Paper Citation Record · LEDGER

garak: A Framework for Security Probing Large Language Models

As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 26 inbound Pith citation observations for arXiv:2406.11036.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2406.11036 v1

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 26 of 26 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 26 of 26 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-07T05:41:25.356935Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

6
arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation 5996d375-da0b-47e3-a050-ed7eec657248 · inbound

JavelinGuard: Low-Cost Transformer Architectures for LLM Security cites this paper.

JavelinGuard: Low-Cost Transformer Architectures for LLM Security garak: A Framework for Security Probing Large Language Models

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-07T05:41:25.356935Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5a2dc56a-d6f8-4cd0-8255-1aa4e5b8f45f · inbound

Weakest Link in the Chain: Security Vulnerabilities in Advanced Reasoning Models cites this paper.

Weakest Link in the Chain: Security Vulnerabilities in Advanced Reasoning Models garak: A Framework for Security Probing Large Language Models

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-07T00:30:08.959351Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2e660d2b-37b0-4d7e-80d7-e73a78c709c7 · inbound

Measuring What Matters: A Framework for Evaluating Safety Risks in Real-World LLM Applications cites this paper.

Measuring What Matters: A Framework for Evaluating Safety Risks in Real-World LLM Applications garak: A Framework for Security Probing Large Language Models

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-06T17:49:41.037178Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 455ba398-c72b-4f4f-b5a0-30970ecd170c · inbound

OneShield -- the Next Generation of LLM Guardrails cites this paper.

OneShield -- the Next Generation of LLM Guardrails garak: A Framework for Security Probing Large Language Models

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-06T14:17:02.774403Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7a9193be-2509-46ac-91a1-73b94c6a4126 · inbound

LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems cites this paper.

LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems garak: A Framework for Security Probing Large Language Models

Reference 167

Resolution: unresolved; no resolver link, observed 2026-08-04T17:46:19.420676Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 77415d1d-09b5-4f78-bc00-6a3b1d5b9c41 · inbound

LLM Harms: A Taxonomy and Discussion cites this paper.

LLM Harms: A Taxonomy and Discussion garak: A Framework for Security Probing Large Language Models

Reference 246

Resolution: verified exact; arxiv_id, observed 2026-05-17T00:31:24.858502Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 567cff6c-9619-4e9d-a1ff-a84e95f5daac · inbound

LLM Harms: A Taxonomy and Discussion cites this paper.

LLM Harms: A Taxonomy and Discussion garak: A Framework for Security Probing Large Language Models

Reference 237

Resolution: unresolved; no resolver link, observed 2026-08-03T18:19:33.365448Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 51c9aebf-beac-4108-b345-779eb43285f5 · inbound

Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection cites this paper.

Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection garak: A Framework for Security Probing Large Language Models

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-02T15:56:47.737648Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d15762b7-7057-4318-9377-785260c5ee65 · inbound

AVISE: Framework for Evaluating the Security of AI Systems cites this paper.

AVISE: Framework for Evaluating the Security of AI Systems garak: A Framework for Security Probing Large Language Models

Reference 2

Resolution: verified exact; arxiv_id, observed 2026-05-10T00:24:47.414057Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 75199ced-de06-4845-9084-84c17a3db40c · inbound

Redefining AI Red Teaming in the Agentic Era: From Weeks to Hours cites this paper.

Redefining AI Red Teaming in the Agentic Era: From Weeks to Hours garak: A Framework for Security Probing Large Language Models

Reference 4

Resolution: verified exact; arxiv_id, observed 2026-05-11T23:51:46.026486Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 5e3064a0-6e47-47c6-8508-b7a8c67608da · inbound

SoK: Robustness in Large Language Models against Jailbreak Attacks cites this paper.

SoK: Robustness in Large Language Models against Jailbreak Attacks garak: A Framework for Security Probing Large Language Models

Reference 17

Resolution: verified exact; arxiv_id, observed 2026-05-11T18:01:08.906381Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 6d1c772f-cd35-4804-ad25-43da3554f16f · inbound

Evaluating Prompt Injection Defenses for Educational LLM Tutors: Security-Usability-Latency Trade-offs cites this paper.

Evaluating Prompt Injection Defenses for Educational LLM Tutors: Security-Usability-Latency Trade-offs garak: A Framework for Security Probing Large Language Models

Reference 3

Resolution: verified exact; arxiv_id, observed 2026-05-14T21:58:04.225465Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 63615e84-6abd-44ff-8cf1-2d1f86e1ef9a · inbound

Evaluating Prompt Injection Defenses for Educational LLM Tutors: Security-Usability-Latency Trade-offs cites this paper.

Evaluating Prompt Injection Defenses for Educational LLM Tutors: Security-Usability-Latency Trade-offs garak: A Framework for Security Probing Large Language Models

Reference 5

Resolution: verified exact; arxiv_id, observed 2026-05-22T10:51:25.852880Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 99ec9538-c6b4-446d-aa5e-2b2c2d3e4541 · inbound

KYA: A Framework-Agnostic Trust Layer for Autonomous Systems with Verifiable Provenance and Hierarchical Policy Composition cites this paper.

KYA: A Framework-Agnostic Trust Layer for Autonomous Systems with Verifiable Provenance and Hierarchical Policy Composition garak: A Framework for Security Probing Large Language Models

Reference 21

Resolution: verified exact; arxiv_id, observed 2026-06-29T22:14:00.021194Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation f246eb6e-cff3-45e4-945d-a750f43b91b5 · inbound

Opir: Efficient Multi-Task Safety Classification for Toxicity, Jailbreaks, Hate Speech, and Harmful Content cites this paper.

Opir: Efficient Multi-Task Safety Classification for Toxicity, Jailbreaks, Hate Speech, and Harmful Content garak: A Framework for Security Probing Large Language Models

Reference 10

Resolution: verified exact; arxiv_id, observed 2026-06-29T09:13:15.916303Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 89eb6b87-43b7-4549-8385-40d24e10296d · inbound

Which Defense Closes Which Threat? Attributing OWASP-LLM-Top-10 Coverage and Its Brittleness Under Paraphrasing cites this paper.

Which Defense Closes Which Threat? Attributing OWASP-LLM-Top-10 Coverage and Its Brittleness Under Paraphrasing garak: A Framework for Security Probing Large Language Models

Reference 6

Resolution: verified exact; arxiv_id, observed 2026-07-01T23:56:23.245202Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 829e2239-e0cc-46a5-b9b5-2ff5b08bd29c · inbound

PsychoPass: Geometric Profiling of Multi-Turn Adversarial LLM Conversations cites this paper.

PsychoPass: Geometric Profiling of Multi-Turn Adversarial LLM Conversations garak: A Framework for Security Probing Large Language Models

Reference 3

Resolution: verified exact; arxiv_id, observed 2026-07-02T03:36:29.450496Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation baa519c8-b82b-4406-bb9f-2df22fdf4d0e · inbound

Beyond Pass/Fail: Using Process Mining to Understand How LLMs Resist (and Fail) Red Team Attacks cites this paper.

Beyond Pass/Fail: Using Process Mining to Understand How LLMs Resist (and Fail) Red Team Attacks garak: A Framework for Security Probing Large Language Models

Reference 4

Resolution: metadata mismatch; arxiv_id, observed 2026-07-02T19:27:19.463251Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 34424ac1-2993-4fe8-8c63-1b68448d9041 · inbound

RIFT-Bench: Dynamic Red-teaming For Agentic AI Systems cites this paper.

RIFT-Bench: Dynamic Red-teaming For Agentic AI Systems garak: A Framework for Security Probing Large Language Models

Reference 2

Resolution: metadata mismatch; arxiv_id, observed 2026-07-04T11:19:50.272583Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation b0fe244e-343e-498b-8d01-0894fc6baeb3 · inbound

A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation cites this paper.

A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation garak: A Framework for Security Probing Large Language Models

Reference 5

Resolution: metadata mismatch; arxiv_id, observed 2026-07-04T19:50:11.217658Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 0be04f11-845a-460f-8dd4-5783089d2d3e · inbound

A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation cites this paper.

A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation garak: A Framework for Security Probing Large Language Models

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-02T10:16:35.904591Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a5ceebc9-cd00-450c-a19f-691a0146d350 · inbound

The Unfireable Safety Kernel: Execution-Time AI Alignment for AI Agents and Other Escapable AI Systems cites this paper.

The Unfireable Safety Kernel: Execution-Time AI Alignment for AI Agents and Other Escapable AI Systems garak: A Framework for Security Probing Large Language Models

Reference 4

Resolution: verified exact; arxiv_id, observed 2026-07-04T21:10:09.319945Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 03942f9f-6bbc-4af5-b55d-cb3d467ea8cf · inbound

Securing the AI Agent: A Unified Framework for Multi-Layer Agent Red Teaming cites this paper.

Securing the AI Agent: A Unified Framework for Multi-Layer Agent Red Teaming garak: A Framework for Security Probing Large Language Models

Reference 9

Resolution: verified exact; arxiv_id, observed 2026-07-01T10:15:43.904345Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation c2292c22-4df5-4f3b-bf69-a18a313500b6 · inbound

A Lifecycle and Application-Stack Survey of Large Language Model Vulnerabilities: Attacks, Risks, Defenses, and Open Problems cites this paper.

A Lifecycle and Application-Stack Survey of Large Language Model Vulnerabilities: Attacks, Risks, Defenses, and Open Problems garak: A Framework for Security Probing Large Language Models

Reference 8

Resolution: verified exact; arxiv_id, observed 2026-07-01T11:05:42.360213Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation d975e1ff-a02c-4304-a596-1630e818ed10 · inbound

A Technical Typology of AI Systems in Public Administration cites this paper.

A Technical Typology of AI Systems in Public Administration garak: A Framework for Security Probing Large Language Models

Reference 260

Resolution: verified exact; arxiv_id, observed 2026-07-01T02:45:17.100143Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 3b6069f0-c969-43b6-a1a9-e0ecb0a07f3d · inbound

AMT-X: Phase-Structured Multi-Turn Red-Teaming with Checklist-Gated Evaluation cites this paper.

AMT-X: Phase-Structured Multi-Turn Red-Teaming with Checklist-Gated Evaluation garak: A Framework for Security Probing Large Language Models

Reference 8

Resolution: unresolved; no resolver link, observed 2026-07-14T06:40:17.865408Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.