{"as_of":"2026-08-23T15:34:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a7cfbe15e32666adaaf472f7541508516de6db695eae9ac1f98d15942126bb58","coverage":[{"denominator":33,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":33,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T10:44:19.840925Z","state":"measured"},{"denominator":35,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":35,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-23T06:30:58.430688+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T19:31:01.310794Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-06T19:31:07.402925Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"cited_work":{"arxiv_id":"2412.16359","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.16359","snapshot_observed_at":"2026-08-06T19:31:07.402925Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","venue":"cs.CL","work_id":"f4743648-b64b-46be-88d1-a1de01c15839","year":2024},"citing_paper":{"arxiv_id":"2507.05441","last_updated":"2025-07-07T19:45:46Z","snapshot_observed_at":"2026-08-19T02:52:16.697281Z","submitted_at":"2025-07-07T19:45:46Z","title":"Adversarial Machine Learning Attacks on Financial Reporting via Maximum Violated Multi-Objective Attack","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T19:31:01.310794Z"},"links":{"cited_paper":"/paper/2412.16359","citing_paper":"/paper/2507.05441"},"observation_digest":"sha256:9f43645acbb1b77bdd5e36854f79792f6e912e6c9a858d9bb84260634db74b0d","observation_id":"dc0f6c11-7bf5-4c72-a118-20f132d7d14a","resolution":{"observed_at":"2026-08-06T19:31:07.407612Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16359","snapshot_observed_at":"2026-08-04T17:46:16.097375Z","title":"Human-readable adversarial prompts: An investigation into LLM vulnerabilities using situational context,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.10682","last_updated":"2025-09-12T20:26:16Z","snapshot_observed_at":"2026-08-21T08:43:25.498819Z","submitted_at":"2025-09-12T20:26:16Z","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-04T17:46:16.097375Z"},"links":{"cited_paper":"/paper/2412.16359","citing_paper":"/paper/2509.10682"},"observation_digest":"sha256:55b402a85f9876663743e0f4ca28fdd0bb5946bd2cf322e0928ef76b3933bf74","observation_id":"85640cdd-56d6-4dc7-bf65-82ecca6b14d4","resolution":{"observed_at":"2026-08-04T17:46:16.097375Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2412.16359/citation-record","integrity":"/paper/2412.16359/integrity","json":"/paper/2412.16359/citation-record.json","paper":"/paper/2412.16359"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:44:20.586877Z","title":null,"venue":null,"work_id":"204beae0-aa53-4693-b4b3-1fc1e659870f","year":2018},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.645303Z"},"links":{"citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:31e8fd9c3d0ff8124c74f5a6fe3b0556c4af28f1b39160378dd5e391c9b2ab74","observation_id":"7cf9934f-9dfc-4941-9b72-8807e32bbf42","resolution":{"observed_at":"2026-08-11T10:44:20.592837Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02151","last_updated":"2025-04-17T18:55:45Z","snapshot_observed_at":"2026-08-16T14:04:12.947538Z","submitted_at":"2024-04-02T17:58:27Z","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02151","snapshot_observed_at":"2026-08-11T10:44:19.652542Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.652542Z"},"links":{"cited_paper":"/paper/2404.02151","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:66952962b9d510e332d283ac3f58593e5fc77405d92131c654c40e3025f8ed37","observation_id":"95a87020-9183-4868-b118-1b447ca09004","resolution":{"observed_at":"2026-08-11T10:44:19.652542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09024","last_updated":"2025-04-18T14:30:31Z","snapshot_observed_at":"2026-08-16T05:17:43.289570Z","submitted_at":"2024-10-11T17:39:22Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09024","snapshot_observed_at":"2026-08-11T10:44:19.659746Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.659746Z"},"links":{"cited_paper":"/paper/2410.09024","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:0b6da185ec7c7c6c2c01c7b385bca60adf08a57caab02dd96690c590bb361500","observation_id":"6c2f5552-848f-47fd-80af-a3f281cdc6c1","resolution":{"observed_at":"2026-08-11T10:44:19.659746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:44:20.561491Z","title":null,"venue":null,"work_id":"40cfa40c-90a2-4aef-aa00-5054a0c8ede6","year":2018},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.666387Z"},"links":{"citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:a314b04cd56755eaace86a045d4916f10924b77957132938f36aaf1ae551d8a0","observation_id":"c7d4ffcd-e97b-4784-a699-96542affcf40","resolution":{"observed_at":"2026-08-11T10:44:20.566948Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:44:20.542994Z","title":null,"venue":null,"work_id":"f468c6ab-7635-44b1-8029-58b1126cdd7a","year":2024},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.673376Z"},"links":{"citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:7f3f407cde85086877947e0b3728e0e0f27da08271b18a44171e5710a6a66d3e","observation_id":"0d7719e5-432f-41d8-a6bd-30be24480f82","resolution":{"observed_at":"2026-08-11T10:44:20.548437Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.06751","last_updated":"2018-05-24T16:43:45Z","snapshot_observed_at":"2026-08-16T00:36:28.515339Z","submitted_at":"2017-12-19T02:15:19Z","title":"HotFlip: White-Box Adversarial Examples for Text Classification","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.06751","snapshot_observed_at":"2026-08-11T10:44:19.680938Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.680938Z"},"links":{"cited_paper":"/paper/1712.06751","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:f270553ccea935a9b3e9aea6721811f88f8fd17376e1b8276f1fe2b12de8999d","observation_id":"8eae148a-cd7e-4be3-b44f-1bb950989062","resolution":{"observed_at":"2026-08-11T10:44:19.680938Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:44:19.688131Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.688131Z"},"links":{"citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:bd45c30762358be10e7b60db3bf6e8eae2824398d5638573befbca33c52761dd","observation_id":"122bc6a9-25da-420d-9ad6-0beeda1cd709","resolution":{"observed_at":"2026-08-11T10:44:19.688131Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:44:20.509993Z","title":null,"venue":null,"work_id":"09917ce5-3fd6-4324-b14d-997b7f609d38","year":2023},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.694196Z"},"links":{"citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:69285a78361396746d344a9b2be0d0b22eb51da27a3343308711587179828a3c","observation_id":"90a9549c-4351-42b6-87c0-e022d7051b25","resolution":{"observed_at":"2026-08-11T10:44:20.516566Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.13733","last_updated":"2021-04-15T17:43:43Z","snapshot_observed_at":"2026-08-18T17:44:28.600464Z","submitted_at":"2021-04-15T17:43:43Z","title":"Gradient-based Adversarial Attacks against Text Transformers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.13733","snapshot_observed_at":"2026-08-11T10:44:19.699801Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.699801Z"},"links":{"cited_paper":"/paper/2104.13733","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:0dddc7e186c648a1cc59c665f917b2d6893ff4889292547b444160b9a8d9e878","observation_id":"e82f2d31-88af-4147-9bbe-f9cec9148ce5","resolution":{"observed_at":"2026-08-11T10:44:19.699801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:44:20.488366Z","title":null,"venue":null,"work_id":"6e404399-ad8b-4066-b4d5-b0298e56ef1d","year":null},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.705729Z"},"links":{"citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:a2f0d796d4f37d805fa9a1a6c11c07bcfdfab0f1168e9175a863f74376149fce","observation_id":"66c244f6-dfc7-4446-b813-ef461f302272","resolution":{"observed_at":"2026-08-11T10:44:20.495340Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07179","last_updated":"2024-07-23T19:41:05Z","snapshot_observed_at":"2026-08-16T14:19:34.070930Z","submitted_at":"2024-02-11T12:25:41Z","title":"Prompt Perturbation in Retrieval-Augmented Generation based Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07179","snapshot_observed_at":"2026-08-11T10:44:19.711412Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.711412Z"},"links":{"cited_paper":"/paper/2402.07179","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:6e8dd4ed563b1e0abcd93ea8f0bedd0b804ddd4c66849381332029266dca7220","observation_id":"acbde766-9d5a-4ab0-b71c-de5f3bb2b66b","resolution":{"observed_at":"2026-08-11T10:44:19.711412Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:44:19.717713Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.717713Z"},"links":{"citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:dcbd9ae20a4c540b4729add128c052cffd6d2ff0ae9bf44879c7d91639e3b4d7","observation_id":"44ebeef0-b777-4b36-ae85-b51f3780fdd7","resolution":{"observed_at":"2026-08-11T10:44:19.717713Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.20787","last_updated":"2025-01-06T07:22:50Z","snapshot_observed_at":"2026-08-20T06:03:11.672456Z","submitted_at":"2024-12-30T08:11:54Z","title":"SecBench: A Comprehensive Multi-Dimensional Benchmarking Dataset for LLMs in Cybersecurity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.20787","snapshot_observed_at":"2026-08-11T10:44:19.722784Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.722784Z"},"links":{"cited_paper":"/paper/2412.20787","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:80f04cc432ab1ca0cbbf9531bc7281d5d86932479551dbfa11d473a600398a44","observation_id":"eb54cdca-2502-4cd6-9953-ea1ba9e7eada","resolution":{"observed_at":"2026-08-11T10:44:19.722784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-08-17T02:26:19.835254Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-11T10:44:19.728555Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.728555Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:ea7cf25d6b5c2f833d939db2584e58930be2896a9198742b4760c3384155e10e","observation_id":"78e647bc-9706-4999-9d6f-1f345a261f8f","resolution":{"observed_at":"2026-08-11T10:44:19.728555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1812.05271","last_updated":"2018-12-13T05:32:43Z","snapshot_observed_at":"2026-08-14T17:44:22.692965Z","submitted_at":"2018-12-13T05:32:43Z","title":"TextBugger: Generating Adversarial Text Against Real-world Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1812.05271","snapshot_observed_at":"2026-08-11T10:44:19.734253Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.734253Z"},"links":{"cited_paper":"/paper/1812.05271","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:8d0f8a7c034e4694c9c5dd3f1649d138c2efc006c4fffc44f2043b9d7e11f76d","observation_id":"79a66612-b6fc-4fae-8171-4df096c42a1d","resolution":{"observed_at":"2026-08-11T10:44:19.734253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2004.09984","last_updated":"2020-10-02T03:08:04Z","snapshot_observed_at":"2026-08-14T14:55:04.375361Z","submitted_at":"2020-04-21T13:30:02Z","title":"BERT-ATTACK: Adversarial Attack Against BERT Using BERT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.09984","snapshot_observed_at":"2026-08-11T10:44:19.740214Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.740214Z"},"links":{"cited_paper":"/paper/2004.09984","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:3955c9f195f32ef2c66eadd3985e83083206e4c0c33981ada1f8e70b3cef0ecd","observation_id":"3f198369-4710-4620-ab8b-4e69b1ae8cfc","resolution":{"observed_at":"2026-08-11T10:44:19.740214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-16T14:36:14.029419Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-11T10:44:19.746792Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.746792Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:6e5a3711262edbbaa082d96163952dc0a9797378e53dae180051d54629308037","observation_id":"4a0315c6-e57f-4187-a6bb-64cc091d511c","resolution":{"observed_at":"2026-08-11T10:44:19.746792Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:44:19.753680Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.753680Z"},"links":{"citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:8fcc7cda78175983554ddbb4d5118ab47d7289176e1dd044eeb43e704aa57356","observation_id":"1088d775-a680-459d-b613-dcea56bdfff8","resolution":{"observed_at":"2026-08-11T10:44:19.753680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16873","last_updated":"2025-06-02T18:59:01Z","snapshot_observed_at":"2026-08-16T13:59:04.683003Z","submitted_at":"2024-04-21T22:18:13Z","title":"AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16873","snapshot_observed_at":"2026-08-11T10:44:19.758947Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.758947Z"},"links":{"cited_paper":"/paper/2404.16873","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:18a971f1e46268d2b4b1b5f632d3920e8cbe5d2b27bbf7429afb9958d9a7a10e","observation_id":"21a60d1c-2d29-4f65-98de-6082cda87140","resolution":{"observed_at":"2026-08-11T10:44:19.758947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:44:20.434392Z","title":null,"venue":null,"work_id":"d04aa010-0852-4477-8428-018aedb531cf","year":2019},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.764869Z"},"links":{"citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:83021c843b02374df53e6c40c44b8a1483223c1ee7ecc85ba3f08a2e59b4dd4c","observation_id":"82c82a01-9e48-4364-886e-3c912879cc6e","resolution":{"observed_at":"2026-08-11T10:44:20.442274Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03693","last_updated":"2023-10-05T17:12:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-05T17:12:17Z","title":"Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03693","snapshot_observed_at":"2026-08-11T10:44:19.770969Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.770969Z"},"links":{"cited_paper":"/paper/2310.03693","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:b5ff19734f1ea977119fdd590f84e40dffeb23deb23fb2afa3f25108a7efc8c5","observation_id":"792f3373-6ea7-48b1-b82a-480edb7427d1","resolution":{"observed_at":"2026-08-11T10:44:19.770969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:44:20.412119Z","title":null,"venue":null,"work_id":"844f17df-7475-4a67-b826-e27892026a83","year":2024},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.778209Z"},"links":{"citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:4cac264a8c609c9f9e9e136e3f6b4509762ff5c8c5886a1d5d2d097a06923d9f","observation_id":"2ce057e0-4901-4d1d-aec0-b37ff5a5fb82","resolution":{"observed_at":"2026-08-11T10:44:20.418374Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.07125","last_updated":"2021-01-03T19:58:55Z","snapshot_observed_at":"2026-08-21T12:22:11.736132Z","submitted_at":"2019-08-20T01:51:40Z","title":"Universal Adversarial Triggers for Attacking and Analyzing NLP","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.07125","snapshot_observed_at":"2026-08-11T10:44:19.783529Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.783529Z"},"links":{"cited_paper":"/paper/1908.07125","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:6497908cd5d05ca8debfe03881eb659c4db68be6c89acf18d2a77d8ee9ed723e","observation_id":"eba4e0e8-bf05-48fa-a959-cf248d508c2e","resolution":{"observed_at":"2026-08-11T10:44:19.783529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:44:20.390727Z","title":null,"venue":null,"work_id":"904c36c8-83bd-4b90-bccb-e118fdd5a472","year":2024},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.788865Z"},"links":{"citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:7249caa4fd8b15c4c3310680b35a49d852317fef18a5c4194fa1f8821565a35e","observation_id":"38ada602-4900-41a9-9807-c72916032b1e","resolution":{"observed_at":"2026-08-11T10:44:20.396123Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12095","last_updated":"2023-08-29T05:34:25Z","snapshot_observed_at":"2026-08-21T17:46:24.763841Z","submitted_at":"2023-02-22T11:01:20Z","title":"On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspective","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12095","snapshot_observed_at":"2026-08-11T10:44:19.794327Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.794327Z"},"links":{"cited_paper":"/paper/2302.12095","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:9f06f246607c923f514938e13cf2fc68168c2769f619e6117ace364cf5d0d622","observation_id":"feb18855-6d7a-46c4-a474-be4a5f92c13b","resolution":{"observed_at":"2026-08-11T10:44:19.794327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.02960","last_updated":"2025-02-05T07:54:07Z","snapshot_observed_at":"2026-08-11T14:26:02.458624Z","submitted_at":"2025-02-05T07:54:07Z","title":"Large Language Model Adversarial Landscape Through the Lens of Attack Objectives","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.02960","snapshot_observed_at":"2026-08-11T10:44:19.799687Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.799687Z"},"links":{"cited_paper":"/paper/2502.02960","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:6cdb016d3ea875a0c4d0a5e4e632c7c69b824cacc7e5f50525f8224389a2e1f6","observation_id":"0c936b39-9611-4ed6-84b1-1b1f5b4b0bc7","resolution":{"observed_at":"2026-08-11T10:44:19.799687Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-12T17:45:10.384900Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.04295","snapshot_observed_at":"2026-08-11T10:44:19.805763Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.805763Z"},"links":{"cited_paper":"/paper/2407.04295","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:8e950c0c2eb6c7b8a2f07217230cf9068f49312151b7d335b15c45d1063d29d8","observation_id":"d7bf8982-e188-4dc2-a424-ac80756b5b01","resolution":{"observed_at":"2026-08-11T10:44:19.805763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:44:20.367479Z","title":null,"venue":null,"work_id":"26ecc7ea-968f-4196-822d-946d68f61dc6","year":2023},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.810946Z"},"links":{"citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:f5add2d82f961d73aae0fe0ad8850c5fb95cc571589658a78d8e2664bcbb8ce5","observation_id":"f438edb7-b26f-4217-95d9-697edd7e4b3a","resolution":{"observed_at":"2026-08-11T10:44:20.374982Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:44:19.816609Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.816609Z"},"links":{"citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:26520901a0c39a749c638ef2eaa0a5f174fb81a6e1e613b1364504970b2da4dc","observation_id":"bfcb6699-afe3-4573-aed0-581e9806c88c","resolution":{"observed_at":"2026-08-11T10:44:19.816609Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.04528","last_updated":"2024-07-16T07:29:49Z","snapshot_observed_at":"2026-08-18T10:45:11.561476Z","submitted_at":"2023-06-07T15:37:00Z","title":"PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.04528","snapshot_observed_at":"2026-08-11T10:44:19.829310Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.829310Z"},"links":{"cited_paper":"/paper/2306.04528","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:0a85b4ceab01bf1519620eb4ec2b11de3eae0547be573506bfa7794cfc4a4763","observation_id":"af2d1ba5-abfd-4c1d-aaf3-d3201245ef6f","resolution":{"observed_at":"2026-08-11T10:44:19.829310Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.15140","last_updated":"2023-12-14T06:22:51Z","snapshot_observed_at":"2026-08-16T14:49:38.783564Z","submitted_at":"2023-10-23T17:46:07Z","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.15140","snapshot_observed_at":"2026-08-11T10:44:19.835361Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.835361Z"},"links":{"cited_paper":"/paper/2310.15140","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:8e39399fbfb18aadb3f1f0cc7c6c353e01c0839a205da27bf65b39e613113af4","observation_id":"13fc85b4-f8db-420e-9a13-195617f3cc22","resolution":{"observed_at":"2026-08-11T10:44:19.835361Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-11T10:44:19.840925Z","title":"Zico Kolter, and Matt Fredrikson","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.840925Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:d5d755a6a78ea11253c54f7732e0db30bf22c78665fb4f5df62da7d290ead52a","observation_id":"eb4cd759-115e-457f-8302-3edf8ae7b1c0","resolution":{"observed_at":"2026-08-11T10:44:19.840925Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T10:44:19.824065Z","title":"Advances in Neural Information Processing Systems 36 (2023), 46595–46623","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","version":3},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-11T10:44:19.824065Z"},"links":{"citing_paper":"/paper/2412.16359"},"observation_digest":"sha256:542d903a82a5287dbff08bd41a971feeb8728d10483a24776e9628732db4ec8b","observation_id":"1bfadeb6-8459-4318-9093-3c5171416817","resolution":{"observed_at":"2026-08-11T10:44:19.824065Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2412.16359","last_updated":"2025-05-29T05:54:54Z","latest_version":3,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-18T14:54:26.193144Z","submitted_at":"2024-12-20T21:43:52Z","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context"},"reference_resolution":{"displayed":33,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":33,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":33},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"thesis":"As of 23 August 2026, this Paper Citation Record lists 33 of 33 outbound references and 2 inbound Pith citation observations for arXiv:2412.16359."}