{"as_of":"2026-08-10T07:39:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a7f2636406c3446361a1703adc070bda60b737a585a0da0e15f52aa93b1907e8","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":35,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":35,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":35,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":35,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T14:49:08.746274Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T11:57:03.497396Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2410.15362","last_updated":"2026-05-19T04:19:17Z","snapshot_observed_at":"2026-07-06T19:36:36.994783Z","submitted_at":"2024-10-20T11:27:41Z","title":"Faster-GCG: Efficient Discrete Optimization Jailbreak Attacks against Aligned Large Language Models","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-23T19:01:43.922848Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2410.15362"},"observation_digest":"sha256:c8a2407d3af8736e9ebc3d431d80f7944ab630a40b34527eff36df6c987016ed","observation_id":"7c858d35-d181-418c-8c9d-c5b3bb8c5f06","resolution":{"observed_at":"2026-05-23T19:03:21.364237Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-09T14:49:08.746274Z","title":"14 Karamcheti, S., Nair, S., Chen, A","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.01633","last_updated":"2025-06-25T15:31:17Z","snapshot_observed_at":"2026-08-10T01:48:14.461910Z","submitted_at":"2025-02-03T18:59:01Z","title":"Adversarial Reasoning at Jailbreaking Time","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-09T14:49:08.746274Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2502.01633"},"observation_digest":"sha256:6afd72bbecdcb969cbf709acdacd5484450ace1876f7f04be5634320205e6d87","observation_id":"7f9ccf32-212f-4d7d-947e-5640cf04e12d","resolution":{"observed_at":"2026-08-09T14:49:08.746274Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:e9f5a4448658d3745fc21e6ec661b5887106d80d4a144f7514c013d6f70204d0","observation_id":"9fb65307-e2e1-4b9c-a6f2-7a32e13f3fd1","resolution":{"observed_at":"2026-05-23T04:42:34.240968Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2503.02574","last_updated":"2026-05-18T17:54:05Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-04T12:55:07Z","title":"LLM-Safety Evaluations Lack Robustness","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-23T01:26:45.402983Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2503.02574"},"observation_digest":"sha256:e7f40eea532f84cd75a4e140c4bcac0729f2902d3b334a53e43071caad06edb2","observation_id":"305bb6c3-83a5-4452-8785-4ab3efbffebf","resolution":{"observed_at":"2026-05-23T01:27:21.293947Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2505.11548","last_updated":"2026-04-09T01:58:59Z","snapshot_observed_at":"2026-07-06T21:25:13.481613Z","submitted_at":"2025-05-15T08:14:58Z","title":"One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems","version":4},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-22T15:19:08.867224Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2505.11548"},"observation_digest":"sha256:3c2525f8bf8d91f291908616162d274f212a6583594f09fa948740fd21fdd851","observation_id":"b1c3a59b-97ef-495c-9b59-b656b2d39a48","resolution":{"observed_at":"2026-05-22T15:21:44.807132Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-07T15:15:48.626254Z","title":"Improved techniques for optimization-based jailbreaking on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.15753","last_updated":"2025-05-21T16:58:14Z","snapshot_observed_at":"2026-08-07T15:09:59.174634Z","submitted_at":"2025-05-21T16:58:14Z","title":"Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T15:15:48.626254Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2505.15753"},"observation_digest":"sha256:ff95d8a453f973e1dd3127876763cf818874cc7d1d147ed67bc21ed4a8875a5e","observation_id":"8729fdfa-68d5-4471-96b8-893b157485b5","resolution":{"observed_at":"2026-08-07T15:15:48.626254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-07T15:08:11.240128Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:11.240128Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:8f1646317ab381f5620d48450b5b8068675b425d377d6d3dc5b26e972cf5c801","observation_id":"49614ecf-7ebe-4437-822e-8195123ddfda","resolution":{"observed_at":"2026-08-07T15:08:11.240128Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-07T14:48:16.511497Z","title":"Improved techniques for optimization-based jailbreaking on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17598","last_updated":"2025-05-23T08:02:38Z","snapshot_observed_at":"2026-08-08T05:50:23.787611Z","submitted_at":"2025-05-23T08:02:38Z","title":"One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T14:48:16.511497Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2505.17598"},"observation_digest":"sha256:645007aecba4ae4d8849cb94969002b031bf01a667257ebb1cbf61b07c56cae5","observation_id":"918cc513-33f3-4b45-aa54-b057d3f459f3","resolution":{"observed_at":"2026-08-07T14:48:16.511497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-07T13:35:56.893528Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.21277","last_updated":"2025-05-28T14:16:10Z","snapshot_observed_at":"2026-08-09T03:35:23.473114Z","submitted_at":"2025-05-27T14:48:44Z","title":"Breaking the Ceiling: Exploring the Potential of Jailbreak Attacks through Expanding Strategy Space","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T13:35:56.893528Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2505.21277"},"observation_digest":"sha256:c5cd46ddb1531a5a40fdd5723363537c5f41f6139786df448744b4f999249b34","observation_id":"81f2ac65-f37e-4834-a20f-65676620ad65","resolution":{"observed_at":"2026-08-07T13:35:56.893528Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-07T05:40:20.616360Z","title":"Improved techniques for optimization-based jailbreaking on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07402","last_updated":"2025-06-09T03:52:43Z","snapshot_observed_at":"2026-08-07T10:07:41.500171Z","submitted_at":"2025-06-09T03:52:43Z","title":"Beyond Jailbreaks: Revealing Stealthier and Broader LLM Security Risks Stemming from Alignment Failures","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:40:20.616360Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2506.07402"},"observation_digest":"sha256:e351b7ed0f535fd68a81669bc6279fb7714ce6996598cea812382530cb084c5f","observation_id":"72aa392a-d53a-4eb3-8989-88f9158796ad","resolution":{"observed_at":"2026-08-07T05:40:20.616360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-07T04:42:18.651102Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.10095","last_updated":"2025-06-11T18:26:32Z","snapshot_observed_at":"2026-08-07T10:06:58.463807Z","submitted_at":"2025-06-11T18:26:32Z","title":"When Meaning Stays the Same, but Models Drift: Evaluating Quality of Service under Token-Level Behavioral Instability in LLMs","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T04:42:18.651102Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2506.10095"},"observation_digest":"sha256:23819d5fa0de21bd4ecf8c0c8d2463d81fdfd637363fed38a43f7974e833ca28","observation_id":"97915f6a-f7a7-4460-9899-dcd2cf9cb3ee","resolution":{"observed_at":"2026-08-07T04:42:18.651102Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-06T23:20:56.482120Z","title":"Improved techniques for optimization-based jailbreaking on large language models.arXiv preprint arXiv:2405.210182024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.18543","last_updated":"2026-05-25T10:15:56Z","snapshot_observed_at":"2026-08-08T08:35:45.497926Z","submitted_at":"2025-06-23T11:53:31Z","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T23:20:56.482120Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2506.18543"},"observation_digest":"sha256:8edc62908a094ddf7908042f94cf9a7d18f086a85c07b8c75289a84addce9054","observation_id":"d2bfecdd-1356-4824-8494-fac5065e7174","resolution":{"observed_at":"2026-08-06T23:20:56.482120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-06T22:07:03.636792Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.22666","last_updated":"2026-05-30T16:23:21Z","snapshot_observed_at":"2026-08-06T21:58:37.734178Z","submitted_at":"2025-06-27T22:22:00Z","title":"VERA: Variational Inference Framework for Jailbreaking Large Language Models","version":3},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T22:07:03.636792Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2506.22666"},"observation_digest":"sha256:5749e952a058713fc2e1b1df09a93e28b4277f4b13635d92a2dce3936f350cef","observation_id":"6126766f-69e0-4b9e-9aca-6659cfef3d70","resolution":{"observed_at":"2026-08-06T22:07:03.636792Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-05T20:31:31.703450Z","title":"Improved techniques for optimization-based jailbreaking on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:31.703450Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:a1d20003fa795e4c657d99952260190fe69e9d16169c6344e5768697a7ca4de3","observation_id":"6265bbc8-9c57-46f2-b42d-6d9d0eb65852","resolution":{"observed_at":"2026-08-05T20:31:31.703450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-05T16:00:48.580403Z","title":"Improved techniques for optimization-based jailbreaking on large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19445","last_updated":"2026-06-16T17:34:06Z","snapshot_observed_at":"2026-08-08T05:25:02.825611Z","submitted_at":"2025-08-26T21:36:45Z","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","version":3},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-05T16:00:48.580403Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2508.19445"},"observation_digest":"sha256:1d9dad7c264d24368ab127c8b71232a27f899922d74b0fcff14e45df4324e16b","observation_id":"bff3f494-da51-43f4-aae2-dc5a9db4d427","resolution":{"observed_at":"2026-08-05T16:00:48.580403Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-04T23:49:31.864821Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:31.864821Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:257f505e387d47367b39cefd39186447f1a9e3f41b9e8cfa36a04f6b62b1f978","observation_id":"e212b26f-8e30-49ac-9c05-5609c0488114","resolution":{"observed_at":"2026-08-04T23:49:31.864821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-04T21:44:12.308523Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07764","last_updated":"2025-09-09T13:59:00Z","snapshot_observed_at":"2026-08-04T21:44:11.122043Z","submitted_at":"2025-09-09T13:59:00Z","title":"AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T21:44:12.308523Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2509.07764"},"observation_digest":"sha256:f5c782ee4bb124ba381fc3f38f9b741a7982fdac0621fe14e3a577db02a368e9","observation_id":"f9fd3744-54fb-4e18-865c-2d0705289715","resolution":{"observed_at":"2026-08-04T21:44:12.308523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2602.14211","last_updated":"2026-06-16T17:33:00Z","snapshot_observed_at":"2026-08-02T23:20:40.869423Z","submitted_at":"2026-02-15T16:09:48Z","title":"SkillJect: Effectively Automating Skill-Based Prompt Injection for Skill-Enabled Agents","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-21T12:46:28.842387Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2602.14211"},"observation_digest":"sha256:d94b9ab1312d80125ff3be33c8a9989750e058a06040e53b57b8ef1ddabe216a","observation_id":"2fc8e22e-06f5-4508-a2f6-6ce594fdee4a","resolution":{"observed_at":"2026-05-21T12:50:09.389631Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-02T23:20:42.271415Z","title":"Improved tech- niques for optimization-based jailbreaking on large language models.arXiv preprint arXiv:2405.21018, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.14211","last_updated":"2026-06-16T17:33:00Z","snapshot_observed_at":"2026-08-02T23:20:40.869423Z","submitted_at":"2026-02-15T16:09:48Z","title":"SkillJect: Effectively Automating Skill-Based Prompt Injection for Skill-Enabled Agents","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T23:20:42.271415Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2602.14211"},"observation_digest":"sha256:6b5b338a97969e5938f507ec640ecf8be64ca2aacc350b8fbaec09ec28d84d05","observation_id":"fda6857d-5cd5-41c2-ad21-4101d0f7f0bb","resolution":{"observed_at":"2026-08-02T23:20:42.271415Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2604.05498","last_updated":"2026-04-07T06:41:41Z","snapshot_observed_at":"2026-07-06T22:54:12.531121Z","submitted_at":"2026-04-07T06:41:41Z","title":"JailWAM: Jailbreaking World Action Models in Robot Control","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-10T19:22:13.890495Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2604.05498"},"observation_digest":"sha256:8a25626d7ae14216484bfbef63b7c38c0d8bbc106d165ff6c770cd09139d0344","observation_id":"74418ef4-c29e-4c97-89c6-72bb5cfa9d5e","resolution":{"observed_at":"2026-05-10T23:05:48.158122Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2604.10326","last_updated":"2026-04-11T19:19:05Z","snapshot_observed_at":"2026-07-06T22:59:01.129724Z","submitted_at":"2026-04-11T19:19:05Z","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-05-10T15:19:46.920899Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2604.10326"},"observation_digest":"sha256:4e1615f592a1b91923e2461b4f30c3abc83b0ba9b87ee3c374ab1765cd0ae70c","observation_id":"aa49575c-44d1-48f0-8317-deb12786cfca","resolution":{"observed_at":"2026-05-11T10:46:04.345513Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2604.15717","last_updated":"2026-04-17T05:40:42Z","snapshot_observed_at":"2026-07-06T23:03:12.000381Z","submitted_at":"2026-04-17T05:40:42Z","title":"Into the Gray Zone: Domain Contexts Can Blur LLM Safety Boundaries","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T08:49:45.406458Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2604.15717"},"observation_digest":"sha256:e977fc600d293222b83e2ad474be7d9d98f614b06c0cd6cf95b4ac22918a5190","observation_id":"00c1cd55-515c-4691-b73f-f1b158fae6f0","resolution":{"observed_at":"2026-05-10T08:53:04.235190Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2604.19790","last_updated":"2026-04-02T03:38:47Z","snapshot_observed_at":"2026-07-06T23:06:21.774788Z","submitted_at":"2026-04-02T03:38:47Z","title":"Hidden Reliability Risks in Large Language Models: Systematic Identification of Precision-Induced Output Disagreements","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-13T21:59:42.435082Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2604.19790"},"observation_digest":"sha256:1dd089ada5e8f8434f9c14c68319deb2b19c04894a6e35ba8248a3448873e2e2","observation_id":"5b830efd-980d-40cd-9118-6bcb01b3df15","resolution":{"observed_at":"2026-05-13T22:03:20.495617Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2604.24082","last_updated":"2026-04-27T06:12:43Z","snapshot_observed_at":"2026-07-06T23:10:12.016186Z","submitted_at":"2026-04-27T06:12:43Z","title":"Jailbreaking Frontier Foundation Models Through Intention Deception","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-08T03:17:51.039062Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2604.24082"},"observation_digest":"sha256:47e3d949bb72e3617382e82f8b091042110d3555fd9a86c0f03f0b20235aae94","observation_id":"ef4f7c10-ea02-477d-91a9-a7035b603f47","resolution":{"observed_at":"2026-05-11T22:11:13.991238Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2605.00236","last_updated":"2026-04-30T21:15:38Z","snapshot_observed_at":"2026-07-06T23:13:42.661364Z","submitted_at":"2026-04-30T21:15:38Z","title":"Attention Is Where You Attack","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-09T19:54:41.445447Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2605.00236"},"observation_digest":"sha256:5e1354b0f1e7204a84f168a162d335568f0f208e592d4188ebabd731e4f8092f","observation_id":"0b3429e7-4997-46b0-8b8d-c869e6211d78","resolution":{"observed_at":"2026-05-11T15:31:05.208137Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2605.21674","last_updated":"2026-05-20T19:31:07Z","snapshot_observed_at":"2026-07-06T23:32:05.693503Z","submitted_at":"2026-05-20T19:31:07Z","title":"Adversarial Reframing: A Framework for Targeted Generation in Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-22T09:35:51.862736Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2605.21674"},"observation_digest":"sha256:17b8aadc8c4ccbd3794ac5c7c3914a8c78b1ab980c0a3db3e7f8fefa347f9776","observation_id":"f80b07dc-7d32-49e8-a18e-cd4be1f4a5f1","resolution":{"observed_at":"2026-05-22T09:36:21.033098Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2605.29602","last_updated":"2026-05-28T08:40:34Z","snapshot_observed_at":"2026-07-31T08:03:40.151420Z","submitted_at":"2026-05-28T08:40:34Z","title":"CogniVerse: Revolutionizing Multi-Modal Retrieval-Augmented Generation with Cognitive Reflection and Geometric Reasoning","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-06-29T08:14:20.558527Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2605.29602"},"observation_digest":"sha256:632b23ffab911949b4ed0987609b31469ff8058bf6afd8703061baab9bdc7c89","observation_id":"86bb73dd-a8da-453c-aaea-441cff595146","resolution":{"observed_at":"2026-06-29T08:23:15.757226Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2606.05609","last_updated":"2026-06-04T02:31:29Z","snapshot_observed_at":"2026-08-05T14:48:48.513078Z","submitted_at":"2026-06-04T02:31:29Z","title":"SlotGCG: Exploiting the Positional Vulnerability in LLMs for Jailbreak Attacks","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-06-28T01:16:07.252429Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2606.05609"},"observation_digest":"sha256:f89a7153106ae2eced049c063c73b05dde0da9643d579aaa168bc9469a8394b7","observation_id":"cfd9c796-3e0b-436e-b081-d22582f3da6b","resolution":{"observed_at":"2026-07-02T13:26:59.243117Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2606.15531","last_updated":"2026-06-16T14:29:31Z","snapshot_observed_at":"2026-08-08T06:11:28.037599Z","submitted_at":"2026-06-14T01:18:53Z","title":"Greedy Coordinate Diffusion: Effective and Semantically Coherent Adversarial Attacks via Diffusion Guidance","version":2},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-06-27T04:35:35.594085Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2606.15531"},"observation_digest":"sha256:54a8f99492b7d7a7aea9cdc53b8189fd571ca5f74a74ec4634a886f1884a289d","observation_id":"64eae4ca-83f3-40f2-8dcf-582661559c94","resolution":{"observed_at":"2026-07-03T17:08:43.447341Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2606.19887","last_updated":"2026-06-24T07:42:32Z","snapshot_observed_at":"2026-07-06T23:55:05.932014Z","submitted_at":"2026-06-18T07:46:18Z","title":"FinRED: An Expert-Guided Benchmark Generation and Evaluation Framework for Financial LLM Red-Teaming","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-26T17:11:40.088809Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2606.19887"},"observation_digest":"sha256:ef8e50919ce9b26179d9436c2904692418f448f9a3fc13579920993a73ea7447","observation_id":"e5c55392-893c-474c-9976-872d14f5395a","resolution":{"observed_at":"2026-07-04T04:09:34.754405Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2606.25476","last_updated":"2026-07-21T11:09:35Z","snapshot_observed_at":"2026-08-06T23:05:07.064301Z","submitted_at":"2026-06-24T07:00:53Z","title":"A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-25T20:58:53.119386Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2606.25476"},"observation_digest":"sha256:6002b99554544146f15d906b741213623bb6e82311621a1ad231e4e95a549096","observation_id":"8a15a320-d194-4edd-94f4-015f833f2e53","resolution":{"observed_at":"2026-07-04T19:50:11.159040Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-02T10:16:39.061069Z","title":"arXiv preprint arXiv:2405.21018 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25476","last_updated":"2026-07-21T11:09:35Z","snapshot_observed_at":"2026-08-06T23:05:07.064301Z","submitted_at":"2026-06-24T07:00:53Z","title":"A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-02T10:16:39.061069Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2606.25476"},"observation_digest":"sha256:d78e4d8280889d732f610c04ac5319c0d86e3b9d78b95b94d0b0a3bc28bf9a08","observation_id":"6b83f89d-0a1c-4230-84be-d0a45d9a07bc","resolution":{"observed_at":"2026-08-02T10:16:39.061069Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:128d8a8bfc34fde49bc8a9589724195928cf8b1c05bafbdcf1cd8fa4b2a50b61","observation_id":"a54c2a52-a9cd-497d-afa7-33e08bda3492","resolution":{"observed_at":"2026-07-09T10:26:11.110965Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2607.08180","last_updated":"2026-07-09T07:27:48Z","snapshot_observed_at":"2026-08-06T05:34:27.258366Z","submitted_at":"2026-07-09T07:27:48Z","title":"Out of Sight: Compression-Aware Content Protection against Agentic Crawlers","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-07-10T11:48:08.491407Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2607.08180"},"observation_digest":"sha256:b5d45978fb082d28c0b7e3f89867b769587f4295f4938fec742ad0fb93ea4e45","observation_id":"2023757d-8547-4eb2-9be1-263013a88a7a","resolution":{"observed_at":"2026-07-10T11:57:03.498966Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-01T18:54:55.306378Z","title":"arXiv preprint arXiv:2405.21018 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17152","last_updated":"2026-07-19T09:18:35Z","snapshot_observed_at":"2026-08-09T14:18:14.468847Z","submitted_at":"2026-07-19T09:18:35Z","title":"How Jailbreak Attacks Inform Safety Alignment: A Defender-Centric, Shapley-Based Evaluation of Jailbreak Contributions","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-01T18:54:55.306378Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2607.17152"},"observation_digest":"sha256:05af16adddf571de8989c02a168607790e5a2ec2e79660c4f3767ead4dbc0666","observation_id":"ee5f4810-1ec9-4d50-b3aa-eebb2220b798","resolution":{"observed_at":"2026-08-01T18:54:55.306378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2405.21018/citation-record","integrity":"/paper/2405.21018/integrity","json":"/paper/2405.21018/citation-record.json","paper":"/paper/2405.21018"},"outbound":[],"paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 35 inbound Pith citation observations for arXiv:2405.21018."}