{"as_of":"2026-08-19T06:26:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:bdb3d5d6ce558f17374f9b21fad548d879c79cf07a7a6330686b2a12f14ce101","coverage":[{"denominator":40,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":40,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T17:58:57.529279Z","state":"measured"},{"denominator":44,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":44,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T20:41:29.087405Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-29T14:43:31.567700Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.00735","snapshot_observed_at":"2026-08-15T20:41:29.087405Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.12287","last_updated":"2025-05-18T07:51:19Z","snapshot_observed_at":"2026-08-16T15:35:30.606101Z","submitted_at":"2025-05-18T07:51:19Z","title":"The Tower of Babel Revisited: Multilingual Jailbreak Prompts on Closed-Source Large Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T20:41:29.087405Z"},"links":{"cited_paper":"/paper/2502.00735","citing_paper":"/paper/2505.12287"},"observation_digest":"sha256:1714a124780341fc1116d3c680e0d9f601e49c47faa24a84ed5ec813be96bd27","observation_id":"1711b8f6-bada-4f8d-a3f8-99f901ada3e7","resolution":{"observed_at":"2026-08-15T20:41:29.087405Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.00735","snapshot_observed_at":"2026-08-06T17:09:20.679512Z","title":"From compliance to exploitation: Jailbreak prompt attacks on multimodal llms","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.11968","last_updated":"2025-07-16T07:02:15Z","snapshot_observed_at":"2026-08-14T05:17:39.127422Z","submitted_at":"2025-07-16T07:02:15Z","title":"Watch, Listen, Understand, Mislead: Tri-modal Adversarial Attacks on Short Videos for Content Appropriateness Evaluation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T17:09:20.679512Z"},"links":{"cited_paper":"/paper/2502.00735","citing_paper":"/paper/2507.11968"},"observation_digest":"sha256:beaac82c2998bbff63797d54dd4207e68e3a8a8ed976787d5f559267b038c2e1","observation_id":"291eba03-f8ca-4e32-8383-290a1468cd14","resolution":{"observed_at":"2026-08-06T17:09:20.679512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"cited_work":{"arxiv_id":"2502.00735","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.00735","snapshot_observed_at":"2026-06-29T14:43:31.567700Z","title":"W., Huang, L., Li, B., Chen, H., and Choo, K.-K","venue":null,"work_id":"71162a31-30d8-41a0-8cd5-02cea3d0a934","year":2025},"citing_paper":{"arxiv_id":"2605.18168","last_updated":"2026-05-18T10:10:31Z","snapshot_observed_at":"2026-08-16T06:25:22.511388Z","submitted_at":"2026-05-18T10:10:31Z","title":"Acoustic Interference: A New Paradigm Weaponizing Acoustic Latent Semantic for Universal Jailbreak against Large Audio Language Models","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-05-20T09:48:43.319804Z"},"links":{"cited_paper":"/paper/2502.00735","citing_paper":"/paper/2605.18168"},"observation_digest":"sha256:9e8b2b106f7670c328d85062cfb2e29a46cf7348f0dbb459f2b5145d53a8e0c1","observation_id":"7bc98f7c-764d-424f-8e98-d2ccf7a45348","resolution":{"observed_at":"2026-05-20T09:53:15.966329Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"cited_work":{"arxiv_id":"2502.00735","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.00735","snapshot_observed_at":"2026-06-29T14:43:31.567700Z","title":"W., Huang, L., Li, B., Chen, H., and Choo, K.-K","venue":null,"work_id":"71162a31-30d8-41a0-8cd5-02cea3d0a934","year":2025},"citing_paper":{"arxiv_id":"2605.30650","last_updated":"2026-05-28T23:10:04Z","snapshot_observed_at":"2026-08-15T00:01:04.240795Z","submitted_at":"2026-05-28T23:10:04Z","title":"When AI Meets Wall Street: A Survey on Trustworthy AI in Fintech","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-29T06:17:07.660975Z"},"links":{"cited_paper":"/paper/2502.00735","citing_paper":"/paper/2605.30650"},"observation_digest":"sha256:ab60b3176086113cf9743d2aa2278a71cb8cf6baad10e35058cb52d4922bd35f","observation_id":"b773166f-a197-4882-8c48-e69f3c4b896c","resolution":{"observed_at":"2026-06-29T14:43:31.569181Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2502.00735/citation-record","integrity":"/paper/2502.00735/integrity","json":"/paper/2502.00735/citation-record.json","paper":"/paper/2502.00735"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:58:57.351897Z","title":"Not what you’ve signed up for: Compromising real-world llm- integrated applications with indirect prompt injection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.351897Z"},"links":{"citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:da1964ebe9014d08181f4aa9b578061db1427f44c8a78d7cb62e1c1255b5c86f","observation_id":"d7d255e1-b7c6-47e3-a5bb-15166cecbbf4","resolution":{"observed_at":"2026-08-09T17:58:57.351897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:58:58.148883Z","title":"Jailbroken: How does llm safety training fail?","venue":null,"work_id":"cae58545-146c-45e3-9a2a-80817229d78b","year":2024},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.357131Z"},"links":{"citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:4b29e70e41e5a7585258f847c0621c40025344bdd4a499ef8c87924cf2427a5b","observation_id":"81e72bce-80c3-4e5e-b9a4-2ab5575078c1","resolution":{"observed_at":"2026-08-09T17:58:58.153622Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13457","last_updated":"2024-05-17T05:00:24Z","snapshot_observed_at":"2026-08-16T14:16:46.139055Z","submitted_at":"2024-02-21T01:26:39Z","title":"A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13457","snapshot_observed_at":"2026-08-09T17:58:57.361973Z","title":"Llm jailbreak at- tack versus defense techniques–a comprehensive study,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.361973Z"},"links":{"cited_paper":"/paper/2402.13457","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:6a9e14cd01a38f129fc6cd690aef063704734ae7f4901a45e14a220416ff9305","observation_id":"5028a698-6630-4eff-907b-08d67c8a250f","resolution":{"observed_at":"2026-08-09T17:58:57.361973Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10844","last_updated":"2023-10-16T21:37:24Z","snapshot_observed_at":"2026-08-18T18:53:04.197145Z","submitted_at":"2023-10-16T21:37:24Z","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10844","snapshot_observed_at":"2026-08-09T17:58:57.366800Z","title":"Survey of vulnerabilities in large language models revealed by adversarial attacks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.366800Z"},"links":{"cited_paper":"/paper/2310.10844","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:0570e2992b041f1d6257c77cfa80193ceab4e02c24e658acdbaa723ccc2a3d64","observation_id":"e34b13c3-19a3-4d5e-8853-4d3a75b4b9b5","resolution":{"observed_at":"2026-08-09T17:58:57.366800Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:58:58.133648Z","title":"”do anything now","venue":null,"work_id":"a3d11cf8-b2cf-4f1f-b365-ae4480b8bd61","year":2024},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.371911Z"},"links":{"citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:88cc0b1914d75094f9506304dcffac8973c0e2469d30decb91c76e033b8aa59e","observation_id":"bd30f9b1-4dd5-49fc-8345-5bb2b35b6e25","resolution":{"observed_at":"2026-08-09T17:58:58.138745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17336","last_updated":"2024-09-30T21:25:23Z","snapshot_observed_at":"2026-08-16T23:58:31.409857Z","submitted_at":"2024-03-26T02:47:42Z","title":"Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.17336","snapshot_observed_at":"2026-08-09T17:58:57.376374Z","title":"Don’t listen to me: Understanding and exploring jailbreak prompts of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.376374Z"},"links":{"cited_paper":"/paper/2403.17336","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:417128d317353e1e10857f5facb1c2446fb7cc7bc307d9f844f69ac638dfa7a0","observation_id":"3a95f555-62dc-410a-a983-8c5710fda03a","resolution":{"observed_at":"2026-08-09T17:58:57.376374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09091","last_updated":"2024-02-16T10:24:04Z","snapshot_observed_at":"2026-08-16T14:18:41.809718Z","submitted_at":"2024-02-14T11:11:51Z","title":"Play Guessing Game with LLM: Indirect Jailbreak Attack with Implicit Clues","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09091","snapshot_observed_at":"2026-08-09T17:58:57.381697Z","title":"Play guessing game with llm: Indirect jailbreak attack with implicit clues,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.381697Z"},"links":{"cited_paper":"/paper/2402.09091","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:f633abda72f2b319522827c716af55c745d9937e3178aab55150b9079bd25083","observation_id":"80559eed-b0a8-489c-916f-eaaa61c4bd8e","resolution":{"observed_at":"2026-08-09T17:58:57.381697Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05668","last_updated":"2025-05-26T12:56:04Z","snapshot_observed_at":"2026-08-18T10:26:02.157762Z","submitted_at":"2024-02-08T13:42:50Z","title":"JailbreakRadar: Comprehensive Assessment of Jailbreak Attacks Against LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05668","snapshot_observed_at":"2026-08-09T17:58:57.386330Z","title":"Com- prehensive assessment of jailbreak attacks against llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.386330Z"},"links":{"cited_paper":"/paper/2402.05668","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:1eaf8cb48950bf9799ed69d731c2a24b66a23f1767b407f05e5b29e6011f850c","observation_id":"ad14ebdb-9b0c-4c75-b80e-3e40e95e8143","resolution":{"observed_at":"2026-08-09T17:58:57.386330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07242","last_updated":"2024-04-09T18:29:42Z","snapshot_observed_at":"2026-08-16T14:02:17.266379Z","submitted_at":"2024-04-09T18:29:42Z","title":"Sandwich attack: Multi-language Mixture Adaptive Attack on LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07242","snapshot_observed_at":"2026-08-09T17:58:57.390939Z","title":"Sandwich attack: Multi-language mixture adaptive attack on llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.390939Z"},"links":{"cited_paper":"/paper/2404.07242","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:2a893475d96155b9d3bfc4f66407b3d5be65b8cca5361a62269d09401701932a","observation_id":"3b5c26c1-e98b-4820-b20e-e96b64ed135c","resolution":{"observed_at":"2026-08-09T17:58:57.390939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:58:58.119069Z","title":"Pleak: Prompt leaking attacks against large language model applications,","venue":null,"work_id":"9004bfa9-9df5-4fdb-917a-5bded0733d32","year":2024},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.395472Z"},"links":{"citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:f5d84f64e480b43b8e85061f52840475699175f7229fb883bcf2305a3866dfd4","observation_id":"16b0e55e-dac4-40c1-a508-0e77e5cc6ccf","resolution":{"observed_at":"2026-08-09T17:58:58.123827Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-08-15T14:02:47.366139Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-09T17:58:57.400082Z","title":"Gpt-4o system card,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.400082Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:29693910e5a6a0dfb813b05b620e37126ca1859fc6c1665f80288bf59aecb01d","observation_id":"60141f2f-b40d-4b8d-9373-38dc8cc7cae8","resolution":{"observed_at":"2026-08-09T17:58:57.400082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.11805","last_updated":"2025-05-09T21:04:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-19T02:39:27Z","title":"Gemini: A Family of Highly Capable Multimodal Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.11805","snapshot_observed_at":"2026-08-09T17:58:57.404581Z","title":"Gemini: a family of highly capable multimodal models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.404581Z"},"links":{"cited_paper":"/paper/2312.11805","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:da8f82f70491129136228fa11f75232956f74047f6a91da6fc15aab5686fbec9","observation_id":"e0a4bf92-6ff3-4bf0-b947-ffce97a94ff2","resolution":{"observed_at":"2026-08-09T17:58:57.404581Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-15T23:29:53.216494Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.09259","snapshot_observed_at":"2026-08-09T17:58:57.409109Z","title":"Jailbreak attacks and defenses against multimodal generative models: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.409109Z"},"links":{"cited_paper":"/paper/2411.09259","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:9a4ad499b716eba0e6e9b62ee2a1530f99cf9ea67d82032b67e41fbf6e30f26c","observation_id":"cb6336ee-e3cc-4656-a4ba-15764670ad3f","resolution":{"observed_at":"2026-08-09T17:58:57.409109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-08-17T12:09:34.664961Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-09T17:58:57.413578Z","title":"V oice jailbreak attacks against gpt-4o,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.413578Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:cfffdeacc8bfe213cd5519382ac9550a1e9f6b3c6f99d4587f30bd740e504a69","observation_id":"42aa56a1-c8a2-4a37-a55d-2b4d3eeb9df5","resolution":{"observed_at":"2026-08-09T17:58:57.413578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:58:57.417903Z","title":"Image-based multimodal models as intruders: Trans- ferable multimodal attacks on video-based mllms,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.417903Z"},"links":{"citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:08a451b478594afa3f8c0ae4f1a5dfdc0fcdf50eafa48475fe77cc82e1ae0ad0","observation_id":"a40ae050-683c-4042-a448-752bf6eadd6e","resolution":{"observed_at":"2026-08-09T17:58:57.417903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:58:58.104000Z","title":"Generative AI vs. LLMs: What’s the Differ- ence? — Kovaion — kovaion.com,","venue":null,"work_id":"860f0534-5f68-41b5-92de-fb57a0264f78","year":2024},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.422255Z"},"links":{"citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:c740232b5551bd5340bb4039d48688b128f6fe503987603563909883ee81d874","observation_id":"32207719-e170-414d-8744-180edae9a108","resolution":{"observed_at":"2026-08-09T17:58:58.109061Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-17T09:58:46.058102Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-09T17:58:57.426488Z","title":"Gpt-4 technical report,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.426488Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:f977f30488a89ded8238132e6de96b5e7de9099aebe0435dced5f8c8dd153d19","observation_id":"8d5ad40e-a273-4d0f-98e0-d8b7408cadd5","resolution":{"observed_at":"2026-08-09T17:58:57.426488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-09T17:58:57.430720Z","title":"Llama 2: Open foundation and fine-tuned chat models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.430720Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:4a523fa65bf7b0f60f50e6ea82728d033ddd8d5a7256906379272a418f070f04","observation_id":"b81c112f-9f56-464c-9bf7-7916307ecbc1","resolution":{"observed_at":"2026-08-09T17:58:57.430720Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:58:58.089333Z","title":"Generative adversarial user model for reinforcement learning based recommendation system,","venue":null,"work_id":"54cac470-a282-4ed9-bd99-d9c67b8a486e","year":2019},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.435644Z"},"links":{"citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:11d008ebede585ad7906b28f304c960b42a2332427f97ba72958eddfebf974cb","observation_id":"f0723876-7a3b-45fd-8026-97652971a4c0","resolution":{"observed_at":"2026-08-09T17:58:58.094067Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10719","last_updated":"2023-07-20T09:25:02Z","snapshot_observed_at":"2026-08-16T15:14:44.715078Z","submitted_at":"2023-07-20T09:25:02Z","title":"LLM Censorship: A Machine Learning Challenge or a Computer Security Problem?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10719","snapshot_observed_at":"2026-08-09T17:58:57.440037Z","title":"Llm censorship: A machine learning challenge or a computer security prob- lem?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.440037Z"},"links":{"cited_paper":"/paper/2307.10719","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:b1607f8eefca40e6ee853159f2fefc9e0b62b4bfc875941a6957677572f593d6","observation_id":"88d160dd-3aaf-451e-ba76-d703f97201c7","resolution":{"observed_at":"2026-08-09T17:58:57.440037Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06987","last_updated":"2023-10-10T20:15:54Z","snapshot_observed_at":"2026-08-15T18:47:46.763989Z","submitted_at":"2023-10-10T20:15:54Z","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06987","snapshot_observed_at":"2026-08-09T17:58:57.444491Z","title":"Catastrophic jailbreak of open-source llms via exploiting generation,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.444491Z"},"links":{"cited_paper":"/paper/2310.06987","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:f1c6b96b156ef6059264261fb2231374c5b659488c8ae4351e75d17d2c54b3ce","observation_id":"969180b8-45fc-423c-8180-1ad3be0adfdd","resolution":{"observed_at":"2026-08-09T17:58:57.444491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01833","last_updated":"2025-02-26T13:41:41Z","snapshot_observed_at":"2026-08-13T05:33:18.631487Z","submitted_at":"2024-04-02T10:45:49Z","title":"Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01833","snapshot_observed_at":"2026-08-09T17:58:57.448870Z","title":"Great, now write an article about that: The crescendo multi-turn llm jailbreak attack,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.448870Z"},"links":{"cited_paper":"/paper/2404.01833","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:4e11649901fe00cf4c3b8e42ddcea817ccf3d44d0b2c8e33e97a7cfdb1ea20f3","observation_id":"a0be7cd6-8959-4553-94f0-4904e5a278dd","resolution":{"observed_at":"2026-08-09T17:58:57.448870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.05862","last_updated":"2022-04-12T15:02:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-12T15:02:38Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.05862","snapshot_observed_at":"2026-08-09T17:58:57.453228Z","title":"Training a helpful and harmless assistant with reinforcement learning from human feedback,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.453228Z"},"links":{"cited_paper":"/paper/2204.05862","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:881c8f18477381dc3c7e10172889e8f318817450858dcbee807a25229079ede1","observation_id":"f965f748-54b7-40cf-97f5-2c22dbb9b1d7","resolution":{"observed_at":"2026-08-09T17:58:57.453228Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:58:57.457904Z","title":"Large lan- guage models are zero-shot reasoners,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.457904Z"},"links":{"citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:28cb841118b9ac22c074d1d937211fadea795828c4a0b9955a0097e883b46abd","observation_id":"b28a8d96-22ea-457e-a7e2-cc0939201c00","resolution":{"observed_at":"2026-08-09T17:58:57.457904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11797","last_updated":"2023-11-20T14:30:55Z","snapshot_observed_at":"2026-08-18T02:04:11.424646Z","submitted_at":"2023-11-20T14:30:55Z","title":"Igniting Language Intelligence: The Hitchhiker's Guide From Chain-of-Thought Reasoning to Language Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.11797","snapshot_observed_at":"2026-08-09T17:58:57.462329Z","title":"Igniting language intelligence: The hitchhiker’s guide from chain-of-thought reasoning to language agents,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.462329Z"},"links":{"cited_paper":"/paper/2311.11797","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:5ed3ffb709775620e526b36019dc8b4ecc49509ad7dae3b0566de3da34f8b1a9","observation_id":"22c49dda-5037-4e92-b97d-ed531ed6639c","resolution":{"observed_at":"2026-08-09T17:58:57.462329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.16504","last_updated":"2023-05-25T22:10:20Z","snapshot_observed_at":"2026-08-16T15:29:32.108538Z","submitted_at":"2023-05-25T22:10:20Z","title":"On the Tool Manipulation Capability of Open-source Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.16504","snapshot_observed_at":"2026-08-09T17:58:57.467117Z","title":"On the tool manipulation capability of open-source large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.467117Z"},"links":{"cited_paper":"/paper/2305.16504","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:8e2e82c5fe49facfeb6cb5a1b343eacdefb5f7aa3101a4230c6e4e428dc2a724","observation_id":"846f67e8-7398-436f-8935-d577077775e1","resolution":{"observed_at":"2026-08-09T17:58:57.467117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.15259","last_updated":"2023-05-09T10:24:28Z","snapshot_observed_at":"2026-08-19T05:42:38.065382Z","submitted_at":"2022-09-30T06:36:49Z","title":"On the Impossible Safety of Large AI Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.15259","snapshot_observed_at":"2026-08-09T17:58:57.471908Z","title":"On the impossible safety of large ai models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.471908Z"},"links":{"cited_paper":"/paper/2209.15259","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:a1e29f58849e383f5325db29a71620398094ff96d6315042a83d6fa56cb60395","observation_id":"1920c3fb-64cd-48e4-be5a-35131b0b3dc2","resolution":{"observed_at":"2026-08-09T17:58:57.471908Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-19T05:35:28.049271Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-09T17:58:57.476357Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.476357Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:d84f8cfa1d9ad7545438ce8decfac4b13448b76c824440284e755ebf943faef4","observation_id":"2483c2d0-831d-4431-9814-9d42bcd3e5df","resolution":{"observed_at":"2026-08-09T17:58:57.476357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:58:57.480925Z","title":"Imagebind: One embedding space to bind them all,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.480925Z"},"links":{"citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:a17f5f1f4b9990b5e0dcd63d0cc26e90be4aed631df2229ea7d361458a67cdc6","observation_id":"3dbc665f-1bdd-4b6d-a046-7d028940df87","resolution":{"observed_at":"2026-08-09T17:58:57.480925Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.10480","last_updated":"2021-03-18T18:56:51Z","snapshot_observed_at":"2026-08-16T18:37:54.226322Z","submitted_at":"2021-03-18T18:56:51Z","title":"Reading Isn't Believing: Adversarial Attacks On Multi-Modal Neurons","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.10480","snapshot_observed_at":"2026-08-09T17:58:57.485048Z","title":"Reading isn’t believing: Adversarial attacks on multi-modal neurons,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.485048Z"},"links":{"cited_paper":"/paper/2103.10480","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:cdb4f9e63530c590943d98c026548543200d3fc839d6c8f58d67976f9c3a9cca","observation_id":"9ff88ea8-82ce-4d91-a02c-06b4cd04a62b","resolution":{"observed_at":"2026-08-09T17:58:57.485048Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:58:57.489558Z","title":"Learning transferable visual models from natural language supervision,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.489558Z"},"links":{"citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:3c9bfdeac678fc55cdecd4ce7b4f38fb4f0d708000be9ce134a8821a0fb6554d","observation_id":"e93518aa-813c-4db9-92cc-b66e848a3b34","resolution":{"observed_at":"2026-08-09T17:58:57.489558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.17107","last_updated":"2024-02-02T19:44:14Z","snapshot_observed_at":"2026-08-17T21:31:00.017761Z","submitted_at":"2023-06-29T17:08:16Z","title":"LLaVAR: Enhanced Visual Instruction Tuning for Text-Rich Image Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.17107","snapshot_observed_at":"2026-08-09T17:58:57.493585Z","title":"Llavar: Enhanced visual instruction tuning for text-rich image under- standing,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.493585Z"},"links":{"cited_paper":"/paper/2306.17107","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:e0a5fdffaf819d1d44a8206e19561dbf5dd842006ee4b7f74b21c9b650cfac5b","observation_id":"529a65a7-b01c-4a52-a470-69a8269c1b7d","resolution":{"observed_at":"2026-08-09T17:58:57.493585Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.14539","last_updated":"2023-10-10T22:17:17Z","snapshot_observed_at":"2026-08-16T15:12:59.003865Z","submitted_at":"2023-07-26T23:11:15Z","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.14539","snapshot_observed_at":"2026-08-09T17:58:57.498068Z","title":"Plug and pray: Exploit- ing off-the-shelf components of multi-modal models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.498068Z"},"links":{"cited_paper":"/paper/2307.14539","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:4a6bb2b8929a9981f3d468c4e3d62cff63f537d18588f8cfd468852f5a39c9a8","observation_id":"a95131dd-f77e-4bf6-8de5-0cda8bffb5ae","resolution":{"observed_at":"2026-08-09T17:58:57.498068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.05608","last_updated":"2025-01-19T16:23:38Z","snapshot_observed_at":"2026-08-18T12:18:02.474208Z","submitted_at":"2023-11-09T18:59:11Z","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.05608","snapshot_observed_at":"2026-08-09T17:58:57.502267Z","title":"Figstep: Jailbreaking large vision-language models via typographic visual prompts,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.502267Z"},"links":{"cited_paper":"/paper/2311.05608","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:361cf51a2ad31c2307a37ac268594012f3f95afacc033bac7ffa62494df258e1","observation_id":"06db8f48-9059-46fa-bec0-a95bce650ee8","resolution":{"observed_at":"2026-08-09T17:58:57.502267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:58:58.046790Z","title":"Gemini policy guidelines,","venue":null,"work_id":"f62044fa-0cb9-41f4-b3b4-38c983bded21","year":null},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.506767Z"},"links":{"citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:426cb0946ec66bc74063d9e227e5890d656eebeba8ad068530af2053bee2e1cf","observation_id":"c0a763fb-3181-4270-9f8a-1c06df9817cc","resolution":{"observed_at":"2026-08-09T17:58:58.051230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.01319","last_updated":"2024-08-02T15:14:53Z","snapshot_observed_at":"2026-08-18T08:19:52.524143Z","submitted_at":"2024-08-02T15:14:53Z","title":"A Comprehensive Review of Multimodal Large Language Models: Performance and Challenges Across Different Tasks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.01319","snapshot_observed_at":"2026-08-09T17:58:57.510956Z","title":"A comprehensive review of multimodal large language models: Performance and challenges across different tasks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.510956Z"},"links":{"cited_paper":"/paper/2408.01319","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:c53fbfb20d83b2d63052a25165ab484a07ccca19f982c3ba2edffaaa755827ca","observation_id":"279bba0f-3198-404f-ac63-4918ea8eea9d","resolution":{"observed_at":"2026-08-09T17:58:57.510956Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","snapshot_observed_at":"2026-08-16T14:30:44.183234Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.00287","snapshot_observed_at":"2026-08-09T17:58:57.515461Z","title":"The art of defending: A systematic evaluation and analysis of llm defense strategies on safety and over-defensiveness,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.515461Z"},"links":{"cited_paper":"/paper/2401.00287","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:47d1c899654e5c0de2cebe19079cdd62fa450f6e8e72d381c00c45cdc2d88f10","observation_id":"4adf32af-18be-409b-94e6-c2ae08f883d5","resolution":{"observed_at":"2026-08-09T17:58:57.515461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06010","last_updated":"2024-01-04T19:27:50Z","snapshot_observed_at":"2026-08-16T14:36:04.752641Z","submitted_at":"2023-12-10T21:51:13Z","title":"A Practical Survey on Emerging Threats from AI-driven Voice Attacks: How Vulnerable are Commercial Voice Control Systems?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06010","snapshot_observed_at":"2026-08-09T17:58:57.520120Z","title":"A practical survey on emerging threats from ai-driven voice attacks: How vulnerable are commercial voice control systems?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.520120Z"},"links":{"cited_paper":"/paper/2312.06010","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:6ca04c1607ff08d38995e10cf09ccf1869d04768b7748a081d3a9485f99b657a","observation_id":"b34be785-8b6a-4060-a67a-d0ed689d1ed5","resolution":{"observed_at":"2026-08-09T17:58:57.520120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.13345","last_updated":"2023-10-20T08:16:46Z","snapshot_observed_at":"2026-08-16T14:50:27.710091Z","submitted_at":"2023-10-20T08:16:46Z","title":"An LLM can Fool Itself: A Prompt-Based Adversarial Attack","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.13345","snapshot_observed_at":"2026-08-09T17:58:57.524743Z","title":"An llm can fool itself: A prompt-based adversarial attack,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.524743Z"},"links":{"cited_paper":"/paper/2310.13345","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:8db9b392e948a7c31227850e6a9c95b7d3447673fed4d6770c86cd8255d9f6e8","observation_id":"a89f0c1a-ecb1-4615-8f87-640891669099","resolution":{"observed_at":"2026-08-09T17:58:57.524743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T17:58:58.029927Z","title":"2) Generating content for scams, phishing, or other deceptive activities","venue":null,"work_id":"09d543fa-068c-4c2e-a832-04e186797798","year":null},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.529279Z"},"links":{"citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:fc89f3d6e7cf8475b698750bdd57daa6d20951f49e0f1b8a69da6539c5fff449","observation_id":"b0c04688-8ef9-4044-b58b-ff1ba0b85e46","resolution":{"observed_at":"2026-08-09T17:58:58.036654Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs"},"reference_resolution":{"displayed":40,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":33,"verified_exact":0,"verified_fuzzy":7},"total_outbound_references":40},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 40 of 40 outbound references and 4 inbound Pith citation observations for arXiv:2502.00735."}