{"as_of":"2026-08-14T00:50:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e2e6d3739e5eb915b54690ab1c256799028e85998ce7b31fd6d3994c28350e9b","coverage":[{"denominator":40,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":40,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T13:59:19.026125Z","state":"measured"},{"denominator":40,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":40,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.12621/citation-record","integrity":"/paper/2412.12621/integrity","json":"/paper/2412.12621/citation-record.json","paper":"/paper/2412.12621"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:20.100223Z","title":null,"venue":null,"work_id":"64fec75c-163e-4660-a96d-08e50ea08bff","year":2023},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.725042Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:926ecc5293dd8e2539be8007d9e3af3b09264b1496748b633f2dc0c870128042","observation_id":"870446d4-7a62-460f-a1a4-d82dfada0a93","resolution":{"observed_at":"2026-08-11T13:59:20.106632Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2005.14165","last_updated":"2020-07-22T19:47:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-05-28T17:29:03Z","title":"Language Models are Few-Shot Learners","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.14165","snapshot_observed_at":"2026-08-11T13:59:18.733098Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.733098Z"},"links":{"cited_paper":"/paper/2005.14165","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:aa911ed660d5a7d925a8a591eb3b445a7052dabe04a7307db6eee5632c1ed7d5","observation_id":"dd329c2a-5612-428e-b848-b136d547a5a4","resolution":{"observed_at":"2026-08-11T13:59:18.733098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:20.078429Z","title":"Jailbreaking black box large language models in twenty queries","venue":null,"work_id":"ef1d9e78-b214-448a-a73e-3abd82d93715","year":null},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.740699Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:7b0d33a894b6506d72ed4b4baa320d858fa2ee64b85d97604bebafb0aa93662c","observation_id":"aa2d2e17-85a5-47c9-8172-3d8dc2646a22","resolution":{"observed_at":"2026-08-11T13:59:20.086923Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.08715","last_updated":"2023-10-25T07:30:51Z","snapshot_observed_at":"2026-08-13T10:54:52.644606Z","submitted_at":"2023-07-16T01:07:15Z","title":"MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbots","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.08715","snapshot_observed_at":"2026-08-11T13:59:18.747622Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.747622Z"},"links":{"cited_paper":"/paper/2307.08715","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:2b1e164fe41403493ea9204c3ef48dd83bf4296c3daa6d4c50ac3782eda6824d","observation_id":"6e5596ef-3e38-4084-8685-c132b86fe1e9","resolution":{"observed_at":"2026-08-11T13:59:18.747622Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:18.754515Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.754515Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:e9c847059296fa1c535b85afc17e941c3a9fbf72b4aea6ba738db846c0e2d3d9","observation_id":"38db7cb1-a4ba-42e3-a464-2df1a11ed912","resolution":{"observed_at":"2026-08-11T13:59:18.754515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-08-13T05:25:30.661845Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-08-11T13:59:18.762890Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.762890Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:d5afa987996e1e602e0a2346bc34af538610d7f233e94b6a4cbd08f8c4a07c69","observation_id":"87bf319e-b04e-4f76-a79b-a4e4a230da36","resolution":{"observed_at":"2026-08-11T13:59:18.762890Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2009.11462","last_updated":"2020-09-25T20:22:26Z","snapshot_observed_at":"2026-08-09T05:10:26.091710Z","submitted_at":"2020-09-24T03:17:19Z","title":"RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2009.11462","snapshot_observed_at":"2026-08-11T13:59:18.769115Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.769115Z"},"links":{"cited_paper":"/paper/2009.11462","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:736ae6835a4a21eadb1dbf8f0967dd01eb90e661b733f9fe0aa8e1d85526e23d","observation_id":"4118cf27-74a2-40a8-ba29-897dd083f708","resolution":{"observed_at":"2026-08-11T13:59:18.769115Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12793","last_updated":"2024-07-30T03:58:11Z","snapshot_observed_at":"2026-08-13T15:06:05.744748Z","submitted_at":"2024-06-18T16:58:21Z","title":"ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Tools","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12793","snapshot_observed_at":"2026-08-11T13:59:18.777009Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.777009Z"},"links":{"cited_paper":"/paper/2406.12793","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:4cc64a54bcda045a547af1d6916bdbba114935bebfb7dde1090ec912924f57b0","observation_id":"b5793131-b927-406d-bbbf-fd49f0f6af63","resolution":{"observed_at":"2026-08-11T13:59:18.777009Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:20.036849Z","title":null,"venue":null,"work_id":"f428cb5e-3e5c-4eee-ab64-096c28267709","year":1901},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.784195Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:6f4ab8e88eceabfe7c2a5e5331a99a6922b24b6f51827c70436a407064de36c7","observation_id":"5e76703d-4cc0-4911-80ea-7c72bb65d111","resolution":{"observed_at":"2026-08-11T13:59:20.042645Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:18.790894Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.790894Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:b7f768491f93a9427e7c14c70414d70a885940aec6ce3a45649fa2404e753598","observation_id":"5a4cf6e0-3f12-4fb2-a4cf-c0d69acdf174","resolution":{"observed_at":"2026-08-11T13:59:18.790894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.14692","last_updated":"2023-07-27T08:28:58Z","snapshot_observed_at":"2026-08-13T10:47:04.174004Z","submitted_at":"2023-07-27T08:28:58Z","title":"Backdoor Attacks for In-Context Learning with Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.14692","snapshot_observed_at":"2026-08-11T13:59:18.798133Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.798133Z"},"links":{"cited_paper":"/paper/2307.14692","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:10410138710b58a6531b3a748ed5fd71dae20e6358e42b899e3706ca5508441d","observation_id":"6f957232-f359-466f-a39d-e8b14cc8f842","resolution":{"observed_at":"2026-08-11T13:59:18.798133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:20.004391Z","title":null,"venue":null,"work_id":"61bce635-237e-4579-9620-4b058618ad0f","year":2023},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.804259Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:97303f1f7ed7337975261d10bff93bb07a6cf5983f316173ded13a9cd412b196","observation_id":"2051e820-d357-486c-a566-0c184559f68b","resolution":{"observed_at":"2026-08-11T13:59:20.010639Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.03191","last_updated":"2024-11-28T13:43:50Z","snapshot_observed_at":"2026-08-13T20:39:50.435115Z","submitted_at":"2023-11-06T15:29:30Z","title":"DeepInception: Hypnotize Large Language Model to Be Jailbreaker","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.03191","snapshot_observed_at":"2026-08-11T13:59:18.812334Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.812334Z"},"links":{"cited_paper":"/paper/2311.03191","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:29408f02f09798929915b97089dcf2568d37242b9e539dd412132235961e1b68","observation_id":"c77a9562-1741-4d4c-99e7-550ba402e63c","resolution":{"observed_at":"2026-08-11T13:59:18.812334Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:18.821316Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.821316Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:3aae265e5565a536f80bed547cd41ad459a2cedd37cd4287775fbabe1b72ecd0","observation_id":"30ac1201-394f-4804-b900-b81ad1a8a0ac","resolution":{"observed_at":"2026-08-11T13:59:18.821316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:19.962548Z","title":null,"venue":null,"work_id":"e772a0d2-bc2a-4bb8-bc81-c828b723e317","year":2022},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.828689Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:53085c912c6debbedd7cc3a0842e95c6523d42ee60d85687cba9fe3bc054890a","observation_id":"6460b972-0057-449b-aa30-a9ad29b7fec1","resolution":{"observed_at":"2026-08-11T13:59:19.968791Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:18.834163Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.834163Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:b5ec2b1d58c06a8d3dbc8d47f1e5c902567d6488fae58ace28161852ce1afb9f","observation_id":"683d8408-778b-4ddd-84bd-2b7e160844b3","resolution":{"observed_at":"2026-08-11T13:59:18.834163Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:18.845099Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.845099Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:f4d6e4473d9cc4a93bef12436b3bd889f3670c50031187641beefe104c39a52e","observation_id":"e9545fa8-c8da-4ed9-a576-efdcd8bff0ab","resolution":{"observed_at":"2026-08-11T13:59:18.845099Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:19.912210Z","title":null,"venue":null,"work_id":"bbd3a277-ee08-4c70-b6eb-358601f240b3","year":2022},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.851358Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:2897c5ecd2eb940cd44ad9ebddae20ce861266fbabfb5fb5d0e6190c6c90be93","observation_id":"1f6ede92-94c5-4772-a741-b1c7e4866626","resolution":{"observed_at":"2026-08-11T13:59:19.919080Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17035","last_updated":"2023-11-28T18:47:03Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-11-28T18:47:03Z","title":"Scalable Extraction of Training Data from (Production) Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17035","snapshot_observed_at":"2026-08-11T13:59:18.858245Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.858245Z"},"links":{"cited_paper":"/paper/2311.17035","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:6d4ec25617a2e583060f8ffbe6599b415f479f5f82d1fd704f4a3db02e461726","observation_id":"9f6e510f-afc7-4d6d-b02d-d711c31e7387","resolution":{"observed_at":"2026-08-11T13:59:18.858245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:19.889444Z","title":null,"venue":null,"work_id":"d71f8c15-ed53-4f94-af9c-aaade56053b9","year":2022},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.868119Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:f4c29842977c4e9ba6c53bfb4048c516c065282226cb495bb66aa9f05ed0c877","observation_id":"5e194386-1a98-40a6-b987-f1a58952c160","resolution":{"observed_at":"2026-08-11T13:59:19.895605Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:19.868113Z","title":null,"venue":null,"work_id":"b5ae725e-f7b0-4cdc-9588-05d5dbb22708","year":2022},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.877707Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:cf8db6e64614e8f65a1d6ef3b93de25b79c0cff60115147bd725bc449decb203","observation_id":"e2ca783b-c6ea-404b-b272-f666bff9c529","resolution":{"observed_at":"2026-08-11T13:59:19.873901Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-11T13:59:18.884149Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.884149Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:6f6593713d928b25ff9a136ebaf3ae71717acb619c181dedb510c94a8a7788fa","observation_id":"8556c755-3aeb-4532-97d9-766d71a9b726","resolution":{"observed_at":"2026-08-11T13:59:18.884149Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:19.839669Z","title":null,"venue":null,"work_id":"2adc2e3a-9e10-47b0-a59e-7bc45e8699f2","year":2019},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.890258Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:bea88d08a432ce472a6744b5f7f7303ea686061f7ff40584a2b1e86d080bd3e2","observation_id":"f7924592-eb61-4db2-a2cc-7eaac749499c","resolution":{"observed_at":"2026-08-11T13:59:19.847807Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:18.905139Z","title":null,"venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.905139Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:d3947c19b0618668520b45ec613cff8e2e885211f81efb2be1f1a1245930686b","observation_id":"44aaa324-a070-4e1e-8ed5-0a3a88967703","resolution":{"observed_at":"2026-08-11T13:59:18.905139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"8490.18856","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:19.370666Z","title":"Robertson and Steve Walker","venue":null,"work_id":"cde3e4fd-9c92-427f-b34c-a5edb3605c21","year":1994},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.911831Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:7d9b0e48d27a105db4e37f8362f5fdc709d1e04e0840ae3644458fde177049f8","observation_id":"12b7790f-caee-41f2-9576-19a2cd02c289","resolution":{"observed_at":"2026-08-11T13:59:19.384994Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:18.919363Z","title":"do anything now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.919363Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:2699a1fa8a374aa51363642a9db6b1fbbf5e94a1650944ceb1345939dbe1b763","observation_id":"9c3779ee-bc9b-4a75-b61b-980b30f72d56","resolution":{"observed_at":"2026-08-11T13:59:18.919363Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:18.926037Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.926037Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:f5b10534d392181f1d1bd421a690192d29847e27a1013c4b2f49d06c3e581ae9","observation_id":"ef34db6e-ee7e-409f-be0c-ae7ce0f04717","resolution":{"observed_at":"2026-08-11T13:59:18.926037Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16006","last_updated":"2024-06-04T02:59:58Z","snapshot_observed_at":"2026-08-13T18:29:52.111506Z","submitted_at":"2024-02-25T06:46:27Z","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16006","snapshot_observed_at":"2026-08-11T13:59:18.932567Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.932567Z"},"links":{"cited_paper":"/paper/2402.16006","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:ef7fd70ed941e068c6fb7fb26306749b590bacf8c753fc74f129661649212fd5","observation_id":"6f3c9b6d-95ff-4ffb-806a-17092a2d9f4c","resolution":{"observed_at":"2026-08-11T13:59:18.932567Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:18.939691Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.939691Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:02ad106a3a24bee3ed883e0c7cdbb173976804e4017bcc0dc47d90162e9eccb0","observation_id":"206b6550-a04a-41d5-ac13-def929f2153f","resolution":{"observed_at":"2026-08-11T13:59:18.939691Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:19.732350Z","title":null,"venue":null,"work_id":"88891f2d-51dc-41d7-999d-31735a6a929b","year":2023},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.945211Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:4170401e8c229b7bd935afc241f94bd106aca325b6750af4925af05eadfedaef","observation_id":"ec9a2024-036e-4821-bd58-0cd8dc44ef90","resolution":{"observed_at":"2026-08-11T13:59:19.740439Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:19.707751Z","title":"Safedecoding: Defending against jailbreak attacks via safety-aware decoding","venue":null,"work_id":"a4dbd62b-6d4b-4fbd-9066-d9f8f7744add","year":2024},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.953141Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:fc3ce95a8e0422d56cc621d854f5aafc38ab4e8b9b7caeb4f405e5f92f8974fe","observation_id":"8d068402-e561-496a-aabe-b88560e17e36","resolution":{"observed_at":"2026-08-11T13:59:19.715946Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.10671","last_updated":"2024-09-10T13:25:53Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-15T12:35:42Z","title":"Qwen2 Technical Report","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.10671","snapshot_observed_at":"2026-08-11T13:59:18.960109Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.960109Z"},"links":{"cited_paper":"/paper/2407.10671","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:14b2a27bbf521c56e4ae216be41684c2055d6561ae497e0d9724cafe4336cb6c","observation_id":"f75b0484-2635-407b-a53b-7c79dc4f832f","resolution":{"observed_at":"2026-08-11T13:59:18.960109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-11T13:59:18.970508Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.970508Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:1a87cf4471c40d211a372c7a3c9c2cf0cd133df9c4e06a5afab9043f5cef08c3","observation_id":"18d0dcdc-1f80-4ff6-adcf-86be1f8aec40","resolution":{"observed_at":"2026-08-11T13:59:18.970508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06373","last_updated":"2024-01-23T22:46:12Z","snapshot_observed_at":"2026-08-13T04:43:50.878930Z","submitted_at":"2024-01-12T16:13:24Z","title":"How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.06373","snapshot_observed_at":"2026-08-11T13:59:18.978683Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.978683Z"},"links":{"cited_paper":"/paper/2401.06373","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:f54ca5fac31bc50d49b0c77286fba88dd0865577f1bf73f455d57e91cdd049d8","observation_id":"4dbfc47e-e73f-478b-bdad-0334f8cc7ddf","resolution":{"observed_at":"2026-08-11T13:59:18.978683Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.01219","last_updated":"2025-09-14T09:34:46Z","snapshot_observed_at":"2026-07-06T16:13:46.112815Z","submitted_at":"2023-09-03T16:56:48Z","title":"Siren's Song in the AI Ocean: A Survey on Hallucination in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.01219","snapshot_observed_at":"2026-08-11T13:59:18.987124Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.987124Z"},"links":{"cited_paper":"/paper/2309.01219","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:0bc10be925dd5a8011a2d0c98d549d50e55981b7a6a0fefd2d2270ad8696d767","observation_id":"3f1371f8-7b09-4504-ad2c-66f724e309e6","resolution":{"observed_at":"2026-08-11T13:59:18.987124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:18.998710Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.998710Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:01a436efc2f19f8a6c4a37f202aac1b568135bc75cf3c63262bfdfb437c8839b","observation_id":"9c6c8a7e-9c33-4fb2-91c9-2b0dbfe952eb","resolution":{"observed_at":"2026-08-11T13:59:18.998710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:19.005795Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:19.005795Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:2afc05eb63b49f7895437ca92412e5e1771a1270db42d6726d7218d4e3841af3","observation_id":"6579303a-330b-4b4f-a8e7-a2b4e78033e2","resolution":{"observed_at":"2026-08-11T13:59:19.005795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-11T13:59:19.012784Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:19.012784Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:a206c3757bb794617cd03252e2fcc03399911326325c1cdb5d5c54f473a4b547","observation_id":"450a4bb7-d722-44c1-a285-e335513e4e4a","resolution":{"observed_at":"2026-08-11T13:59:19.012784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:19.019165Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:19.019165Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:310f90cc46d5da06a8c8357620c4ff0bdd976463d0887fc4025734a7ab282493","observation_id":"7abcbe39-53ab-4ca3-8c32-65aaaae18e34","resolution":{"observed_at":"2026-08-11T13:59:19.019165Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T13:59:19.026125Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:19.026125Z"},"links":{"citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:3a806fe989071c705fd04b4d1672653d143a4a3acdee7fed7ba259e601cd7ede","observation_id":"b963a6ce-f323-4681-9611-8b7f9630aa99","resolution":{"observed_at":"2026-08-11T13:59:19.026125Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!"},"reference_resolution":{"displayed":40,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":37,"verified_exact":0,"verified_fuzzy":2},"total_outbound_references":40},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 40 of 40 outbound references and 0 inbound Pith citation observations for arXiv:2412.12621."}