{"as_of":"2026-08-17T20:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:88de7a1f5f905a6081b626016db7c278b918598ad1a04e5f5e37a7dc50e7e338","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":5,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":5,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":5,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T22:35:59.460659Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-23T04:42:34.221737Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2408.11313","last_updated":"2025-04-02T08:03:11Z","snapshot_observed_at":"2026-08-16T13:25:01.414450Z","submitted_at":"2024-08-21T03:35:24Z","title":"An Optimizable Suffix Is Worth A Thousand Templates: Efficient Black-box Jailbreaking without Affirmative Phrases via LLM as Optimizer","version":2},"cited_work":{"arxiv_id":"2408.11313","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.11313","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Un- locking adversarial suffix optimization without affirmative phrases: Efficient black-box jailbreaking via llm as optimizer","venue":null,"work_id":"43514ce0-83a9-41dc-8cd3-b0f1dac1ee9e","year":2024},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-08-15T21:07:34.234107Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2408.11313","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:d3a8d610e8e089a113b60ff391bd99fa07591e2d40936fc9fcabaad2800466a5","observation_id":"6a3a682e-b897-4adf-9041-a885df213db2","resolution":{"observed_at":"2026-05-23T04:42:34.224637Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.11313","last_updated":"2025-04-02T08:03:11Z","snapshot_observed_at":"2026-08-16T13:25:01.414450Z","submitted_at":"2024-08-21T03:35:24Z","title":"An Optimizable Suffix Is Worth A Thousand Templates: Efficient Black-box Jailbreaking without Affirmative Phrases via LLM as Optimizer","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.11313","snapshot_observed_at":"2026-08-15T22:35:59.460659Z","title":"Unlocking ad- versarial suffix optimization without affirmative phrases: Efficient black- box jailbreaking via llm as optimizer,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08804","last_updated":"2025-05-11T06:32:33Z","snapshot_observed_at":"2026-08-17T00:00:19.103978Z","submitted_at":"2025-05-11T06:32:33Z","title":"TokenProber: Jailbreaking Text-to-image Models via Fine-grained Word Impact Analysis","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T22:35:59.460659Z"},"links":{"cited_paper":"/paper/2408.11313","citing_paper":"/paper/2505.08804"},"observation_digest":"sha256:159c8cde98cf190427d1293afe294e663faaa6c405de1db3177e8c34f0405bf9","observation_id":"10569917-1464-46c5-a4ef-90a43b49dad7","resolution":{"observed_at":"2026-08-15T22:35:59.460659Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.11313","last_updated":"2025-04-02T08:03:11Z","snapshot_observed_at":"2026-08-16T13:25:01.414450Z","submitted_at":"2024-08-21T03:35:24Z","title":"An Optimizable Suffix Is Worth A Thousand Templates: Efficient Black-box Jailbreaking without Affirmative Phrases via LLM as Optimizer","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.11313","snapshot_observed_at":"2026-08-15T19:45:09.864656Z","title":"Unlocking adversarial suffix opti- mization without affirmative phrases: Efficient black-box jailbreaking via llm as optimizer,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.15170","last_updated":"2025-08-01T10:42:39Z","snapshot_observed_at":"2026-08-16T15:33:53.252333Z","submitted_at":"2025-06-18T06:33:19Z","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","version":3},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-15T19:45:09.864656Z"},"links":{"cited_paper":"/paper/2408.11313","citing_paper":"/paper/2506.15170"},"observation_digest":"sha256:4a41700785c088ea87163712835d5ac7b4f7c684b181e0a06b73a21559004eb3","observation_id":"efca184c-6882-477e-9c7a-1e48b2cfd1c0","resolution":{"observed_at":"2026-08-15T19:45:09.864656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.11313","last_updated":"2025-04-02T08:03:11Z","snapshot_observed_at":"2026-08-16T13:25:01.414450Z","submitted_at":"2024-08-21T03:35:24Z","title":"An Optimizable Suffix Is Worth A Thousand Templates: Efficient Black-box Jailbreaking without Affirmative Phrases via LLM as Optimizer","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.11313","snapshot_observed_at":"2026-08-04T20:55:41.560227Z","title":"An optimizable suffix is worth a thousand templates: Efficient black-box jailbreaking without affirmative phrases via llm as optimizer,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.08269","last_updated":"2026-07-17T08:53:46Z","snapshot_observed_at":"2026-08-17T14:07:26.027829Z","submitted_at":"2025-09-10T04:05:54Z","title":"A Systematic Survey on Large Language Models for Evolutionary Optimization: From Modeling to Solving","version":6},"reference_index":119,"source":"pdf_text","source_observed_at":"2026-08-04T20:55:41.560227Z"},"links":{"cited_paper":"/paper/2408.11313","citing_paper":"/paper/2509.08269"},"observation_digest":"sha256:a738dc7f78a4dd14883ddf28b822fe6217c44066cb6acfd09dbf5f8b96e63cc7","observation_id":"e85e7101-3843-4e80-add1-78c684ca5905","resolution":{"observed_at":"2026-08-04T20:55:41.560227Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.11313","last_updated":"2025-04-02T08:03:11Z","snapshot_observed_at":"2026-08-16T13:25:01.414450Z","submitted_at":"2024-08-21T03:35:24Z","title":"An Optimizable Suffix Is Worth A Thousand Templates: Efficient Black-box Jailbreaking without Affirmative Phrases via LLM as Optimizer","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.11313","snapshot_observed_at":"2026-08-04T09:25:43.691276Z","title":"Unlocking adversarial suffix optimization without affirmative phrases: Efficient black-box jailbreaking via LLM as optimizer.CoRR, abs/2408.11313, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-14T22:20:04.981358Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:43.691276Z"},"links":{"cited_paper":"/paper/2408.11313","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:1c89184365aa1189200b5458c426b411bfea5823eaf12d0cd578b6a9bdd2d4f4","observation_id":"dc745b0d-06b8-4b6d-aa5d-f51d89c7c6e0","resolution":{"observed_at":"2026-08-04T09:25:43.691276Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2408.11313/citation-record","integrity":"/paper/2408.11313/integrity","json":"/paper/2408.11313/citation-record.json","paper":"/paper/2408.11313"},"outbound":[],"paper":{"arxiv_id":"2408.11313","last_updated":"2025-04-02T08:03:11Z","latest_version":2,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-16T13:25:01.414450Z","submitted_at":"2024-08-21T03:35:24Z","title":"An Optimizable Suffix Is Worth A Thousand Templates: Efficient Black-box Jailbreaking without Affirmative Phrases via LLM as Optimizer"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 5 inbound Pith citation observations for arXiv:2408.11313."}