{"as_of":"2026-08-09T11:26:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ca404d73d30844be93117168b6a0fec1ff7b16701df1c80fe30352961830cddf","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":18,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":18,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":18,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":18,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:23:02.718736Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T15:37:06.720828Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-07T15:23:02.718736Z","title":"Voice Jailbreak Attacks Against GPT-4o // arXiv preprint arXiv:2405.19103","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.15406","last_updated":"2025-05-21T11:47:47Z","snapshot_observed_at":"2026-08-07T15:16:06.018745Z","submitted_at":"2025-05-21T11:47:47Z","title":"Audio Jailbreak: An Open Comprehensive Benchmark for Jailbreaking Large Audio-Language Models","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T15:23:02.718736Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2505.15406"},"observation_digest":"sha256:682b8d42af1f17a56fbe4f0c99a7a20d151c9823432deadc9dd49f450c959048","observation_id":"70fada26-c9f2-497b-be8e-ad7fecc34ae4","resolution":{"observed_at":"2026-08-07T15:23:02.718736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2505.15957","last_updated":"2026-04-26T17:05:53Z","snapshot_observed_at":"2026-07-06T21:28:06.120576Z","submitted_at":"2025-05-21T19:17:29Z","title":"Towards Holistic Evaluation of Large Audio-Language Models: A Comprehensive Survey","version":4},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-22T13:32:57.771753Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2505.15957"},"observation_digest":"sha256:ee93743f0c000ff539abe6e4daec84fd148e5646741b772896c60821ed3da869","observation_id":"2b7c339f-5559-4736-a794-3a0a1bb9be4b","resolution":{"observed_at":"2026-05-22T13:34:53.261884Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-07T14:55:02.131857Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16957","last_updated":"2025-05-22T17:36:33Z","snapshot_observed_at":"2026-08-09T00:25:53.983420Z","submitted_at":"2025-05-22T17:36:33Z","title":"Invisible Prompts, Visible Threats: Malicious Font Injection in External Resources for Large Language Models","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T14:55:02.131857Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2505.16957"},"observation_digest":"sha256:4babcbae3f92a5e7a948ab62725e12333a4a7f8e2c3fb243e69df4117ed5250c","observation_id":"3ed05453-4c27-4690-87b9-58065ff5fdd9","resolution":{"observed_at":"2026-08-07T14:55:02.131857Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-07T14:27:05.448953Z","title":"V oice jailbreak attacks against gpt-4o,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18864","last_updated":"2025-05-24T20:46:36Z","snapshot_observed_at":"2026-08-08T00:24:14.677549Z","submitted_at":"2025-05-24T20:46:36Z","title":"Audio Jailbreak Attacks: Exposing Vulnerabilities in SpeechGPT in a White-Box Framework","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T14:27:05.448953Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2505.18864"},"observation_digest":"sha256:fe080a61f5c582d803901780059c71208c04b849d1e5a8b4a7a21b3c1450421c","observation_id":"410cd221-4ffe-405a-bedf-a2119c9870f6","resolution":{"observed_at":"2026-08-07T14:27:05.448953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-07T05:51:08.260580Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06971","last_updated":"2025-06-12T14:47:31Z","snapshot_observed_at":"2026-08-09T00:52:54.262167Z","submitted_at":"2025-06-08T02:43:46Z","title":"Chain-of-Code Collapse: Reasoning Failures in LLMs via Adversarial Prompting in Code Generation","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T05:51:08.260580Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2506.06971"},"observation_digest":"sha256:c75df5e4cb90c2acd1aa6cf38239c2ea9c3bc85fc881b0c837aef1bb95b91f9a","observation_id":"965cd3c1-0dec-41e0-a7f7-cdc7e40210b8","resolution":{"observed_at":"2026-08-07T05:51:08.260580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-07T04:08:50.912160Z","title":"arXiv preprint arXiv:2405.19103 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.11521","last_updated":"2025-06-13T07:22:36Z","snapshot_observed_at":"2026-08-07T12:06:46.005829Z","submitted_at":"2025-06-13T07:22:36Z","title":"Investigating Vulnerabilities and Defenses Against Audio-Visual Attacks: A Comprehensive Survey Emphasizing Multimodal Models","version":1},"reference_index":96,"source":"arxiv_source","source_observed_at":"2026-08-07T04:08:50.912160Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2506.11521"},"observation_digest":"sha256:daeaa8d5b4edaca9b16bfe6c0e589495381e0a10b2ab36bf68e4c009d6b13c2a","observation_id":"6baf7137-5bd1-4e5e-aa2d-df76fc0c6270","resolution":{"observed_at":"2026-08-07T04:08:50.912160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-04T17:46:19.679388Z","title":"V oice jailbreak attacks against GPT-4o,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.10682","last_updated":"2025-09-12T20:26:16Z","snapshot_observed_at":"2026-08-04T21:00:53.508626Z","submitted_at":"2025-09-12T20:26:16Z","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","version":1},"reference_index":271,"source":"pdf_text","source_observed_at":"2026-08-04T17:46:19.679388Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2509.10682"},"observation_digest":"sha256:6131110899d8ec2321c3e8f36e1ad45edea5e2911c9e805fe33f552203dc70cf","observation_id":"b0d5d361-12e8-418f-aab9-59ac1f2a6cca","resolution":{"observed_at":"2026-08-04T17:46:19.679388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-03T06:23:43.490072Z","title":"” do anything now”: Characterizing and evaluating in- the-wild jailbreak prompts on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.02557","last_updated":"2026-05-29T23:48:47Z","snapshot_observed_at":"2026-08-06T12:17:33.602297Z","submitted_at":"2026-01-30T14:23:50Z","title":"The Alignment Curse: Modality Alignment Supercharges Audio Attacks via Text Transfer","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T06:23:43.490072Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2602.02557"},"observation_digest":"sha256:b3dac9740c4d34a35c98ca4cace89abd5fd37ac70fe1fdf79685cbca37b6cde7","observation_id":"0c3ab26a-ad32-4cf4-8c3e-4cdc8e6ff0a7","resolution":{"observed_at":"2026-08-03T06:23:43.490072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2604.11309","last_updated":"2026-04-13T11:12:30Z","snapshot_observed_at":"2026-07-30T17:13:57.164751Z","submitted_at":"2026-04-13T11:12:30Z","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-10T16:07:31.602378Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2604.11309"},"observation_digest":"sha256:fbc98c66ce49bce94a4c6036988a9b2ce07ae2f1a82570b99594ff574cf19205","observation_id":"08866f49-e05d-4f42-adb9-b37978d0474f","resolution":{"observed_at":"2026-05-11T09:16:04.343350Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-12T20:09:57.922788Z","title":"V oice Jailbreak Attacks Against GPT-4o,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.14603","last_updated":"2026-06-29T06:44:20Z","snapshot_observed_at":"2026-07-12T20:09:54.804124Z","submitted_at":"2026-04-16T04:21:32Z","title":"A Synonymous Variational Perspective on the Rate-Distortion-Perception Tradeoff","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-12T20:09:57.922788Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2604.14603"},"observation_digest":"sha256:ed45f9c81c25c68da26410d9da3c49f8c7b8a2dd965ce973721054191ba78d55","observation_id":"8c116bdc-d90c-40e3-a04b-cfe6b9e286fa","resolution":{"observed_at":"2026-07-12T20:09:57.922788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2604.14604","last_updated":"2026-04-16T04:22:11Z","snapshot_observed_at":"2026-08-01T20:57:25.785838Z","submitted_at":"2026-04-16T04:22:11Z","title":"Hijacking Large Audio-Language Models via Context-Agnostic and Imperceptible Auditory Prompt Injection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-10T11:32:10.126062Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2604.14604"},"observation_digest":"sha256:366cf19941c65b6021e7771f5cd7d7799e7fa741a8aeee080d806cac697c98ef","observation_id":"6e26a09d-a93e-4f42-a798-0a862136b3d8","resolution":{"observed_at":"2026-05-10T11:35:18.907426Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2604.16659","last_updated":"2026-04-17T19:28:07Z","snapshot_observed_at":"2026-07-06T23:03:57.199731Z","submitted_at":"2026-04-17T19:28:07Z","title":"Benign Fine-Tuning Breaks Safety Alignment in Audio LLMs","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-10T08:01:25.938248Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2604.16659"},"observation_digest":"sha256:51071e5ea1c60a26befeb5d5ac2151f1d7948b2c201a6903c60f48da338ed9ad","observation_id":"95887362-f0ac-4f9a-aad8-4e89094a2da4","resolution":{"observed_at":"2026-05-10T08:02:24.870743Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2605.18168","last_updated":"2026-05-18T10:10:31Z","snapshot_observed_at":"2026-07-06T23:29:04.241654Z","submitted_at":"2026-05-18T10:10:31Z","title":"Acoustic Interference: A New Paradigm Weaponizing Acoustic Latent Semantic for Universal Jailbreak against Large Audio Language Models","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-05-20T09:48:43.319804Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2605.18168"},"observation_digest":"sha256:dd5229f4e9f3dde35d59c1730430dfcd334f2a52860f3ca0027764a98f45cbd4","observation_id":"281488dd-40dd-4284-ad84-4a804d9a1652","resolution":{"observed_at":"2026-05-20T09:53:15.983463Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2605.20519","last_updated":"2026-05-21T17:49:53Z","snapshot_observed_at":"2026-07-06T23:31:03.878152Z","submitted_at":"2026-05-19T21:39:52Z","title":"Codec-Robust Attacks on Audio LLMs","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-21T06:43:52.735211Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2605.20519"},"observation_digest":"sha256:5e987fd37bb566093ed484edbf7f9e7c86d1a012da4e285ed20265712438cefe","observation_id":"1883e4af-ae56-4c2c-aad0-fa0d20270566","resolution":{"observed_at":"2026-05-21T06:44:00.660382Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2605.20519","last_updated":"2026-05-21T17:49:53Z","snapshot_observed_at":"2026-07-06T23:31:03.878152Z","submitted_at":"2026-05-19T21:39:52Z","title":"Codec-Robust Attacks on Audio LLMs","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-25T05:44:46.831360Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2605.20519"},"observation_digest":"sha256:7647a612cb6b2de9be1bed6a8f791eee3c7b02f49ab1c1fcace8b928579800b5","observation_id":"8c921932-00f4-44db-b64c-e9b33879e2a3","resolution":{"observed_at":"2026-05-25T05:45:23.741364Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2605.30031","last_updated":"2026-05-28T14:53:27Z","snapshot_observed_at":"2026-08-08T16:57:51.008141Z","submitted_at":"2026-05-28T14:53:27Z","title":"Audio Jailbreaks in Large Audio-Language Models: Taxonomy, Attack-Defense Analysis, and Cost-Aware Evaluation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-29T05:44:05.762261Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2605.30031"},"observation_digest":"sha256:c06d397cd009e3b37b5bbefa190ec15c812c8ffdbb279f155db0c3750a08a47d","observation_id":"a62f8546-bce1-42e3-b903-202792d0ab9c","resolution":{"observed_at":"2026-06-29T05:53:09.549390Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2606.04483","last_updated":"2026-06-03T06:01:47Z","snapshot_observed_at":"2026-07-06T23:44:37.797802Z","submitted_at":"2026-06-03T06:01:47Z","title":"Off-Distribution Voices: Fanfiction Subgenres as Universal Vernacular Jailbreaks for Aligned LLMs","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-06-28T06:37:51.354823Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2606.04483"},"observation_digest":"sha256:71f41a55773f7cbf88e4788faf307509918afa5513e706be30a2be9d088e271d","observation_id":"f40075db-2086-412e-b21c-5049a5f0a90c","resolution":{"observed_at":"2026-07-02T07:46:46.545430Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2606.06037","last_updated":"2026-06-08T08:49:38Z","snapshot_observed_at":"2026-08-03T09:38:32.203749Z","submitted_at":"2026-06-04T11:31:38Z","title":"SpeechJBB: Probing Safety Alignment and Comprehension in Large Audio Language Models under Code-Switched Speech","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-27T23:44:42.188662Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2606.06037"},"observation_digest":"sha256:b6de1bf9031532d2a21f935a3b1dabe37aded4ae26453408fdb6602b897e6dbf","observation_id":"e41e2630-4f6f-4b15-8d84-b5e362eb1c17","resolution":{"observed_at":"2026-07-02T15:37:06.722323Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2405.19103/citation-record","integrity":"/paper/2405.19103/integrity","json":"/paper/2405.19103/citation-record.json","paper":"/paper/2405.19103"},"outbound":[],"paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T11:05:00.749190Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 18 inbound Pith citation observations for arXiv:2405.19103."}