{"as_of":"2026-08-11T03:39:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5f34d4eb0789132552385fbf0ce6a70e14924d199ea1bcf3f3b8f95276e68be2","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":40,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":40,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":40,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":40,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T22:25:54.614748Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-10T22:25:54.614748Z","title":"Autodan-turbo: A lifelong agent for strategy self-exploration to jailbreak llms, 2024 a","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.01830","last_updated":"2025-01-03T14:30:14Z","snapshot_observed_at":"2026-08-11T03:10:45.471743Z","submitted_at":"2025-01-03T14:30:14Z","title":"Auto-RT: Automatic Jailbreak Strategy Exploration for Red-Teaming Large Language Models","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-10T22:25:54.614748Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2501.01830"},"observation_digest":"sha256:20553ec6715387940699aeef0ef147692ad3957e33b3656696ecc12b55e5c8e4","observation_id":"30900c49-d046-47af-951d-ce9610ed1ad3","resolution":{"observed_at":"2026-08-10T22:25:54.614748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-09T04:22:00.510546Z","title":"AutoDAN - Turbo : A Lifelong Agent for Strategy Self - Exploration to Jailbreak LLMs , November 2024 b","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05223","last_updated":"2025-02-05T21:50:34Z","snapshot_observed_at":"2026-08-09T05:14:54.791831Z","submitted_at":"2025-02-05T21:50:34Z","title":"KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-09T04:22:00.510546Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2502.05223"},"observation_digest":"sha256:a33ba45944961ac9c679dbf7dc3425be5e5bc70218120fb8d2f3fbf0853e6806","observation_id":"7a6bcbc2-39d1-4672-879c-75f27e4eba40","resolution":{"observed_at":"2026-08-09T04:22:00.510546Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-07T14:00:06.675923Z","title":"Autodan-turbo: A lifelong agent for strategy self-exploration to jailbreak llms","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.20259","last_updated":"2025-05-26T17:40:40Z","snapshot_observed_at":"2026-08-10T01:20:47.147597Z","submitted_at":"2025-05-26T17:40:40Z","title":"Lifelong Safety Alignment for Language Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T14:00:06.675923Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2505.20259"},"observation_digest":"sha256:d06a58398d65de91dd93367832e2629fc586ec440129a78ffcae9d6bef93ccdf","observation_id":"1f3963e7-0887-4698-a8ef-f282c1479027","resolution":{"observed_at":"2026-08-07T14:00:06.675923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-07T12:35:21.846278Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24369","last_updated":"2025-05-30T09:02:07Z","snapshot_observed_at":"2026-08-09T16:12:29.442194Z","submitted_at":"2025-05-30T09:02:07Z","title":"Adversarial Preference Learning for Robust LLM Alignment","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T12:35:21.846278Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2505.24369"},"observation_digest":"sha256:12879b080a78f12ca63a538c0e87cacaded58eb0b606ebbbc716bb26e96ff073","observation_id":"7cc71309-e256-45eb-abfe-903780222d71","resolution":{"observed_at":"2026-08-07T12:35:21.846278Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-07T12:01:09.010611Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00782","last_updated":"2025-06-01T02:19:46Z","snapshot_observed_at":"2026-08-07T11:55:45.889580Z","submitted_at":"2025-06-01T02:19:46Z","title":"Jailbreak-R1: Exploring the Jailbreak Capabilities of LLMs via Reinforcement Learning","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T12:01:09.010611Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2506.00782"},"observation_digest":"sha256:aca87a29a2f73307b89069aebe1f5ea32dd6d1b2735279518db6b8e5de26e4a3","observation_id":"33b04a5e-5201-4103-a505-f126f201da8a","resolution":{"observed_at":"2026-08-07T12:01:09.010611Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-07T05:47:06.362862Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07121","last_updated":"2026-08-01T10:21:24Z","snapshot_observed_at":"2026-08-08T16:50:44.576571Z","submitted_at":"2025-06-08T13:07:41Z","title":"Quality-Diversity Red-Teaming: Automated Generation of High-Quality and Diverse Attackers for Large Language Models","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:06.362862Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2506.07121"},"observation_digest":"sha256:88851bce0aaccd00516dd488af9530a29e4c851bf683d1bbae2cd1987a5cfbc5","observation_id":"04f9bc7a-20fe-4c09-bab5-2efced5b5b29","resolution":{"observed_at":"2026-08-07T05:47:06.362862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-07T05:40:20.632046Z","title":"Autodan-turbo: A lifelong agent for strategy self-exploration to jailbreak llms","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07402","last_updated":"2025-06-09T03:52:43Z","snapshot_observed_at":"2026-08-07T10:07:41.500171Z","submitted_at":"2025-06-09T03:52:43Z","title":"Beyond Jailbreaks: Revealing Stealthier and Broader LLM Security Risks Stemming from Alignment Failures","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:40:20.632046Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2506.07402"},"observation_digest":"sha256:5284387bc617632d2a8bb5657349404ac31440684def72433c6a8977fea4fd79","observation_id":"37d45666-6cd8-4238-a472-ce1bc8adba7e","resolution":{"observed_at":"2026-08-07T05:40:20.632046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-07T05:36:34.121835Z","title":"Autodan-turbo: A lifelong agent for strategy self-exploration to jailbreak llms, 2024 a","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07564","last_updated":"2025-06-11T03:14:10Z","snapshot_observed_at":"2026-08-08T13:02:06.235147Z","submitted_at":"2025-06-09T09:04:37Z","title":"SAFEFLOW: A Principled Protocol for Trustworthy and Transactional Autonomous Agent Systems","version":3},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T05:36:34.121835Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2506.07564"},"observation_digest":"sha256:f64d365fab185222b0237d318a6ce0492d5704a5239dffaa39f9829e18c8ba90","observation_id":"2604efad-cd46-4739-8285-e2d38c17fe1d","resolution":{"observed_at":"2026-08-07T05:36:34.121835Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-06T22:07:03.921548Z","title":"Autodan-turbo: A lifelong agent for strategy self-exploration to jailbreak llms.arXiv preprint arXiv:2410.05295, 2024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.22666","last_updated":"2026-05-30T16:23:21Z","snapshot_observed_at":"2026-08-06T21:58:37.734178Z","submitted_at":"2025-06-27T22:22:00Z","title":"VERA: Variational Inference Framework for Jailbreaking Large Language Models","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T22:07:03.921548Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2506.22666"},"observation_digest":"sha256:43aa5d033256e313f1ec003fcd9ba6fde1e17aed3d27d2ed8ca49edcbaad81c1","observation_id":"e6eff8a6-30ba-4341-9ce7-7aeea4b8911d","resolution":{"observed_at":"2026-08-06T22:07:03.921548Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-06T23:01:04.653534Z","title":"Autodan- turbo: A lifelong agent for strategy self-exploration to jailbreak llms.arXiv preprint arXiv:2410.05295,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.00052","last_updated":"2025-06-25T02:56:38Z","snapshot_observed_at":"2026-08-10T05:29:42.075046Z","submitted_at":"2025-06-25T02:56:38Z","title":"VSF-Med:A Vulnerability Scoring Framework for Medical Vision-Language Models","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-06T23:01:04.653534Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2507.00052"},"observation_digest":"sha256:4e877676aa8f8007c389b041197ecd2e38dee655eaa72279614555d9cd183067","observation_id":"be5c8c50-11ed-4dbb-a60b-4b47e7176bbd","resolution":{"observed_at":"2026-08-06T23:01:04.653534Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-06T11:45:40.949098Z","title":"Autodan-turbo: A lifelong agent for strategy self-exploration to jailbreak llms","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.00923","last_updated":"2026-07-15T15:41:30Z","snapshot_observed_at":"2026-08-06T14:26:51.797479Z","submitted_at":"2025-07-30T08:44:22Z","title":"Addressing Benchmarking Gaps in Large Language Models for Health and Medicine with Dynamic Red-Teaming","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T11:45:40.949098Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2508.00923"},"observation_digest":"sha256:904b3313eac2345d05ff0e2000f48aac4dcbe9a5fa64df630877cf7be99a7e05","observation_id":"e7d2450e-b32f-4a61-acd8-d6f99824c51d","resolution":{"observed_at":"2026-08-06T11:45:40.949098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T17:26:48.579160Z","title":"Autodan-turbo: A lifelong agent for strategy self-exploration to jailbreak llms.arXiv preprint arXiv:2410.05295, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.16318","last_updated":"2025-09-01T08:35:27Z","snapshot_observed_at":"2026-08-10T01:27:53.917270Z","submitted_at":"2025-08-22T11:57:55Z","title":"SATORI: Static Test Oracle Generation for REST APIs","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T17:26:48.579160Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2508.16318"},"observation_digest":"sha256:69747df3c1f9bd9bc4a076b11d1af3e934472cd45a2adb6e0002cdf8fcadbce2","observation_id":"ebdf212a-25e8-4707-9096-57d66d1687dd","resolution":{"observed_at":"2026-08-05T17:26:48.579160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2511.12710","last_updated":"2026-05-18T06:50:41Z","snapshot_observed_at":"2026-07-06T22:35:55.936840Z","submitted_at":"2025-11-16T17:52:07Z","title":"Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-21T18:58:53.183734Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2511.12710"},"observation_digest":"sha256:c49cdfddf6b1a88330e7fc91916e1894f76c3e206cae8f27bee863e1c04f01ef","observation_id":"af0d4e4f-68d9-42b7-82c5-1dae5dedef2f","resolution":{"observed_at":"2026-05-21T19:00:30.385782Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2512.07761","last_updated":"2026-04-21T08:41:54Z","snapshot_observed_at":"2026-08-10T21:52:19.288501Z","submitted_at":"2025-12-08T17:42:59Z","title":"TROJail: Trajectory-Level Optimization for Multi-Turn Large Language Model Jailbreaks with Process Rewards","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-17T00:22:54.717457Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2512.07761"},"observation_digest":"sha256:61adbf10d1121ba1da3d804e4304829bfb5be57cd742f8c2abb75631a15f88dc","observation_id":"53933384-a6f1-4869-86fa-3982b07ae5dc","resolution":{"observed_at":"2026-05-17T00:23:44.700970Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2604.11309","last_updated":"2026-04-13T11:12:30Z","snapshot_observed_at":"2026-08-10T14:33:23.383610Z","submitted_at":"2026-04-13T11:12:30Z","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-10T16:07:31.602378Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2604.11309"},"observation_digest":"sha256:77088a005deef68b235f0aa89d99ba4ae0bbe57c98bcb92cf81b116b2bf9fe71","observation_id":"8b5564b4-793d-4aec-9a16-2eef8a05158f","resolution":{"observed_at":"2026-05-11T09:16:03.903850Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2604.12232","last_updated":"2026-04-14T03:12:19Z","snapshot_observed_at":"2026-08-11T02:16:08.705747Z","submitted_at":"2026-04-14T03:12:19Z","title":"TEMPLATEFUZZ: Fine-Grained Chat Template Fuzzing for Jailbreaking and Red Teaming LLMs","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-10T16:02:52.006859Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2604.12232"},"observation_digest":"sha256:17f8e831a00c0903471c37085baf64acf019ebc34d7cd56b0521c974052d43bb","observation_id":"e5757c6d-f5a5-4c3d-bbb2-9f52da843d5e","resolution":{"observed_at":"2026-05-11T09:25:59.983966Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2604.12616","last_updated":"2026-04-14T11:44:59Z","snapshot_observed_at":"2026-07-06T23:00:46.620106Z","submitted_at":"2026-04-14T11:44:59Z","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-10T15:06:43.140580Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2604.12616"},"observation_digest":"sha256:9f02488fe07dd834081c0f95f46f70b66ea4ae3143c7a6b105016c7e4ce2fb87","observation_id":"69cd6318-8040-4648-aa31-5da6a783bd4f","resolution":{"observed_at":"2026-05-11T11:11:05.526422Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2604.12817","last_updated":"2026-04-14T14:43:55Z","snapshot_observed_at":"2026-07-06T23:00:56.449281Z","submitted_at":"2026-04-14T14:43:55Z","title":"Understanding and Improving Continuous Adversarial Training for LLMs via In-context Learning Theory","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-10T15:54:59.122635Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2604.12817"},"observation_digest":"sha256:7ce0d77b82a81e79e3a9c6338a5d9b6c14f9188fdd81c82e962d1c433c964bc8","observation_id":"eeeff360-f314-428d-88ea-afb0a73755c8","resolution":{"observed_at":"2026-05-11T09:36:11.031717Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2604.17614","last_updated":"2026-04-19T20:58:25Z","snapshot_observed_at":"2026-08-10T22:30:07.258850Z","submitted_at":"2026-04-19T20:58:25Z","title":"Characterizing Model-Native Skills","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-05-10T05:42:49.694715Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2604.17614"},"observation_digest":"sha256:50ea2b72b87f2db13b884cb0e3a2af274c4a0e490ab0741cb49850d96cfab24e","observation_id":"2b64557c-f11a-424e-9e12-91e6e8438793","resolution":{"observed_at":"2026-05-10T06:06:19.513926Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2604.18789","last_updated":"2026-04-20T19:54:47Z","snapshot_observed_at":"2026-07-06T23:05:35.374092Z","submitted_at":"2026-04-20T19:54:47Z","title":"ARES: Adaptive Red-Teaming and End-to-End Repair of Policy-Reward System","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-10T04:01:48.254524Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2604.18789"},"observation_digest":"sha256:9b56df9a788772a3240ec515d6a0fa8645fad817ad6d2b82d075d269f60dfdd0","observation_id":"b737919f-43cd-4414-a0f2-9adc503ff3bf","resolution":{"observed_at":"2026-05-11T12:16:03.221722Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2604.18976","last_updated":"2026-04-21T01:58:09Z","snapshot_observed_at":"2026-07-06T23:05:44.499005Z","submitted_at":"2026-04-21T01:58:09Z","title":"STAR-Teaming: A Strategy-Response Multiplex Network Approach to Automated LLM Red Teaming","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-05-10T03:06:21.624159Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2604.18976"},"observation_digest":"sha256:d0f96f66a4df65c4c4b136e835af81097e53f3d1c948b699d54d536c44775370","observation_id":"a42ba0d1-3772-42ec-9b14-4212bf1be01b","resolution":{"observed_at":"2026-05-11T12:46:02.591173Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2605.02647","last_updated":"2026-05-04T14:32:40Z","snapshot_observed_at":"2026-07-06T23:15:41.793878Z","submitted_at":"2026-05-04T14:32:40Z","title":"ContextualJailbreak: Evolutionary Red-Teaming via Simulated Conversational Priming","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-08T19:16:21.173184Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2605.02647"},"observation_digest":"sha256:40137124dce35352a050e957108c842e4da257a036dca0899b9551bba5af8ffe","observation_id":"eba65cc3-7010-4ce8-a543-433336ead8bf","resolution":{"observed_at":"2026-05-09T05:55:32.373357Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2605.05116","last_updated":"2026-05-06T16:47:07Z","snapshot_observed_at":"2026-07-06T23:17:48.161262Z","submitted_at":"2026-05-06T16:47:07Z","title":"On the Hardness of Junking LLMs","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-08T17:38:32.028947Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2605.05116"},"observation_digest":"sha256:3e07d50ac10b50fd5d4749818ac62a74fbc2d30dc4a1bd502d1167e73be03cc2","observation_id":"2844f5fb-83bd-4896-a672-56ecdf882e47","resolution":{"observed_at":"2026-05-11T17:21:10.117605Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2605.05682","last_updated":"2026-05-09T06:52:17Z","snapshot_observed_at":"2026-08-11T03:18:43.845411Z","submitted_at":"2026-05-07T05:19:51Z","title":"PersonaTeaming: Supporting Persona-Driven Red-Teaming for Generative AI","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-08T07:39:44.265643Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2605.05682"},"observation_digest":"sha256:8ed56bb118f9d82a9e22b53a9c3fd21c6209a468ec059945bee9dc0ac956ff5f","observation_id":"5cc8c764-e315-4085-a901-77b0135683b7","resolution":{"observed_at":"2026-05-11T20:56:19.344107Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2605.05682","last_updated":"2026-05-09T06:52:17Z","snapshot_observed_at":"2026-08-11T03:18:43.845411Z","submitted_at":"2026-05-07T05:19:51Z","title":"PersonaTeaming: Supporting Persona-Driven Red-Teaming for Generative AI","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-12T01:32:51.091173Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2605.05682"},"observation_digest":"sha256:d03caedc22aff805ca801023d4a1874f3b9eaf8ddeaa7d5089b8de59e03aa939","observation_id":"7139b5ec-bdb0-4220-a632-17939ffdca87","resolution":{"observed_at":"2026-05-12T07:56:25.998345Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2605.10582","last_updated":"2026-05-11T13:54:26Z","snapshot_observed_at":"2026-08-06T09:00:38.839501Z","submitted_at":"2026-05-11T13:54:26Z","title":"Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing","version":1},"reference_index":86,"source":"arxiv_source","source_observed_at":"2026-05-12T04:50:08.866969Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2605.10582"},"observation_digest":"sha256:70c575f5259928b0fcf70f2a1b4e48833bf16f240cca32e421de013847b38819","observation_id":"ac703452-58c4-4979-85b5-2173cf2c37ec","resolution":{"observed_at":"2026-05-12T05:51:27.472985Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2605.12813","last_updated":"2026-05-31T17:51:51Z","snapshot_observed_at":"2026-07-06T23:24:27.821980Z","submitted_at":"2026-05-12T23:13:50Z","title":"REALISTA: Realistic Latent Adversarial Attacks that Elicit LLM Hallucinations","version":1},"reference_index":185,"source":"arxiv_source","source_observed_at":"2026-05-14T20:13:10.814899Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2605.12813"},"observation_digest":"sha256:e45035eb9c6e3b3f6008d6bf79413ea82cfc28f60f98be3eb8ad7f11f61767cb","observation_id":"861629ff-3c98-404d-8335-b178b06c7ce3","resolution":{"observed_at":"2026-05-14T20:17:56.262273Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2605.17380","last_updated":"2026-05-17T10:49:07Z","snapshot_observed_at":"2026-08-02T11:02:18.535581Z","submitted_at":"2026-05-17T10:49:07Z","title":"ADR: An Agentic Detection System for Enterprise Agentic AI Security","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-05-20T13:17:59.293695Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2605.17380"},"observation_digest":"sha256:d606a9ec06bb6c889ab3a5a4c545a075f8920a25dde8dbaa79386991de0e52d5","observation_id":"7993213f-8d59-4953-a3f2-cd4ac573b187","resolution":{"observed_at":"2026-05-20T13:18:18.212118Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2605.18868","last_updated":"2026-05-15T12:28:16Z","snapshot_observed_at":"2026-08-02T22:00:15.007211Z","submitted_at":"2026-05-15T12:28:16Z","title":"DarkLLM: Learning Language-Driven Adversarial Attacks with Large Language Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-20T18:31:48.770507Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2605.18868"},"observation_digest":"sha256:f9ea35fc3af8188fa25ef3a305d0056335d2aae09e2fca408accb002470b56e7","observation_id":"14064216-d2db-4f33-9971-312262f43cf2","resolution":{"observed_at":"2026-05-20T18:33:37.896661Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2605.21362","last_updated":"2026-05-20T16:27:00Z","snapshot_observed_at":"2026-07-06T23:31:51.443407Z","submitted_at":"2026-05-20T16:27:00Z","title":"LASH: Adaptive Semantic Hybridization for Black-Box Jailbreaking of Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-21T04:48:19.926845Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2605.21362"},"observation_digest":"sha256:d46205ee88419110e98cafc098b1d731fcc728e057f3f0063931d7db9ed9795a","observation_id":"b87c3166-0dbf-414f-b89e-d560ea459596","resolution":{"observed_at":"2026-05-21T04:49:35.474867Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2605.21674","last_updated":"2026-05-20T19:31:07Z","snapshot_observed_at":"2026-07-06T23:32:05.693503Z","submitted_at":"2026-05-20T19:31:07Z","title":"Adversarial Reframing: A Framework for Targeted Generation in Language Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-22T09:35:51.862736Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2605.21674"},"observation_digest":"sha256:194e207aa8a078427fadf18d89bee33fc677a48802ca68fc5b3a0e79fe25c5cd","observation_id":"7c16dbd4-1718-4ccc-9a21-1ba481e178c7","resolution":{"observed_at":"2026-05-22T09:36:21.042903Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2606.03647","last_updated":"2026-06-02T13:39:15Z","snapshot_observed_at":"2026-07-06T23:43:50.943530Z","submitted_at":"2026-06-02T13:39:15Z","title":"Black-box, Adaptive, Efficient, Transferable, Harmful, Applicable... Attacks Are All You Need to Break LLMs","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-28T09:21:57.373862Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2606.03647"},"observation_digest":"sha256:0428a2b1b4ba48a342a88de5e8a5f64bd8ab0b47d572f542c7cddf4ffe6c4182","observation_id":"ef6251bc-566b-41e5-bcc2-138a1c31208f","resolution":{"observed_at":"2026-07-02T04:16:34.669932Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2606.06797","last_updated":"2026-06-05T00:47:10Z","snapshot_observed_at":"2026-07-06T23:46:33.376471Z","submitted_at":"2026-06-05T00:47:10Z","title":"Korean Culture into LLM Alignment: Toward Cultural Coherence","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-06-27T22:32:20.687022Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2606.06797"},"observation_digest":"sha256:fb2742d1d63d37d1413613ad641813eefd04f635569a8df4bdb6dc071d8727c8","observation_id":"90b33e95-f16d-41e8-ab1b-6f8cebf37f8c","resolution":{"observed_at":"2026-07-02T16:37:09.337980Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2606.11671","last_updated":"2026-06-10T05:29:34Z","snapshot_observed_at":"2026-08-01T07:30:24.882086Z","submitted_at":"2026-06-10T05:29:34Z","title":"Runtime Skill Audit: Targeted Runtime Probing for Agent Skill Security","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-06-27T09:28:48.695776Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2606.11671"},"observation_digest":"sha256:5abb4656afedbd2b1ad459567cff5eeff37f69f3019af089605c6a86df76b459","observation_id":"e4365639-ad87-4913-9961-73a4d9fab176","resolution":{"observed_at":"2026-06-27T09:30:46.528515Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2606.19887","last_updated":"2026-06-24T07:42:32Z","snapshot_observed_at":"2026-07-06T23:55:05.932014Z","submitted_at":"2026-06-18T07:46:18Z","title":"FinRED: An Expert-Guided Benchmark Generation and Evaluation Framework for Financial LLM Red-Teaming","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-06-26T17:11:40.088809Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2606.19887"},"observation_digest":"sha256:437f41ef1eed8be964c2e00732860bbc36fc0f36eed443dd98ea2d647d4f4fe0","observation_id":"eee5c730-7901-4509-8056-26d6f56aca17","resolution":{"observed_at":"2026-07-04T04:09:34.740713Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":"2410.05295","doi":"10.48550/arxiv.2410.05295","metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2410.05295 (2024)","venue":"arXiv (Cornell University)","work_id":"256da404-2bb4-4b45-9068-be1a2d061a81","year":2024},"citing_paper":{"arxiv_id":"2606.24166","last_updated":"2026-06-23T05:40:05Z","snapshot_observed_at":"2026-07-06T23:58:49.574536Z","submitted_at":"2026-06-23T05:40:05Z","title":"Distributed Quality-Diversity Search for Toxicity in Large Language Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-25T22:12:27.301100Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2606.24166"},"observation_digest":"sha256:bd4b0e6b7554ac2a7552c0452e85fc5b756822778e88b85a8ca33c004180ad9a","observation_id":"b7e2f51d-7c24-44b7-85d6-d2951cdad73e","resolution":{"observed_at":"2026-07-04T19:00:04.619658Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-07-11T23:37:54.128572Z","title":"arXiv preprint arXiv:2410.05295 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.03833","last_updated":"2026-07-04T11:42:56Z","snapshot_observed_at":"2026-08-07T19:09:42.214077Z","submitted_at":"2026-07-04T11:42:56Z","title":"Beyond Static Rules: Automated Discovery of Latent Vulnerabilities in Text-to-SQL","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-07-11T23:37:54.128572Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2607.03833"},"observation_digest":"sha256:850bed1ac8d14294848e50190d3efea5fba80bbe0b2693349423be0f468cc3f9","observation_id":"5650bdb6-1ed1-496c-8f9a-36737bb7c2b2","resolution":{"observed_at":"2026-07-11T23:37:54.128572Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-07-31T09:23:52.512490Z","title":"arXiv preprint arXiv:2410.05295 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24897","last_updated":"2026-07-27T16:41:36Z","snapshot_observed_at":"2026-08-03T19:46:21.991125Z","submitted_at":"2026-07-27T16:41:36Z","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-07-31T09:23:52.512490Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2607.24897"},"observation_digest":"sha256:63f9dc1f5ba951cef16e89053f4f9ff4d761c4653ce940ea6091af5b27bd79b8","observation_id":"f68d1564-7e93-463c-a149-57ccdd4cd73f","resolution":{"observed_at":"2026-07-31T09:23:52.512490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-03T00:55:24.449101Z","title":"arXiv preprint arXiv:2410.05295 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.28636","last_updated":"2026-05-19T13:56:13Z","snapshot_observed_at":"2026-08-10T20:43:57.798906Z","submitted_at":"2026-05-19T13:56:13Z","title":"Chain-of-Models: Cross-Model Auditing for Bias-Robust LLM Judges","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-03T00:55:24.449101Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2607.28636"},"observation_digest":"sha256:9fa0ee75b1b506d60a79e0200f1681e3cdfb9e51ce52acad628a33249fc22fd5","observation_id":"70de2287-057c-4e6c-b66c-db808db69336","resolution":{"observed_at":"2026-08-03T00:55:24.449101Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-07T00:14:48.580356Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":133,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.580356Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:f33d6e257c6d02cc057ffff9e636a9b2720acbd99764fcce69f4e91b9a04fd33","observation_id":"a09827e2-9353-438c-b32e-d3a5b81cef8b","resolution":{"observed_at":"2026-08-07T00:14:48.580356Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2410.05295/citation-record","integrity":"/paper/2410.05295/integrity","json":"/paper/2410.05295/citation-record.json","paper":"/paper/2410.05295"},"outbound":[],"paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","latest_version":4,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T22:04:23.662762Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 40 inbound Pith citation observations for arXiv:2410.05295."}