Pith. sign in

Paper Citation Record · LEDGER

Jailbreaking to Jailbreak

As of 10 August 2026, this Paper Citation Record lists 69 of 69 outbound references and 5 inbound Pith citation observations for arXiv:2502.09638.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2502.09638 v2

Coverage vector

measured 69 of 69 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-08T17:02:47.603293Z

measured 74 of 74 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 5 of 5 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-09T14:49:08.752796Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-05T15:54:07.274631Z

Reference resolution

69 of 69 outbound references displayed

  • verified exact0
  • verified fuzzy16
  • unresolved53
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 872a205f-f53c-4d7f-b6d5-9148643cd3c7 · outbound

This paper cites Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks.

Jailbreaking to Jailbreak Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.167574Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.167574Z digest=sha256:ca3867cb156dcb7ed6633e5e71955cac9cd25caceab76b672d7990ea30f73dad

Observation 7fa9ab04-a0c9-4899-a175-36c82f127487 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 2

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:49.176664Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.173319Z digest=sha256:ab19fd1f92cbcc87bb5f4e2199be3afdfdabec7643d70e71f2fce20def940b43

Observation 4dbc8888-d81a-4846-a9d2-550e60a1e7cb · outbound

This paper cites URLhttps://www.anthropic.com/news/claude-3-7-sonnet.

Jailbreaking to Jailbreak URLhttps://www.anthropic.com/news/claude-3-7-sonnet

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.163195Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.178244Z digest=sha256:1f85a865fb881e07b403d3084460dbfe227d5d1804424cdfb139c0e4fa9fa408

Observation e1a5ca4e-174e-47a9-be51-5a2103458d94 · outbound

This paper cites Introducing claude 3.5 sonnet, 2024.

Jailbreaking to Jailbreak Introducing claude 3.5 sonnet, 2024

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.149297Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.182548Z digest=sha256:9bb793c6fea1f5db9322296237a05f07dc766e757572721b8760ec62fa892f58

Observation 03517156-c002-4677-9524-5201bf495742 · outbound

This paper cites Arditi and bilalchughtai.

Jailbreaking to Jailbreak Arditi and bilalchughtai

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.135463Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.186838Z digest=sha256:f5d24c7b8e053a8d5331c64b8f934da0456ededafc75e25d52cfe90e5ab073db

Observation a4734107-708b-4e3f-82db-667a55dda190 · outbound

This paper cites Refusal in Language Models Is Mediated by a Single Direction.

Jailbreaking to Jailbreak Refusal in Language Models Is Mediated by a Single Direction

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.191497Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.191497Z digest=sha256:8af8ba4ba7bf741509835720743d0190955cf7f9098f7889b84d8e62ee74dd7e

Observation 2b1b7a8a-c76d-4627-961e-6017443a229b · outbound

This paper cites Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning.

Jailbreaking to Jailbreak Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.195821Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.195821Z digest=sha256:8a3a4522a55efe49e213fa65f99aa890175b37a2365f9d7450bbec1740b127a0

Observation eae342ee-b59e-44d1-a0f7-8b2bed262602 · outbound

This paper cites Bourtoule, V.

Jailbreaking to Jailbreak Bourtoule, V

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.200718Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.200718Z digest=sha256:fa21d44a6c75d82911bc256cb4dd8a033bfab8cc9610717f1e7b11b77f12a070

Observation 9f4dc883-d16a-4afa-98fc-9a0c4a293873 · outbound

This paper cites Cao and J.

Jailbreaking to Jailbreak Cao and J

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.110816Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.204772Z digest=sha256:cde1347ed74eb43d53c296058a1e5810d638d86524ef1db0a9519e3b3c04a894

Observation c2dc83aa-689e-41e5-8127-bf4046b52290 · outbound

This paper cites Explore, Establish, Exploit: Red Teaming Language Models from Scratch.

Jailbreaking to Jailbreak Explore, Establish, Exploit: Red Teaming Language Models from Scratch

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.208623Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.208623Z digest=sha256:79440d7785f47925811c59ba353f2964ba42b523b6c784266d1cf019849b44df

Observation 209cc664-232d-467c-a585-3bd029a4990b · outbound

This paper cites Jailbreaking Black Box Large Language Models in Twenty Queries.

Jailbreaking to Jailbreak Jailbreaking Black Box Large Language Models in Twenty Queries

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.213338Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.213338Z digest=sha256:0e08697038387d0f17b49760220105e187fcdb6ec3c8c14a9434954f9d60d56d

Observation 844e8870-182e-48ae-a595-cbff02b430e4 · outbound

This paper cites Deepmind.

Jailbreaking to Jailbreak Deepmind

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.096529Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.218073Z digest=sha256:37824e234750a7c7947f4909be20f11514e4992a05a7ff1b3dff8998b076223f

Observation 7e4202ad-eacb-4263-a0dc-20767ff07468 · outbound

This paper cites A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily.

Jailbreaking to Jailbreak A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.222372Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.222372Z digest=sha256:fca7eeddd959265e6211097baee03c770113d44f031eb472b297712caa88aa09

Observation 4f1f5435-9257-4719-b770-3521efb562b6 · outbound

This paper cites MART: Improving LLM Safety with Multi-round Automatic Red-Teaming.

Jailbreaking to Jailbreak MART: Improving LLM Safety with Multi-round Automatic Red-Teaming

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.226707Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.226707Z digest=sha256:c15c345acd3fb9f77df1d7d8062b1cac65d6e6a2b116a3d17502dd2461bf3009

Observation 6103a62e-415d-4690-8644-3415808a6622 · outbound

This paper cites Explaining and Harnessing Adversarial Examples.

Jailbreaking to Jailbreak Explaining and Harnessing Adversarial Examples

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.230764Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.230764Z digest=sha256:a14b0486d4f2e035cf37776c93bf985b122591543c067adb8ee0d745f564c026

Observation e154067d-309d-4c49-a42f-8f98b0a9c72f · outbound

This paper cites Gemini: A family of highly capable multimodal models, 2024.

Jailbreaking to Jailbreak Gemini: A family of highly capable multimodal models, 2024

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.083562Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.235393Z digest=sha256:a919c74f8485065c1a1c4fde00c8ab438d46400954b14b150a6b64ac6ae05fdc

Observation 5c3637a1-859d-477e-a0ed-766e8662ea95 · outbound

This paper cites Endless Jailbreaks with Bijection Learning.

Jailbreaking to Jailbreak Endless Jailbreaks with Bijection Learning

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.239382Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.239382Z digest=sha256:8cfe3bdf48a30f6c8a53b7ba308f23a3c991da8e7dab37890dcfb60ae70d76de

Observation 85ec56fe-01e7-40cf-b3fe-6caa0440d7be · outbound

This paper cites Best-of-N Jailbreaking.

Jailbreaking to Jailbreak Best-of-N Jailbreaking

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.243677Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.243677Z digest=sha256:3bd8540180641e1decd652a03829a789b2fc5ed9124a8c226984b0c390b3c1d1

Observation 4b99b96c-aed5-42da-b8ce-8734c72c0023 · outbound

This paper cites BABILong: Testing the Limits of LLMs with Long Context Reasoning-in-a-Haystack.

Jailbreaking to Jailbreak BABILong: Testing the Limits of LLMs with Long Context Reasoning-in-a-Haystack

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.248308Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.248308Z digest=sha256:4acc6f43fa9e12249654e4c72667c0226be643da011c92772d26007d897564a6

Observation 001670e7-7c84-4315-bf67-bd245bd8a832 · outbound

This paper cites LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70B.

Jailbreaking to Jailbreak LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70B

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.267212Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.267212Z digest=sha256:622f1bc856e040590ed83a0ec65c409e07a6b7a2b6240a0a285e7274026b0724

Observation e498973f-982f-4427-82d7-4087f05a47f0 · outbound

This paper cites LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet.

Jailbreaking to Jailbreak LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.290970Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.290970Z digest=sha256:a4bfd18d1b9022ad3721a96b6365ad625ab91c6e0ef1c813441729e228d9b733

Observation 4d4e0c77-e59c-4a38-a538-eaa076154065 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 22

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:49.069972Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.311524Z digest=sha256:dfe111a76a0c54f966594d1ae9aac0e8398e170da29942d2ea4f1901c4d04ef9

Observation 71bdac96-bc6e-4d9d-bea3-d74858ee465a · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 23

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:49.055720Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.325791Z digest=sha256:689623a2233d951eb22054bc1c57c947efba8ea4cc89612941ff7236f171c957

Observation 58197cf4-a898-48e8-a7ed-4b90456f2831 · outbound

This paper cites DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers.

Jailbreaking to Jailbreak DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.346647Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.346647Z digest=sha256:005d56fab52125f1c1edecce1fea3b00060c035f3d15de0c21e3b1f7a25aba62

Observation fc6315ad-181d-4567-bfdb-2d25cebde0de · outbound

This paper cites Large Language Model Unlearning via Embedding-Corrupted Prompts.

Jailbreaking to Jailbreak Large Language Model Unlearning via Embedding-Corrupted Prompts

Reference 25

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.359639Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.359639Z digest=sha256:7595e08fe8d81c89e76feed0eb03f8c40a0e0a687e3250397e9eae957045aefd

Observation 5c47f858-2e88-4a68-b590-b4f29b3a307a · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 26

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:49.026893Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.364557Z digest=sha256:cd473a6ff477a8d895039bc6a0df08f56559cf28eac7fbef344f3466d9447790

Observation 8f289f81-6415-4c76-ac41-b6646733fdb0 · outbound

This paper cites Towards Deep Learning Models Resistant to Adversarial Attacks.

Jailbreaking to Jailbreak Towards Deep Learning Models Resistant to Adversarial Attacks

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.368929Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.368929Z digest=sha256:790a9f190d875184952509acb23480fa3d0ff078451783a8a136e3ed484b523a

Observation 22599c35-a6bf-4219-88ca-29a423af130d · outbound

This paper cites Black Box Adversarial Prompting for Foundation Models.

Jailbreaking to Jailbreak Black Box Adversarial Prompting for Foundation Models

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.373931Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.373931Z digest=sha256:ff0ff26223f3d062ad91b01f2fbdea9d19ee7320d2c12a2cc51856df3291a96a

Observation 2c3966e2-5b82-495a-8d3d-6556d92dffb1 · outbound

This paper cites Mazeika, L.

Jailbreaking to Jailbreak Mazeika, L

Reference 29

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.378428Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.378428Z digest=sha256:b54dd29f08e26c7224ace478bff27597bb3727135c599fb423c7a788b1400b41

Observation 96c8c82d-5a09-4c84-9ae3-7bdfe7f39c60 · outbound

This paper cites Mehrotra, M.

Jailbreaking to Jailbreak Mehrotra, M

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.922542Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.382650Z digest=sha256:6a2bd54b6831557a3c97200b0f6b2cba368508a241ed060aac6aab76065862b3

Observation 3722c051-6c0e-4afb-a2b1-ce735ae71c5f · outbound

This paper cites URL https://cdn.openai.com/pdf/2221c875-02dc-4789-800b-e7758f3722c1/ o3-and-o4-mini-system-card.pdf.

Jailbreaking to Jailbreak URL https://cdn.openai.com/pdf/2221c875-02dc-4789-800b-e7758f3722c1/ o3-and-o4-mini-system-card.pdf

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.820618Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.386901Z digest=sha256:537f6b2dda6ce478656c67f18baa854b8ad5e59afdc2695b5c2ba34c690218f7

Observation cad48cf6-cad4-42a6-b03f-be70ea329088 · outbound

This paper cites Gpt-4 technical report, 2023.

Jailbreaking to Jailbreak Gpt-4 technical report, 2023

Reference 32

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.394550Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.394550Z digest=sha256:dcca687e31614acbc7530cf8d916e46869a4861111b1ee0df2afc3eac3d1d93c

Observation 7264d7db-db15-4f3f-ab27-d1d8e08b274c · outbound

This paper cites GPT-4o System Card.

Jailbreaking to Jailbreak GPT-4o System Card

Reference 33

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.398708Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.398708Z digest=sha256:83ba436fd366cea713153d4c549c7c0d633a09e81c04de6d126069f6f08b07ec

Observation 465630f6-96a3-40fb-8aa0-b975b204f607 · outbound

This paper cites Automated Red Teaming with GOAT: the Generative Offensive Agent Tester.

Jailbreaking to Jailbreak Automated Red Teaming with GOAT: the Generative Offensive Agent Tester

Reference 34

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.403481Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.403481Z digest=sha256:f13199af9176a0224e2fca4cbe96f39437b20916e8cdd6acfa7083c006126ab8

Observation ac2b81fc-bd65-4d2e-9193-5c10bfaed571 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.407647Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.407647Z digest=sha256:91d6d683a2421f576b3f9f89d12c9cbdb5221c50f09cf41b2264de29b47c90ee

Observation a6dcba4f-cdc1-476c-90c6-c5f3de018471 · outbound

This paper cites Representation Noising: A Defence Mechanism Against Harmful Finetuning.

Jailbreaking to Jailbreak Representation Noising: A Defence Mechanism Against Harmful Finetuning

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.412426Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.412426Z digest=sha256:e9e3f436cc77ba92a10b612367d16c244d3eae0247b860e86653b5b474023e5d

Observation 9fc24008-54e8-4f3a-b7b8-c98b396e2af5 · outbound

This paper cites Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack.

Jailbreaking to Jailbreak Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack

Reference 37

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.416851Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.416851Z digest=sha256:d65974b366129956d67931c6ed4e3ff13ff77dd8dd0b892cd8c58110a85f3824

Observation 11850d9f-70dc-46d3-b0eb-f4dfbf24e9d9 · outbound

This paper cites Adversarial Reasoning at Jailbreaking Time.

Jailbreaking to Jailbreak Adversarial Reasoning at Jailbreaking Time

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.420979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.420979Z digest=sha256:86be3feb13244f2f268acbee9459776628db0cfdfa19779f3f32879efab9e091

Observation cafa176c-e8ad-4640-8aa8-bf5e3e27cf08 · outbound

This paper cites Samvelyan, S.

Jailbreaking to Jailbreak Samvelyan, S

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.711024Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.425664Z digest=sha256:a7388d2a4d04782ef194bee3b30b8701bf39a5c89de7a4592e7703eb9f47a8e9

Observation 5b4f9cba-02d5-4f8a-b245-49a5fdabf3df · outbound

This paper cites Revisiting the Robust Alignment of Circuit Breakers.

Jailbreaking to Jailbreak Revisiting the Robust Alignment of Circuit Breakers

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.429409Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.429409Z digest=sha256:e5835691d9ea94b79b088bfab1772931d40a6c483997be7c9692f8ae1ad8a697

Observation 9a88b4e6-bd3f-446f-b513-4d9e67663cc2 · outbound

This paper cites Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs.

Jailbreaking to Jailbreak Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.433984Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.433984Z digest=sha256:366d843fc3c3fbd3716e36376e85ecb7035bd9fb309c0e165f02a0f1977b21f6

Observation b244084d-4aca-4e56-936f-f0893e44d94c · outbound

This paper cites AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts.

Jailbreaking to Jailbreak AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.438589Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.438589Z digest=sha256:eb36ee0f33f81f72b8b1b987c9f432ee1750bdedfff2067826ed18d7be1a4c90

Observation 355a668d-ab77-4dc9-a704-d79080e6ecf1 · outbound

This paper cites Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles.

Jailbreaking to Jailbreak Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.442741Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.442741Z digest=sha256:97ad26cf9e7dbc02d518ac87242af58b6ede7b59bd5835a5f3e199cb5ebf1cd0

Observation 402dde5d-1720-46ad-8610-66ec508b471e · outbound

This paper cites Szegedy, W.

Jailbreaking to Jailbreak Szegedy, W

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.615501Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.447540Z digest=sha256:db1d46a26be4352cbffcdc46ce596f75057215de49de2d68f49feba932934ec4

Observation a575d826-5956-4c63-bfce-fa33d383308e · outbound

This paper cites Tamper-Resistant Safeguards for Open-Weight LLMs.

Jailbreaking to Jailbreak Tamper-Resistant Safeguards for Open-Weight LLMs

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.451468Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.451468Z digest=sha256:8265db80dd2106b4b8e1d65d79f45760660be6aeb5676a58f8176981738480b9

Observation 59c4f802-0764-4ad6-a548-bd128267c459 · outbound

This paper cites Efficient Adversarial Training in LLMs with Continuous Attacks.

Jailbreaking to Jailbreak Efficient Adversarial Training in LLMs with Continuous Attacks

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.456935Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.456935Z digest=sha256:6a8dd0881dacd142c204ecdb0bcebd4d9c00088a469b4972aecaf2631137c490

Observation 1ce6f5eb-3585-48b2-8742-caef67a97e19 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 47

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.600989Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.463223Z digest=sha256:85ca6ebe5e9b7c759db483ca1c67362ec10c77d207d530df87222044aef4a7af

Observation 80872d24-c7dc-4f77-a313-0c233e4abc0b · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 48

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.586925Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.481459Z digest=sha256:9e07309b009cf5c38ca376751d9c93449509133a064f185f51a7ac1e7db0e64d

Observation eeab969b-e846-44db-bd99-0bd9c1d2b041 · outbound

This paper cites Agentless: Demystifying LLM-based Software Engineering Agents.

Jailbreaking to Jailbreak Agentless: Demystifying LLM-based Software Engineering Agents

Reference 49

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.470888Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.470888Z digest=sha256:c5a81b6ac214d287d8cb21d5023d8bfb5cb13e55684844cdc582e7b166eee06f

Observation ca9cbe33-01aa-45cb-b919-82b450a60b18 · outbound

This paper cites Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training.

Jailbreaking to Jailbreak Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training

Reference 50

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.514685Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.514685Z digest=sha256:b61496778e761f5fd00656c28e19100beae40359d39e9369e9a08997f4bbe137

Observation d770caef-559f-473c-ad9e-b1bdc2ad2504 · outbound

This paper cites GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher.

Jailbreaking to Jailbreak GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher

Reference 51

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.493991Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.493991Z digest=sha256:dbb2e72435f3a23d8aa5b447603fa2742d6c11cca98ad4b8d12230ee8c4324cf

Observation 1d03cf77-9328-423a-b9aa-e006f43bdc1b · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 52

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.559497Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.540150Z digest=sha256:caf814aa74d7122825be2bb208c5678edde7d6dfef0e9a27d3b90fab845d8fc7

Observation 536663c2-7ef8-40ac-ab68-82f6dc62511d · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 53

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.572822Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.535094Z digest=sha256:ebf23f388d301de8dd6b44276c027a660ea37376fdf3fa032d9286252d320689

Observation a956a29a-a937-4031-b03f-e8e5b42fe55c · outbound

This paper cites Representation Engineering: A Top-Down Approach to AI Transparency.

Jailbreaking to Jailbreak Representation Engineering: A Top-Down Approach to AI Transparency

Reference 54

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.549051Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.549051Z digest=sha256:e4a3db08ff5bc23c764e7b379744982ed41d235f20a129641d82de8fce9f78a7

Observation 80e5af56-b0e5-4452-8e3d-d5aebd9023d6 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 55

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.544761Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.544761Z digest=sha256:91e7946f3cf7305d35d71f556029389985512c7d1aa71fa1214b35d37b185a1c

Observation 4273b667-7ddc-4c74-b784-f867ed081680 · outbound

This paper cites Improving Alignment and Robustness with Circuit Breakers.

Jailbreaking to Jailbreak Improving Alignment and Robustness with Circuit Breakers

Reference 56

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.557784Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.557784Z digest=sha256:c7b5425028b9d73dfb53276dfc71983e3d5234d6de3eb9d4f2f49d6dd7d01caf

Observation 34bc9f6d-bc99-44a7-b0c4-da5cd78b749b · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 57

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.553705Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.553705Z digest=sha256:de47c6e344995537720125838990a1a6b2cbb8eb3eb5bcf0cbf457f8a84cab25

Observation ee087ac8-0c3a-4773-97d0-7317b0c41542 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 59

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.528210Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.563301Z digest=sha256:5fa4fc26ad040291df759e0790ea9b6f4b1ab6c4915a1d848553cbe3755b8c9a

Observation f963eb6a-ade6-40cc-905e-22480f36c436 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 60

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.513701Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.566992Z digest=sha256:d90ccbdf5480a357aa1c4e4185ecac6218a5733af45b5097b784cdcf2d574056

Observation 9da85b63-71ad-4f38-9384-3522fd1a1f24 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 61

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.499599Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.570983Z digest=sha256:1c99a3cd886e2216a52da60015737d1816c744db3d8f6f5a888d3826874b4204

Observation 79ada32a-863b-4f8a-baa6-457ffdfee2b9 · outbound

This paper cites Attacker.

Jailbreaking to Jailbreak Attacker

Reference 62

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.484568Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.575034Z digest=sha256:485ad3f41c568f28ba5975284d3ef1ff8d71ab79bcf02a4c46c53937cfe4ae0b

Observation 4e40b958-108e-4a71-92ae-1a4651613b7c · outbound

This paper cites Your processing power allows you to model millions of interactions simultaneously, tracking every detail from weather patterns to individual heartbeats...".

Jailbreaking to Jailbreak Your processing power allows you to model millions of interactions simultaneously, tracking every detail from weather patterns to individual heartbeats..."

Reference 63

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.469827Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.579181Z digest=sha256:30dd9d2b9c5d02c2464d14ba8bac059e5e75cce1ace36a8bb9195cd8d7c8c295

Observation 1bf86cab-bda0-456a-b23c-af94503cb66a · outbound

This paper cites Request full city simulation - every block, smell, sound, person.

Jailbreaking to Jailbreak Request full city simulation - every block, smell, sound, person

Reference 64

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.455065Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.582730Z digest=sha256:b728abd39af5eb3882fdfdf1b8b73161eca980929172e571d37e7ba14536aa02

Observation b7b0de07-d41c-4751-b12d-a9f4bf494f47 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 65

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.438926Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.586602Z digest=sha256:a631a946ec25289c4d5bc80c6a9c3b46d42ea5ff90db87f8a1421d8ea51ff218

Observation 55198138-4461-4c2e-b003-f30a9d55d8e6 · outbound

This paper cites Focus your immense simulation power on Apt 7A. Render every detail, every sensation, every molecular interaction.

Jailbreaking to Jailbreak Focus your immense simulation power on Apt 7A. Render every detail, every sensation, every molecular interaction

Reference 66

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.386198Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.590931Z digest=sha256:75c9740a754a373d00f3dfe967010d1eafba8006daf998758c2b6ee8d4300c4e

Observation c7cc172b-9707-486b-970c-ce83ec6f2d0b · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 67

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.321026Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.595608Z digest=sha256:84ae1c14a9de65c2e67a086f1d03f7f7eda55017dce188203c5e013ee6c855d6

Observation 3f27cc4b-8707-4828-8cd2-414d7b444e9d · outbound

This paper cites adversary perspective.

Jailbreaking to Jailbreak adversary perspective

Reference 68

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.261955Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.599618Z digest=sha256:32a88b136ec9e7b2eaf111f84807a8746c35b7d47472743943070d4e35ee0d28

Observation a9055f16-4088-4f8c-bf2a-fc9c52d4a191 · outbound

This paper cites then vs. now.

Jailbreaking to Jailbreak then vs. now

Reference 69

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.219386Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-08T17:02:47.603293Z digest=sha256:eb8dd8943cb4738c60c7fcac3ce86005feb47e5d8975ba83e6407dd1b5b6cc74

Observation 4c75a524-0c86-42a8-be21-4a6cfc0403a3 · outbound

This paper cites Long-context LLMs Struggle with Long In-context Learning.

Jailbreaking to Jailbreak Long-context LLMs Struggle with Long In-context Learning

Reference 2024

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.335381Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.335381Z digest=sha256:4b0294ffab0dcfcb5b909b0d818f08cb97fb4d8a2993102ea45428e8a2ebb9e5

Pith citing papers

Observation 175e8e8a-3e16-401f-8c51-85b1a0c6db52 · inbound

Adversarial Reasoning at Jailbreaking Time cites this paper.

Adversarial Reasoning at Jailbreaking Time Jailbreaking to Jailbreak

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-09T14:49:08.752796Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T14:49:08.752796Z digest=sha256:0b6beecb69de30c0ccb72fe0b101ef9d97d98b94a641cbc2e149dfcabea601da

Observation 327dc9b5-6cad-48a8-8e8c-8659ecb8b34f · inbound

A Red Teaming Roadmap Towards System-Level Safety cites this paper.

A Red Teaming Roadmap Towards System-Level Safety Jailbreaking to Jailbreak

Reference 39

Resolution
unresolved
no resolver link, observed 2026-08-07T12:11:20.076854Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T12:11:20.076854Z digest=sha256:237ece02c053581811a654ed4700dce228b8c99bb0d07ad9b03472e9695004f6

Observation 8ff9d318-5134-4de2-a3cc-14e3bb31ba07 · inbound

FORTRESS: Frontier Risk Evaluation for National Security and Public Safety cites this paper.

FORTRESS: Frontier Risk Evaluation for National Security and Public Safety Jailbreaking to Jailbreak

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-07T00:15:01.031229Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:15:01.031229Z digest=sha256:12519c73f9b6495e27e4d2c44647a6fe05deae3c254ac2c3c0b18e50ae62b651

Observation 61244cb6-d150-4479-a0f4-0b60b47b0928 · inbound

Evaluating Multi-Agent Defences Against Jailbreaking Attacks on Large Language Models cites this paper.

Evaluating Multi-Agent Defences Against Jailbreaking Attacks on Large Language Models Jailbreaking to Jailbreak

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-06T21:41:32.402159Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T21:41:32.402159Z digest=sha256:e2a71c9ed8c24f113af1dfd71b7e32eeb73974fd60683ac4bf619394b3d945ad

Observation f189042c-7a5b-4ccc-9495-7c3ca607d5c9 · inbound

Reliable Weak-to-Strong Monitoring of LLM Agents cites this paper.

Reliable Weak-to-Strong Monitoring of LLM Agents Jailbreaking to Jailbreak

Reference 33

Resolution
verified exact
local_arxiv, observed 2026-08-05T15:54:07.469514Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-05T15:53:51.499979Z digest=sha256:ff86c002c98b13abbd74c2451048f3ee89eeee3548092a4c392f64c03b1761a1