8a4e6a39f74b","resolution":{"observed_at":"2026-08-07T19:32:24.048917Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2503.02574","last_updated":"2026-05-18T17:54:05Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-04T12:55:07Z","title":"LLM-Safety Evaluations Lack Robustness","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-23T01:26:45.402983Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2503.02574"},"observation_digest":"sha256:dfa4edc03e4504569b8f2ab36276487015a0e3c4a15f7dda32713289e26efddb","observation_id":"0849c66a-d62e-4ba9-986c-7f7c8a069a3c","resolution":{"observed_at":"2026-05-23T01:27:21.354329Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-07T14:48:17.137451Z","title":"Amplegcg: Learning a universal and transferable generative model of adversarial suffixes for jailbreaking both open and closed llms","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17598","last_updated":"2025-05-23T08:02:38Z","snapshot_observed_at":"2026-08-08T05:50:23.787611Z","submitted_at":"2025-05-23T08:02:38Z","title":"One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T14:48:17.137451Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2505.17598"},"observation_digest":"sha256:324f6b2c1a02c7436d74e764529bb341d41e5e1fa0153446a4e0f772d881d239","observation_id":"aeaa5a8a-e36d-4082-b248-a403c076f259","resolution":{"observed_at":"2026-08-07T14:48:17.137451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-07T12:35:21.788938Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24369","last_updated":"2025-05-30T09:02:07Z","snapshot_observed_at":"2026-08-08T01:18:48.028080Z","submitted_at":"2025-05-30T09:02:07Z","title":"Adversarial Preference Learning for Robust LLM Alignment","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:21.788938Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2505.24369"},"observation_digest":"sha256:fbb807f54bd08082e665e950149596eff8857be0e7acb559f4ddb83e583e7c7c","observation_id":"2d112a2d-03ef-4e61-8fd6-a1783de160ad","resolution":{"observed_at":"2026-08-07T12:35:21.788938Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-07T12:01:08.949311Z","title":"Liao and H","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00782","last_updated":"2025-06-01T02:19:46Z","snapshot_observed_at":"2026-08-07T11:55:45.889580Z","submitted_at":"2025-06-01T02:19:46Z","title":"Jailbreak-R1: Exploring the Jailbreak Capabilities of LLMs via Reinforcement Learning","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T12:01:08.949311Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2506.00782"},"observation_digest":"sha256:d274f76b7a5c0e1ea3b7e1b965e272e7b16805580403fff1c08cb34b5b66b1a9","observation_id":"caa11580-6c71-4128-ad4f-253b6c47ab5d","resolution":{"observed_at":"2026-08-07T12:01:08.949311Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-07T05:40:20.626685Z","title":"Amplegcg: Learning a universal and transferable generative model of adversarial suffixes for jailbreaking both open and closed llms.arXiv preprint arXiv:2404.07921, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07402","last_updated":"2025-06-09T03:52:43Z","snapshot_observed_at":"2026-08-07T10:07:41.500171Z","submitted_at":"2025-06-09T03:52:43Z","title":"Beyond Jailbreaks: Revealing Stealthier and Broader LLM Security Risks Stemming from Alignment Failures","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:40:20.626685Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2506.07402"},"observation_digest":"sha256:27730bd255387c7b8b12c6877b33a06bf50991ad36b668a7b0189f6a3bcd029e","observation_id":"95cbf8a9-6f0a-4ea8-b67d-d55cec96b58f","resolution":{"observed_at":"2026-08-07T05:40:20.626685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-06T23:42:40.394893Z","title":"arXiv preprint arXiv:2404.07921 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.16760","last_updated":"2025-06-20T05:30:25Z","snapshot_observed_at":"2026-08-07T07:48:35.774589Z","submitted_at":"2025-06-20T05:30:25Z","title":"Cross-Modal Obfuscation for Jailbreak Attacks on Large Vision-Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T23:42:40.394893Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2506.16760"},"observation_digest":"sha256:f960980338b899b45cd4a01558683c88cd9ad6518e18e30f44c368610b1fe71a","observation_id":"6cbea444-5a75-419d-a0aa-fce307d28d7a","resolution":{"observed_at":"2026-08-06T23:42:40.394893Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-06T04:47:25.104226Z","title":"CoRR , volume =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.104226Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:94a818788af0b31fb3cef270edde9ac2d2718c5f90fbba1de413f5bf355b7355","observation_id":"28913264-2a3c-462d-a4db-7165349957c0","resolution":{"observed_at":"2026-08-06T04:47:25.104226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T18:05:33.740118Z","title":"Liao and H","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15182","last_updated":"2025-08-21T02:39:14Z","snapshot_observed_at":"2026-08-08T01:21:32.994965Z","submitted_at":"2025-08-21T02:39:14Z","title":"SafeLLM: Unlearning Harmful Outputs from Large Language Models against Jailbreak Attacks","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-05T18:05:33.740118Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2508.15182"},"observation_digest":"sha256:7f428a7c168ac1f2924db152ee033514ac19c49e343a975e4d49897b8bcb0b3c","observation_id":"17e160c0-4e78-4051-986b-b62d18857bbb","resolution":{"observed_at":"2026-08-05T18:05:33.740118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T16:00:48.693814Z","title":"Amplegcg: Learning a universal and transferable generative model of adversarial suffixes for jailbreaking both open and closed llms, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19445","last_updated":"2026-06-16T17:34:06Z","snapshot_observed_at":"2026-08-08T05:25:02.825611Z","submitted_at":"2025-08-26T21:36:45Z","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","version":3},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-05T16:00:48.693814Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2508.19445"},"observation_digest":"sha256:a0cc036c1062347869f10a192c3aabe8097ac1fa9a0fd75fe35353e3d55056f5","observation_id":"3187de0c-ae8b-4f1f-9194-5a582b56d8ac","resolution":{"observed_at":"2026-08-05T16:00:48.693814Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T13:42:42.354168Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.00391","last_updated":"2025-08-30T07:04:29Z","snapshot_observed_at":"2026-08-07T20:54:59.881714Z","submitted_at":"2025-08-30T07:04:29Z","title":"The Resurgence of GCG Adversarial Attacks on Large Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T13:42:42.354168Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2509.00391"},"observation_digest":"sha256:cbe955e827e53cb4094a25801c756f29a077261ab981abf328f3d2437e88a03b","observation_id":"b7803054-ae29-4c7d-9bf6-d4ae29b722f6","resolution":{"observed_at":"2026-08-05T13:42:42.354168Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-04T13:28:07.396485Z","title":"Amplegcg: Learning a universal and transferable generative model of adversarial suffixes for jailbreaking both open and closed llms","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.00586","last_updated":"2026-06-25T07:15:16Z","snapshot_observed_at":"2026-08-06T16:26:45.809816Z","submitted_at":"2025-10-01T07:07:22Z","title":"Eyes-on-Me: Scalable RAG Poisoning through Transferable Attention-Steering Attractors","version":3},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-04T13:28:07.396485Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2510.00586"},"observation_digest":"sha256:68019fec0ab375e619635b41f6f2048aa2d802f3358262cc93ed436cc1edf524","observation_id":"c6052d0a-0cd7-47f8-8501-1c7ad8cc08fe","resolution":{"observed_at":"2026-08-04T13:28:07.396485Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-04T09:25:46.973439Z","title":"Amplegcg: Learning a universal and transferable generative model of adversarial suffixes for jailbreaking both open and closed llms.CoRR, abs/2404.07921, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-06T02:45:04.316908Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":110,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:46.973439Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:55deac11cf237f6cc16e07736b4b6b7c798e43466510f807039074b5763e9927","observation_id":"a938edb9-aa39-4820-aaab-ac78ecea62c0","resolution":{"observed_at":"2026-08-04T09:25:46.973439Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2603.24935","last_updated":"2026-04-07T10:20:22Z","snapshot_observed_at":"2026-08-06T10:57:09.113964Z","submitted_at":"2026-03-26T01:56:01Z","title":"SABER: A Stealthy Agentic Black-Box Attack Framework for Vision-Language-Action Models","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-15T01:06:42.421062Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2603.24935"},"observation_digest":"sha256:82f6e9367c2948e5a53bdc154777703b79bcf7c6498b2261ab78fa3a04937b1e","observation_id":"779bae65-6f7f-4f97-88ad-506490bec6a5","resolution":{"observed_at":"2026-05-15T01:08:25.788615Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2604.10326","last_updated":"2026-04-11T19:19:05Z","snapshot_observed_at":"2026-07-06T22:59:01.129724Z","submitted_at":"2026-04-11T19:19:05Z","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-05-10T15:19:46.920899Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2604.10326"},"observation_digest":"sha256:32d504584a891e017ae8aba860ccbb15dd43a04bfb27bee228aeeb8cfaeaf86f","observation_id":"a5ac45ae-050c-4431-babe-12e73d572afc","resolution":{"observed_at":"2026-05-11T10:46:04.269160Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2604.18976","last_updated":"2026-04-21T01:58:09Z","snapshot_observed_at":"2026-07-06T23:05:44.499005Z","submitted_at":"2026-04-21T01:58:09Z","title":"STAR-Teaming: A Strategy-Response Multiplex Network Approach to Automated LLM Red Teaming","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-05-10T03:06:21.624159Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2604.18976"},"observation_digest":"sha256:ff17cff6d07f5e9e66be4d50575dec5b5a35614230b2b6b523a18cd5bf717bec","observation_id":"cf2cee1d-e866-44c0-86d5-db188dc0527c","resolution":{"observed_at":"2026-05-11T12:46:02.578918Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2604.28157","last_updated":"2026-04-30T17:43:24Z","snapshot_observed_at":"2026-07-06T23:13:29.310140Z","submitted_at":"2026-04-30T17:43:24Z","title":"FlashRT: Towards Computationally and Memory Efficient Red-Teaming for Prompt Injection and Knowledge Corruption","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-07T06:49:56.316472Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2604.28157"},"observation_digest":"sha256:ecb4a17bbe420c2af18344a883eaaca8e5ac78e199abb6bcaec94a238272d741","observation_id":"5a32e82e-5de1-4cc6-be84-8790618f650a","resolution":{"observed_at":"2026-05-12T10:16:28.319655Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2605.00236","last_updated":"2026-04-30T21:15:38Z","snapshot_observed_at":"2026-07-06T23:13:42.661364Z","submitted_at":"2026-04-30T21:15:38Z","title":"Attention Is Where You Attack","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-09T19:54:41.445447Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2605.00236"},"observation_digest":"sha256:7cd675f8999e777a02439fc03fe836fcf32f39b0e6cbb06eadc5c4f21285761b","observation_id":"2a0d716e-6f3c-42d5-a9c0-1023498af798","resolution":{"observed_at":"2026-05-11T15:31:05.060348Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2605.02946","last_updated":"2026-05-01T11:54:55Z","snapshot_observed_at":"2026-07-31T02:35:59.178763Z","submitted_at":"2026-05-01T11:54:55Z","title":"RouteHijack: Routing-Aware Attack on Mixture-of-Experts LLMs","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-09T19:22:00.217729Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2605.02946"},"observation_digest":"sha256:b6179ce388c3a05359f0dd839b28d31fd1d37c7f303e6e1c16402562037a358a","observation_id":"75ec798d-8e0b-484e-ace9-f23544fe9ac2","resolution":{"observed_at":"2026-05-11T15:46:16.795168Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2605.17128","last_updated":"2026-05-16T19:22:54Z","snapshot_observed_at":"2026-08-02T02:37:40.373827Z","submitted_at":"2026-05-16T19:22:54Z","title":"New Wide-Net-Casting Jailbreak Attacks Risk Large Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-20T14:46:52.070071Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2605.17128"},"observation_digest":"sha256:8aa231733dcd8f9d5ae55583b86d1516ecc4ead5cbc4ded58515a094581ed4a2","observation_id":"783280f8-cf33-451f-98f7-a671b335ce68","resolution":{"observed_at":"2026-05-20T14:48:23.272959Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2605.19485","last_updated":"2026-05-19T07:36:52Z","snapshot_observed_at":"2026-07-06T23:30:11.337726Z","submitted_at":"2026-05-19T07:36:52Z","title":"Attention-Guided Reward for Reinforcement Learning-based Jailbreak against Large Reasoning Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-20T06:33:30.647965Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2605.19485"},"observation_digest":"sha256:f9c77cf5e8dc01aed423c7e2fbf97d3cdf8cc6c8f2077d9abdd09dac3d1ca610","observation_id":"5b80a9ce-3c12-4e09-afca-df88fbfe5ac2","resolution":{"observed_at":"2026-05-20T06:38:05.856321Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2605.20286","last_updated":"2026-05-19T06:11:04Z","snapshot_observed_at":"2026-07-06T23:30:53.900592Z","submitted_at":"2026-05-19T06:11:04Z","title":"Adaptive Probe-based Steering for Robust LLM Jailbreaking","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-05-21T02:32:49.034790Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2605.20286"},"observation_digest":"sha256:74b4b21fae6694f5b74218c75b3214ad39188efc3697a012ae2e6f749e3c30dd","observation_id":"370eb7d3-71fb-4f3c-9484-8bddd92862c9","resolution":{"observed_at":"2026-05-21T02:33:55.007811Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2605.21362","last_updated":"2026-05-20T16:27:00Z","snapshot_observed_at":"2026-07-06T23:31:51.443407Z","submitted_at":"2026-05-20T16:27:00Z","title":"LASH: Adaptive Semantic Hybridization for Black-Box Jailbreaking of Large Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-21T04:48:19.926845Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2605.21362"},"observation_digest":"sha256:ec9395c8ba818b20c5569d4dd3c365914bbfc84f2106c411a8a9d39b24cd9a86","observation_id":"57ad7d5f-0f23-4a5c-aabe-500bd918c028","resolution":{"observed_at":"2026-05-21T04:49:35.487086Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2606.03647","last_updated":"2026-06-02T13:39:15Z","snapshot_observed_at":"2026-07-06T23:43:50.943530Z","submitted_at":"2026-06-02T13:39:15Z","title":"Black-box, Adaptive, Efficient, Transferable, Harmful, Applicable... Attacks Are All You Need to Break LLMs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-28T09:21:57.373862Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2606.03647"},"observation_digest":"sha256:19cbf20b1761dc71c9575c8476f1799c2c84bf109c59175beb25a335349075f5","observation_id":"1cca0d30-ae70-485e-aeb8-52e4487631c4","resolution":{"observed_at":"2026-07-02T04:16:34.720256Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":"2404.07921","doi":"10.48550/arxiv.2404.07921","metadata_source":"arxiv_reference","pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":"arXiv (Cornell University)","work_id":"cb7fb36d-4e30-499e-8c38-8a058f1b1a50","year":2024},"citing_paper":{"arxiv_id":"2606.05609","last_updated":"2026-06-04T02:31:29Z","snapshot_observed_at":"2026-08-05T14:48:48.513078Z","submitted_at":"2026-06-04T02:31:29Z","title":"SlotGCG: Exploiting the Positional Vulnerability in LLMs for Jailbreak Attacks","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-06-28T01:16:07.252429Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2606.05609"},"observation_digest":"sha256:a11f488bb9777cb1ba12aad7c4d25b18f73e6b0b06e24921b4a1dcb726c44f0c","observation_id":"ae45db74-41f8-4f52-a150-a3ef735a71b2","resolution":{"observed_at":"2026-07-02T13:26:59.254094Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-01T12:04:24.222643Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-07T20:47:58.956911Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:24.222643Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:04498444ca9843ebfcc7d6f1d795835f3c46916b1dd6346d825be785dd73efaf","observation_id":"baea3237-04d9-4381-8231-0e939261ef22","resolution":{"observed_at":"2026-08-01T12:04:24.222643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-03T00:55:24.672714Z","title":"arXiv preprint arXiv:2404.07921 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.28636","last_updated":"2026-05-19T13:56:13Z","snapshot_observed_at":"2026-08-06T00:38:04.006327Z","submitted_at":"2026-05-19T13:56:13Z","title":"Chain-of-Models: Cross-Model Auditing for Bias-Robust LLM Judges","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-03T00:55:24.672714Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2607.28636"},"observation_digest":"sha256:daaadd3e509e532483e6776c82464b1063a9b7f0166eeb7e6491577ccd93fb43","observation_id":"0e01ebee-9b20-4952-a0b7-853acf507066","resolution":{"observed_at":"2026-08-03T00:55:24.672714Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2404.07921/citation-record","integrity":"/paper/2404.07921/integrity","json":"/paper/2404.07921/citation-record.json","paper":"/paper/2404.07921"},"outbound":[],"paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","latest_version":3,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 30 inbound Pith citation observations for arXiv:2404.07921."}