{"as_of":"2026-08-21T11:29:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0134277d742291f56760b66a12e45f0b83d2b655769d88153d65ca36d1be8ec9","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":9,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":9,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T11:31:11.243411Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-23T04:42:34.094132Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2405.20099","last_updated":"2025-06-04T02:59:37Z","snapshot_observed_at":"2026-08-18T08:30:14.361603Z","submitted_at":"2024-05-30T14:40:35Z","title":"Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":"2405.20099","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.20099","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Defensive prompt patch: A robust and interpretable defense of llms against jailbreak attacks","venue":null,"work_id":"750d63e8-dcc0-45e6-995c-6f1d3082dad9","year":2024},"citing_paper":{"arxiv_id":"2404.01318","last_updated":"2024-10-31T22:26:40Z","snapshot_observed_at":"2026-08-11T16:28:21.917686Z","submitted_at":"2024-03-28T02:44:02Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","version":5},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-05-15T06:08:05.386345Z"},"links":{"cited_paper":"/paper/2405.20099","citing_paper":"/paper/2404.01318"},"observation_digest":"sha256:b112073a51ff1bcc326d5ac445a283e42cebf01240e2dc56b6c224d194d514ca","observation_id":"0f73f005-c433-44cb-baeb-4072e24ebefd","resolution":{"observed_at":"2026-05-15T06:08:05.524282Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20099","last_updated":"2025-06-04T02:59:37Z","snapshot_observed_at":"2026-08-18T08:30:14.361603Z","submitted_at":"2024-05-30T14:40:35Z","title":"Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20099","snapshot_observed_at":"2026-08-12T12:56:34.422868Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.16642","last_updated":"2024-11-25T18:23:58Z","snapshot_observed_at":"2026-08-18T21:23:39.971706Z","submitted_at":"2024-11-25T18:23:58Z","title":"Preventing Jailbreak Prompts as Malicious Tools for Cybercriminals: A Cyber Defense Perspective","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-12T12:56:34.422868Z"},"links":{"cited_paper":"/paper/2405.20099","citing_paper":"/paper/2411.16642"},"observation_digest":"sha256:9292f567808320c2b0e3db1c35ff6287a489392751e54cfab5d61bb0c277d09e","observation_id":"c075dd43-a433-4417-b3cf-4777feca7a05","resolution":{"observed_at":"2026-08-12T12:56:34.422868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20099","last_updated":"2025-06-04T02:59:37Z","snapshot_observed_at":"2026-08-18T08:30:14.361603Z","submitted_at":"2024-05-30T14:40:35Z","title":"Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":"2405.20099","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.20099","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Defensive prompt patch: A robust and interpretable defense of llms against jailbreak attacks","venue":null,"work_id":"750d63e8-dcc0-45e6-995c-6f1d3082dad9","year":2024},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-08-20T09:36:18.005089Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":111,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2405.20099","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:2b6b3ed873d30110a5fae51117590061ffd8c0ec4060019bae8bd2be56eb0535","observation_id":"497e2a4d-255e-41c8-b445-658b62cfa702","resolution":{"observed_at":"2026-05-23T04:42:34.097078Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20099","last_updated":"2025-06-04T02:59:37Z","snapshot_observed_at":"2026-08-18T08:30:14.361603Z","submitted_at":"2024-05-30T14:40:35Z","title":"Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20099","snapshot_observed_at":"2026-08-16T11:31:11.243411Z","title":"Defensive prompt patch: A robust and interpretable defense of llms against jail- break attacks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.15512","last_updated":"2025-04-26T16:17:55Z","snapshot_observed_at":"2026-08-19T22:03:29.330007Z","submitted_at":"2025-04-22T01:18:42Z","title":"T2VShield: Model-Agnostic Jailbreak Defense for Text-to-Video Models","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-16T11:31:11.243411Z"},"links":{"cited_paper":"/paper/2405.20099","citing_paper":"/paper/2504.15512"},"observation_digest":"sha256:16c8d9bc73be718444e0f90bf78aa944c13d9804b911880759e5c5b15a81441c","observation_id":"2a25d2b8-95b7-4f19-97cd-5e1567a4a9c4","resolution":{"observed_at":"2026-08-16T11:31:11.243411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20099","last_updated":"2025-06-04T02:59:37Z","snapshot_observed_at":"2026-08-18T08:30:14.361603Z","submitted_at":"2024-05-30T14:40:35Z","title":"Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20099","snapshot_observed_at":"2026-08-07T14:48:18.627766Z","title":"Defensive prompt patch: A robust and interpretable defense of llms against jailbreak attacks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17598","last_updated":"2025-05-23T08:02:38Z","snapshot_observed_at":"2026-08-15T17:56:32.365435Z","submitted_at":"2025-05-23T08:02:38Z","title":"One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T14:48:18.627766Z"},"links":{"cited_paper":"/paper/2405.20099","citing_paper":"/paper/2505.17598"},"observation_digest":"sha256:dc2a5283e9d2b6bd73b67409b0e4f5aba32aee3c0f3c09b087c2b7dcfd174a4b","observation_id":"a5dde6f0-a376-49b4-8038-159cbddccc4f","resolution":{"observed_at":"2026-08-07T14:48:18.627766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20099","last_updated":"2025-06-04T02:59:37Z","snapshot_observed_at":"2026-08-18T08:30:14.361603Z","submitted_at":"2024-05-30T14:40:35Z","title":"Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20099","snapshot_observed_at":"2026-08-07T10:24:26.477946Z","title":"InInternational Conference on Machine Learning, pages 24150–24176","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05451","last_updated":"2025-06-05T17:56:05Z","snapshot_observed_at":"2026-08-15T21:12:10.172980Z","submitted_at":"2025-06-05T17:56:05Z","title":"Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safety","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T10:24:26.477946Z"},"links":{"cited_paper":"/paper/2405.20099","citing_paper":"/paper/2506.05451"},"observation_digest":"sha256:44444b836c51a5d6454cb9a1c5fe0df5f998fdad1b029465fd39bcc2867458a8","observation_id":"d632adf3-891d-4c43-9da3-7e8ddee5ac65","resolution":{"observed_at":"2026-08-07T10:24:26.477946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20099","last_updated":"2025-06-04T02:59:37Z","snapshot_observed_at":"2026-08-18T08:30:14.361603Z","submitted_at":"2024-05-30T14:40:35Z","title":"Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20099","snapshot_observed_at":"2026-08-05T11:54:15.938715Z","title":"Defensive Prompt Patch: 17 a Robust and Interpretable Defense of LLMs Against Jailbreak Attacks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.02163","last_updated":"2025-09-02T10:14:28Z","snapshot_observed_at":"2026-08-08T04:57:38.586683Z","submitted_at":"2025-09-02T10:14:28Z","title":"Enhancing Reliability in LLM-Integrated Robotic Systems: A Unified Approach to Security and Safety","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T11:54:15.938715Z"},"links":{"cited_paper":"/paper/2405.20099","citing_paper":"/paper/2509.02163"},"observation_digest":"sha256:e49be6ba3bbfef1ae061634d255c2b7b1575c49756a87015a2d9a3f326eaef0b","observation_id":"8e2c1e28-4fb9-4679-848e-2d456cf553e5","resolution":{"observed_at":"2026-08-05T11:54:15.938715Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20099","last_updated":"2025-06-04T02:59:37Z","snapshot_observed_at":"2026-08-18T08:30:14.361603Z","submitted_at":"2024-05-30T14:40:35Z","title":"Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20099","snapshot_observed_at":"2026-08-04T09:25:58.012102Z","title":"Defensive prompt patch: A robust and interpretable defense of llms against jailbreak attacks.CoRR, abs/2405.20099, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-14T22:20:04.981358Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":206,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:58.012102Z"},"links":{"cited_paper":"/paper/2405.20099","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:40f561e508dfa23c3c779210a8f42e43a356b494adf81ee7ae40a703157455d2","observation_id":"8bf71168-c2f0-4a4d-a43a-01fead195140","resolution":{"observed_at":"2026-08-04T09:25:58.012102Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20099","last_updated":"2025-06-04T02:59:37Z","snapshot_observed_at":"2026-08-18T08:30:14.361603Z","submitted_at":"2024-05-30T14:40:35Z","title":"Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":"2405.20099","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.20099","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Defensive prompt patch: A robust and interpretable defense of llms against jailbreak attacks","venue":null,"work_id":"750d63e8-dcc0-45e6-995c-6f1d3082dad9","year":2024},"citing_paper":{"arxiv_id":"2604.10326","last_updated":"2026-04-11T19:19:05Z","snapshot_observed_at":"2026-08-13T01:40:06.438063Z","submitted_at":"2026-04-11T19:19:05Z","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-05-10T15:19:46.920899Z"},"links":{"cited_paper":"/paper/2405.20099","citing_paper":"/paper/2604.10326"},"observation_digest":"sha256:61c8e8b23581679d1ca3f2dfdffeef83b3d7fcda6621c22b58d904d8e93ba977","observation_id":"c8d5ec6d-091d-4bf5-b449-6800f424f2fa","resolution":{"observed_at":"2026-05-11T10:46:04.222749Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2405.20099/citation-record","integrity":"/paper/2405.20099/integrity","json":"/paper/2405.20099/citation-record.json","paper":"/paper/2405.20099"},"outbound":[],"paper":{"arxiv_id":"2405.20099","last_updated":"2025-06-04T02:59:37Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-18T08:30:14.361603Z","submitted_at":"2024-05-30T14:40:35Z","title":"Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 9 inbound Pith citation observations for arXiv:2405.20099."}