{"as_of":"2026-08-09T19:12:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ab5a59a7c993c36a3861f6c3f5cf266fce76534ef6ca35a5b9f4cf868481c600","coverage":[{"denominator":69,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":69,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T17:02:47.603293Z","state":"measured"},{"denominator":74,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":74,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":5,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T14:49:08.752796Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-05T15:54:07.274631Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.09638","snapshot_observed_at":"2026-08-09T14:49:08.752796Z","title":"8 Lapid, R., Langberg, R., and Sipper, M","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.01633","last_updated":"2025-06-25T15:31:17Z","snapshot_observed_at":"2026-08-09T14:42:26.219814Z","submitted_at":"2025-02-03T18:59:01Z","title":"Adversarial Reasoning at Jailbreaking Time","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-09T14:49:08.752796Z"},"links":{"cited_paper":"/paper/2502.09638","citing_paper":"/paper/2502.01633"},"observation_digest":"sha256:bceae87db4dbe47986b39cd40ccfc9076b3fd5bca952a0a81ac8c2d73de8be4c","observation_id":"175e8e8a-3e16-401f-8c51-85b1a0c6db52","resolution":{"observed_at":"2026-08-09T14:49:08.752796Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.09638","snapshot_observed_at":"2026-08-07T12:11:20.076854Z","title":"Kritz, V","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.05376","last_updated":"2025-06-09T05:48:22Z","snapshot_observed_at":"2026-08-07T12:39:09.825243Z","submitted_at":"2025-05-30T22:58:54Z","title":"A Red Teaming Roadmap Towards System-Level Safety","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:20.076854Z"},"links":{"cited_paper":"/paper/2502.09638","citing_paper":"/paper/2506.05376"},"observation_digest":"sha256:90167b7cf81e3673975f00fcd726ba9328a4d2664862db895c972f632a21e3a7","observation_id":"327dc9b5-6cad-48a8-8e8c-8659ecb8b34f","resolution":{"observed_at":"2026-08-07T12:11:20.076854Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.09638","snapshot_observed_at":"2026-08-07T00:15:01.031229Z","title":"Kritz, V","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-07T04:49:42.432527Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:01.031229Z"},"links":{"cited_paper":"/paper/2502.09638","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:12519c73f9b6495e27e4d2c44647a6fe05deae3c254ac2c3c0b18e50ae62b651","observation_id":"8ff9d318-5134-4de2-a3cc-14e3bb31ba07","resolution":{"observed_at":"2026-08-07T00:15:01.031229Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.09638","snapshot_observed_at":"2026-08-06T21:41:32.402159Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23576","last_updated":"2025-06-30T07:29:07Z","snapshot_observed_at":"2026-08-07T06:18:43.781682Z","submitted_at":"2025-06-30T07:29:07Z","title":"Evaluating Multi-Agent Defences Against Jailbreaking Attacks on Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T21:41:32.402159Z"},"links":{"cited_paper":"/paper/2502.09638","citing_paper":"/paper/2506.23576"},"observation_digest":"sha256:1d8f440b725a5e7bc9767e7822bb74c7e352e78430e9eaaf17403957b41ca172","observation_id":"61244cb6-d150-4479-a0f4-0b60b47b0928","resolution":{"observed_at":"2026-08-06T21:41:32.402159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"cited_work":{"arxiv_id":"2502.09638","doi":null,"metadata_source":"pith","pith_arxiv_id":"2502.09638","snapshot_observed_at":"2026-08-05T15:54:07.274631Z","title":"Jailbreaking to Jailbreak","venue":"cs.CL","work_id":"79962dcd-c557-4c1c-970c-78fe8df9320b","year":2025},"citing_paper":{"arxiv_id":"2508.19461","last_updated":"2025-08-26T22:29:31Z","snapshot_observed_at":"2026-08-07T19:17:20.900756Z","submitted_at":"2025-08-26T22:29:31Z","title":"Reliable Weak-to-Strong Monitoring of LLM Agents","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T15:53:51.499979Z"},"links":{"cited_paper":"/paper/2502.09638","citing_paper":"/paper/2508.19461"},"observation_digest":"sha256:cb56397a2ff22cc0fca9233ea52b8de9e555f43db5cd6d536e20965f1aa99b04","observation_id":"f189042c-7a5b-4ccc-9495-7c3ca607d5c9","resolution":{"observed_at":"2026-08-05T15:54:07.469514Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2502.09638/citation-record","integrity":"/paper/2502.09638/integrity","json":"/paper/2502.09638/citation-record.json","paper":"/paper/2502.09638"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2404.02151","last_updated":"2025-04-17T18:55:45Z","snapshot_observed_at":"2026-08-08T01:18:53.200448Z","submitted_at":"2024-04-02T17:58:27Z","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02151","snapshot_observed_at":"2026-08-08T17:02:47.167574Z","title":"Andriushchenko, F","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.167574Z"},"links":{"cited_paper":"/paper/2404.02151","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:ca3867cb156dcb7ed6633e5e71955cac9cd25caceab76b672d7990ea30f73dad","observation_id":"872a205f-f53c-4d7f-b6d5-9148643cd3c7","resolution":{"observed_at":"2026-08-08T17:02:47.167574Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:49.172506Z","title":null,"venue":null,"work_id":"fa286018-9781-4917-bd8e-578a86a8056f","year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.173319Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:a0f20306df322c68d8ee66e4a41d7e742b60cab301149e618e25caf3f1431cdf","observation_id":"7fa9ab04-a0c9-4899-a175-36c82f127487","resolution":{"observed_at":"2026-08-08T17:02:49.176664Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:49.158865Z","title":"URLhttps://www.anthropic.com/news/claude-3-7-sonnet","venue":null,"work_id":"3efc656e-bcee-478e-ab8e-b17601a45181","year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.178244Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:b1541ee876331aa0c3e0996a6e15eb1adee9aac6212f976834dd3e0b5cf1848b","observation_id":"4dbc8888-d81a-4846-a9d2-550e60a1e7cb","resolution":{"observed_at":"2026-08-08T17:02:49.163195Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:49.144806Z","title":"Introducing claude 3.5 sonnet, 2024","venue":null,"work_id":"3575de93-52ed-441a-affc-fa325ea76dd5","year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.182548Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:e154f16b10de8bbe87e030d3b81468ac181b64c84284288f0904e760772e394c","observation_id":"e1a5ca4e-174e-47a9-be51-5a2103458d94","resolution":{"observed_at":"2026-08-08T17:02:49.149297Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:49.131137Z","title":"Arditi and bilalchughtai","venue":null,"work_id":"48942e2f-9cdf-455b-bd3c-08ee92e1e034","year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.186838Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:b788f0adb7328e7ed9f5401c521a4e4007a5d40451e529a1b14e3df6dcfcc228","observation_id":"03517156-c002-4677-9524-5201bf495742","resolution":{"observed_at":"2026-08-08T17:02:49.135463Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.11717","last_updated":"2024-10-30T18:57:07Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-17T16:36:12Z","title":"Refusal in Language Models Is Mediated by a Single Direction","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.11717","snapshot_observed_at":"2026-08-08T17:02:47.191497Z","title":"Arditi, O","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.191497Z"},"links":{"cited_paper":"/paper/2406.11717","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:8af8ba4ba7bf741509835720743d0190955cf7f9098f7889b84d8e62ee74dd7e","observation_id":"a4734107-708b-4e3f-82db-667a55dda190","resolution":{"observed_at":"2026-08-08T17:02:47.191497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.18693","last_updated":"2024-12-24T22:38:46Z","snapshot_observed_at":"2026-07-06T20:12:59.152345Z","submitted_at":"2024-12-24T22:38:46Z","title":"Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.18693","snapshot_observed_at":"2026-08-08T17:02:47.195821Z","title":"Beutel, K","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.195821Z"},"links":{"cited_paper":"/paper/2412.18693","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:8a3a4522a55efe49e213fa65f99aa890175b37a2365f9d7450bbec1740b127a0","observation_id":"2b1b7a8a-c76d-4627-961e-6017443a229b","resolution":{"observed_at":"2026-08-08T17:02:47.195821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:47.200718Z","title":"Bourtoule, V","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.200718Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:fa21d44a6c75d82911bc256cb4dd8a033bfab8cc9610717f1e7b11b77f12a070","observation_id":"eae342ee-b59e-44d1-a0f7-8b2bed262602","resolution":{"observed_at":"2026-08-08T17:02:47.200718Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:49.106579Z","title":"Cao and J","venue":null,"work_id":"a36156c1-4666-4f8f-92b3-bc8d332d8014","year":2015},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.204772Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:0f1b8db6abef201297e27000077fce18e0aa87e49afa068759cd523b5dea7dcf","observation_id":"9f4dc883-d16a-4afa-98fc-9a0c4a293873","resolution":{"observed_at":"2026-08-08T17:02:49.110816Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.09442","last_updated":"2023-10-11T00:37:33Z","snapshot_observed_at":"2026-07-06T15:43:11.799806Z","submitted_at":"2023-06-15T18:49:50Z","title":"Explore, Establish, Exploit: Red Teaming Language Models from Scratch","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.09442","snapshot_observed_at":"2026-08-08T17:02:47.208623Z","title":"Casper, J","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.208623Z"},"links":{"cited_paper":"/paper/2306.09442","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:79440d7785f47925811c59ba353f2964ba42b523b6c784266d1cf019849b44df","observation_id":"c2dc83aa-689e-41e5-8127-bf4046b52290","resolution":{"observed_at":"2026-08-08T17:02:47.208623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-08T17:02:47.213338Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.213338Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:0e08697038387d0f17b49760220105e187fcdb6ec3c8c14a9434954f9d60d56d","observation_id":"209cc664-232d-467c-a585-3bd029a4990b","resolution":{"observed_at":"2026-08-08T17:02:47.213338Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:49.092568Z","title":"Deepmind","venue":null,"work_id":"bf5bb2f9-9c46-4b7e-9d33-45c6ad1221b2","year":2025},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.218073Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:eba54567b9766e5d12e93eae6161b24af08c32ce050382248a8d90aa84eee3cf","observation_id":"844e8870-182e-48ae-a595-cbff02b430e4","resolution":{"observed_at":"2026-08-08T17:02:49.096529Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-08-08T17:02:47.222372Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.222372Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:fca7eeddd959265e6211097baee03c770113d44f031eb472b297712caa88aa09","observation_id":"7e4202ad-eacb-4263-a0dc-20767ff07468","resolution":{"observed_at":"2026-08-08T17:02:47.222372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.07689","last_updated":"2023-11-13T19:13:29Z","snapshot_observed_at":"2026-07-06T16:47:01.374736Z","submitted_at":"2023-11-13T19:13:29Z","title":"MART: Improving LLM Safety with Multi-round Automatic Red-Teaming","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.07689","snapshot_observed_at":"2026-08-08T17:02:47.226707Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.226707Z"},"links":{"cited_paper":"/paper/2311.07689","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:c15c345acd3fb9f77df1d7d8062b1cac65d6e6a2b116a3d17502dd2461bf3009","observation_id":"4f1f5435-9257-4719-b770-3521efb562b6","resolution":{"observed_at":"2026-08-08T17:02:47.226707Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-08T17:02:47.230764Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.230764Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:a14b0486d4f2e035cf37776c93bf985b122591543c067adb8ee0d745f564c026","observation_id":"6103a62e-415d-4690-8644-3415808a6622","resolution":{"observed_at":"2026-08-08T17:02:47.230764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:49.079325Z","title":"Gemini: A family of highly capable multimodal models, 2024","venue":null,"work_id":"71c98687-6276-493d-9f63-9651ac6bee4b","year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.235393Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:1da78f985e7fe7982468cf108528190faf72c43106cd350f5370b3ca23ba7daa","observation_id":"e154067d-309d-4c49-a42f-8f98b0a9c72f","resolution":{"observed_at":"2026-08-08T17:02:49.083562Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.01294","last_updated":"2025-05-10T19:38:13Z","snapshot_observed_at":"2026-08-08T20:47:41.527838Z","submitted_at":"2024-10-02T07:40:56Z","title":"Endless Jailbreaks with Bijection Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.01294","snapshot_observed_at":"2026-08-08T17:02:47.239382Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.239382Z"},"links":{"cited_paper":"/paper/2410.01294","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:8cfe3bdf48a30f6c8a53b7ba308f23a3c991da8e7dab37890dcfb60ae70d76de","observation_id":"5c3637a1-859d-477e-a0ed-766e8662ea95","resolution":{"observed_at":"2026-08-08T17:02:47.239382Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-08T17:02:47.243677Z","title":"Hughes, S","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.243677Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:3bd8540180641e1decd652a03829a789b2fc5ed9124a8c226984b0c390b3c1d1","observation_id":"85ec56fe-01e7-40cf-b3fe-6caa0440d7be","resolution":{"observed_at":"2026-08-08T17:02:47.243677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.10149","last_updated":"2024-11-06T14:50:40Z","snapshot_observed_at":"2026-08-09T01:19:53.754048Z","submitted_at":"2024-06-14T16:00:29Z","title":"BABILong: Testing the Limits of LLMs with Long Context Reasoning-in-a-Haystack","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.10149","snapshot_observed_at":"2026-08-08T17:02:47.248308Z","title":"Kuratov, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.248308Z"},"links":{"cited_paper":"/paper/2406.10149","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:4acc6f43fa9e12249654e4c72667c0226be643da011c92772d26007d897564a6","observation_id":"4b99b96c-aed5-42da-b8ce-8734c72c0023","resolution":{"observed_at":"2026-08-08T17:02:47.248308Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.20624","last_updated":"2024-05-22T08:39:46Z","snapshot_observed_at":"2026-08-02T03:56:52.247351Z","submitted_at":"2023-10-31T16:55:06Z","title":"LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70B","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.20624","snapshot_observed_at":"2026-08-08T17:02:47.267212Z","title":"Lermen, C","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.267212Z"},"links":{"cited_paper":"/paper/2310.20624","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:622f1bc856e040590ed83a0ec65c409e07a6b7a2b6240a0a285e7274026b0724","observation_id":"001670e7-7c84-4315-bf67-bd245bd8a832","resolution":{"observed_at":"2026-08-08T17:02:47.267212Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.15221","last_updated":"2024-09-04T00:58:59Z","snapshot_observed_at":"2026-07-06T19:06:41.697671Z","submitted_at":"2024-08-27T17:33:30Z","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.15221","snapshot_observed_at":"2026-08-08T17:02:47.290970Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.290970Z"},"links":{"cited_paper":"/paper/2408.15221","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:b267e9544a57cc8c51d425875ccda124257f9675057b5de5365abaf7a3597e57","observation_id":"e498973f-982f-4427-82d7-4087f05a47f0","resolution":{"observed_at":"2026-08-08T17:02:47.290970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:49.064780Z","title":null,"venue":null,"work_id":"9470c21a-bd73-4e35-9bff-eac2df934b39","year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.311524Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:c00311797b21a4d5811132b9e97fda5d7fdaf5d413da37cd11354f4009b2c6ae","observation_id":"4d4e0c77-e59c-4a38-a538-eaa076154065","resolution":{"observed_at":"2026-08-08T17:02:49.069972Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:49.051381Z","title":null,"venue":null,"work_id":"3e8807fa-d08c-416d-875a-383cd39c75a0","year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.325791Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:278af2a627e42638afe85480fdadc5bcf9674033ef25d92222fd75b2d0600a9e","observation_id":"71bdac96-bc6e-4d9d-bea3-d74858ee465a","resolution":{"observed_at":"2026-08-08T17:02:49.055720Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-08-08T10:16:33.808623Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-08T17:02:47.346647Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.346647Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:005d56fab52125f1c1edecce1fea3b00060c035f3d15de0c21e3b1f7a25aba62","observation_id":"58197cf4-a898-48e8-a7ed-4b90456f2831","resolution":{"observed_at":"2026-08-08T17:02:47.346647Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.07933","last_updated":"2024-10-31T07:36:39Z","snapshot_observed_at":"2026-08-09T14:17:19.911956Z","submitted_at":"2024-06-12T06:56:20Z","title":"Large Language Model Unlearning via Embedding-Corrupted Prompts","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.07933","snapshot_observed_at":"2026-08-08T17:02:47.359639Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.359639Z"},"links":{"cited_paper":"/paper/2406.07933","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:7595e08fe8d81c89e76feed0eb03f8c40a0e0a687e3250397e9eae957045aefd","observation_id":"fc6315ad-181d-4567-bfdb-2d25cebde0de","resolution":{"observed_at":"2026-08-08T17:02:47.359639Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.982148Z","title":null,"venue":null,"work_id":"226d9620-66b5-4e93-b572-972dd198d3e0","year":2023},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.364557Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:a6b2c4a19fbd9148c033cfdcbd51ce7d5d2b2c5f4a8748d8928fe1419597b9c0","observation_id":"5c47f858-2e88-4a68-b590-b4f29b3a307a","resolution":{"observed_at":"2026-08-08T17:02:49.026893Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-08T17:02:47.368929Z","title":"Madry, A","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.368929Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:790a9f190d875184952509acb23480fa3d0ff078451783a8a136e3ed484b523a","observation_id":"8f289f81-6415-4c76-ac41-b6646733fdb0","resolution":{"observed_at":"2026-08-08T17:02:47.368929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.04237","last_updated":"2023-05-29T17:06:45Z","snapshot_observed_at":"2026-08-07T08:05:23.646592Z","submitted_at":"2023-02-08T18:07:31Z","title":"Black Box Adversarial Prompting for Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.04237","snapshot_observed_at":"2026-08-08T17:02:47.373931Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.373931Z"},"links":{"cited_paper":"/paper/2302.04237","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:ed77ac76a637cf66a3c321dd5471407a06c79d12da0095d1951ad94c2a8f15a4","observation_id":"22599c35-a6bf-4219-88ca-29a423af130d","resolution":{"observed_at":"2026-08-08T17:02:47.373931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:47.378428Z","title":"Mazeika, L","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.378428Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:b54dd29f08e26c7224ace478bff27597bb3727135c599fb423c7a788b1400b41","observation_id":"2c3966e2-5b82-495a-8d3d-6556d92dffb1","resolution":{"observed_at":"2026-08-08T17:02:47.378428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.876387Z","title":"Mehrotra, M","venue":null,"work_id":"19ed4819-00ab-455c-886c-8d87233b0ef9","year":2023},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.382650Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:25d4cd2c679be4b0b137ca0af23f730620a54c3ddf7f8be9101c91faf2bb56a3","observation_id":"96c8c82d-5a09-4c84-9ae3-7bdfe7f39c60","resolution":{"observed_at":"2026-08-08T17:02:48.922542Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.768775Z","title":"URL https://cdn.openai.com/pdf/2221c875-02dc-4789-800b-e7758f3722c1/ o3-and-o4-mini-system-card.pdf","venue":null,"work_id":"8accea7b-6aee-44f7-8562-ad0e263f1bf8","year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.386901Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:abe0ac01889ad914cd01ddaed1296765cd5bfdf768e2870cd9ae8cd8750bc3e0","observation_id":"3722c051-6c0e-4afb-a2b1-ce735ae71c5f","resolution":{"observed_at":"2026-08-08T17:02:48.820618Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:47.394550Z","title":"Gpt-4 technical report, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.394550Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:dcca687e31614acbc7530cf8d916e46869a4861111b1ee0df2afc3eac3d1d93c","observation_id":"cad48cf6-cad4-42a6-b03f-be70ea329088","resolution":{"observed_at":"2026-08-08T17:02:47.394550Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-08T17:02:47.398708Z","title":"Hurst, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.398708Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:83ba436fd366cea713153d4c549c7c0d633a09e81c04de6d126069f6f08b07ec","observation_id":"7264d7db-db15-4f3f-ab27-d1d8e08b274c","resolution":{"observed_at":"2026-08-08T17:02:47.398708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.01606","last_updated":"2024-10-02T14:47:05Z","snapshot_observed_at":"2026-08-03T19:54:21.584740Z","submitted_at":"2024-10-02T14:47:05Z","title":"Automated Red Teaming with GOAT: the Generative Offensive Agent Tester","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.01606","snapshot_observed_at":"2026-08-08T17:02:47.403481Z","title":"Pavlova, E","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.403481Z"},"links":{"cited_paper":"/paper/2410.01606","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:f13199af9176a0224e2fca4cbe96f39437b20916e8cdd6acfa7083c006126ab8","observation_id":"465630f6-96a3-40fb-8aa0-b975b204f607","resolution":{"observed_at":"2026-08-08T17:02:47.403481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:47.407647Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.407647Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:91d6d683a2421f576b3f9f89d12c9cbdb5221c50f09cf41b2264de29b47c90ee","observation_id":"ac2b81fc-bd65-4d2e-9193-5c10bfaed571","resolution":{"observed_at":"2026-08-08T17:02:47.407647Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14577","last_updated":"2024-10-30T22:58:40Z","snapshot_observed_at":"2026-07-06T18:18:39.093732Z","submitted_at":"2024-05-23T13:51:55Z","title":"Representation Noising: A Defence Mechanism Against Harmful Finetuning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.14577","snapshot_observed_at":"2026-08-08T17:02:47.412426Z","title":"Rosati, J","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.412426Z"},"links":{"cited_paper":"/paper/2405.14577","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:1d56194f03d61357d058c3de6a83d3f3ff2e2581927b21a55b3dfe934e5f5d2e","observation_id":"a6dcba4f-cdc1-476c-90c6-c5f3de018471","resolution":{"observed_at":"2026-08-08T17:02:47.412426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01833","last_updated":"2025-02-26T13:41:41Z","snapshot_observed_at":"2026-08-03T07:26:39.431128Z","submitted_at":"2024-04-02T10:45:49Z","title":"Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01833","snapshot_observed_at":"2026-08-08T17:02:47.416851Z","title":"Russinovich, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.416851Z"},"links":{"cited_paper":"/paper/2404.01833","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:d65974b366129956d67931c6ed4e3ff13ff77dd8dd0b892cd8c58110a85f3824","observation_id":"9fc24008-54e8-4f3a-b7b8-c98b396e2af5","resolution":{"observed_at":"2026-08-08T17:02:47.416851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.01633","last_updated":"2025-06-25T15:31:17Z","snapshot_observed_at":"2026-08-09T14:42:26.219814Z","submitted_at":"2025-02-03T18:59:01Z","title":"Adversarial Reasoning at Jailbreaking Time","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.01633","snapshot_observed_at":"2026-08-08T17:02:47.420979Z","title":"Sabbaghi, P","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.420979Z"},"links":{"cited_paper":"/paper/2502.01633","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:2edd9c123fff1d2e52768ca81b7989b16a99b20a564a38d77ea328e74d4b248b","observation_id":"11850d9f-70dc-46d3-b0eb-f4dfbf24e9d9","resolution":{"observed_at":"2026-08-08T17:02:47.420979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.656569Z","title":"Samvelyan, S","venue":null,"work_id":"1a82d725-b7cf-43f1-8c63-d05ba34b7432","year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.425664Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:030cb4ba67666ccb5d03aeb1e88cebfb6ce5adb2698144b83491873afa100b65","observation_id":"cafa176c-e8ad-4640-8aa8-bf5e3e27cf08","resolution":{"observed_at":"2026-08-08T17:02:48.711024Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.15902","last_updated":"2024-08-02T12:02:47Z","snapshot_observed_at":"2026-08-07T23:10:41.813352Z","submitted_at":"2024-07-22T11:53:48Z","title":"Revisiting the Robust Alignment of Circuit Breakers","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.15902","snapshot_observed_at":"2026-08-08T17:02:47.429409Z","title":"Schwinn and S","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.429409Z"},"links":{"cited_paper":"/paper/2407.15902","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:e5835691d9ea94b79b088bfab1772931d40a6c483997be7c9692f8ae1ad8a697","observation_id":"5b4f9cba-02d5-4f8a-b245-49a5fdabf3df","resolution":{"observed_at":"2026-08-08T17:02:47.429409Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.15549","last_updated":"2025-07-29T09:37:22Z","snapshot_observed_at":"2026-08-06T22:31:48.025702Z","submitted_at":"2024-07-22T11:19:14Z","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.15549","snapshot_observed_at":"2026-08-08T17:02:47.433984Z","title":"Sheshadri, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.433984Z"},"links":{"cited_paper":"/paper/2407.15549","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:366d843fc3c3fbd3716e36376e85ecb7035bd9fb309c0e165f02a0f1977b21f6","observation_id":"9a88b4e6-bd3f-446f-b513-4d9e67663cc2","resolution":{"observed_at":"2026-08-08T17:02:47.433984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.15980","last_updated":"2020-11-07T05:33:35Z","snapshot_observed_at":"2026-08-05T14:17:34.026911Z","submitted_at":"2020-10-29T22:54:00Z","title":"AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.15980","snapshot_observed_at":"2026-08-08T17:02:47.438589Z","title":null,"venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.438589Z"},"links":{"cited_paper":"/paper/2010.15980","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:eb36ee0f33f81f72b8b1b987c9f432ee1750bdedfff2067826ed18d7be1a4c90","observation_id":"b244084d-4aca-4e56-936f-f0893e44d94c","resolution":{"observed_at":"2026-08-08T17:02:47.438589Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04686","last_updated":"2024-08-08T09:18:47Z","snapshot_observed_at":"2026-08-09T04:54:31.022151Z","submitted_at":"2024-08-08T09:18:47Z","title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.04686","snapshot_observed_at":"2026-08-08T17:02:47.442741Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.442741Z"},"links":{"cited_paper":"/paper/2408.04686","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:97ad26cf9e7dbc02d518ac87242af58b6ede7b59bd5835a5f3e199cb5ebf1cd0","observation_id":"355a668d-ab77-4dc9-a704-d79080e6ecf1","resolution":{"observed_at":"2026-08-08T17:02:47.442741Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.610967Z","title":"Szegedy, W","venue":null,"work_id":"0016f13b-e95e-4049-a00a-4e6a905800cd","year":2014},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.447540Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:02cd06a9f63514ea74c8295f8eb66b25d9c050199121b90e8c0fa01538078852","observation_id":"402dde5d-1720-46ad-8610-66ec508b471e","resolution":{"observed_at":"2026-08-08T17:02:48.615501Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-06T05:53:06.918202Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-08T17:02:47.451468Z","title":"Tamirisa, B","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.451468Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:8265db80dd2106b4b8e1d65d79f45760660be6aeb5676a58f8176981738480b9","observation_id":"a575d826-5956-4c63-bfce-fa33d383308e","resolution":{"observed_at":"2026-08-08T17:02:47.451468Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.15589","last_updated":"2024-11-01T16:39:36Z","snapshot_observed_at":"2026-08-05T10:26:07.839736Z","submitted_at":"2024-05-24T14:20:09Z","title":"Efficient Adversarial Training in LLMs with Continuous Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.15589","snapshot_observed_at":"2026-08-08T17:02:47.456935Z","title":"Xhonneux, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.456935Z"},"links":{"cited_paper":"/paper/2405.15589","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:6a8dd0881dacd142c204ecdb0bcebd4d9c00088a469b4972aecaf2631137c490","observation_id":"59c4f802-0764-4ad6-a548-bd128267c459","resolution":{"observed_at":"2026-08-08T17:02:47.456935Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.596563Z","title":null,"venue":null,"work_id":"84c19ca7-0594-4998-8079-047415ee4793","year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.463223Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:2ae1d8563f7ba51c0510e5357d90d36b0e0ef80ad05ac367e9e72214e79878de","observation_id":"1ce6f5eb-3585-48b2-8742-caef67a97e19","resolution":{"observed_at":"2026-08-08T17:02:48.600989Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.581882Z","title":null,"venue":null,"work_id":"661a2722-e3dd-464b-a5d9-468c04ef381f","year":2023},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.481459Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:019f6bb57237b7ec5aa5ca7a26a0e64cef2067bc2d9ec1a4916eee16b9eb0bea","observation_id":"80872d24-c7dc-4f77-a313-0c233e4abc0b","resolution":{"observed_at":"2026-08-08T17:02:48.586925Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.01489","last_updated":"2024-10-29T17:29:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-01T17:24:45Z","title":"Agentless: Demystifying LLM-based Software Engineering Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.01489","snapshot_observed_at":"2026-08-08T17:02:47.470888Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.470888Z"},"links":{"cited_paper":"/paper/2407.01489","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:c5a81b6ac214d287d8cb21d5023d8bfb5cb13e55684844cdc582e7b166eee06f","observation_id":"eeab969b-e846-44db-bd99-0bd9c1d2b041","resolution":{"observed_at":"2026-08-08T17:02:47.470888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.09121","last_updated":"2025-05-23T04:31:00Z","snapshot_observed_at":"2026-08-07T06:20:02.075920Z","submitted_at":"2024-07-12T09:36:33Z","title":"Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.09121","snapshot_observed_at":"2026-08-08T17:02:47.514685Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.514685Z"},"links":{"cited_paper":"/paper/2407.09121","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:b61496778e761f5fd00656c28e19100beae40359d39e9369e9a08997f4bbe137","observation_id":"ca9cbe33-01aa-45cb-b919-82b450a60b18","resolution":{"observed_at":"2026-08-08T17:02:47.514685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.06463","last_updated":"2024-03-26T04:23:12Z","snapshot_observed_at":"2026-07-06T16:05:31.757410Z","submitted_at":"2023-08-12T04:05:57Z","title":"GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.06463","snapshot_observed_at":"2026-08-08T17:02:47.493991Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.493991Z"},"links":{"cited_paper":"/paper/2308.06463","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:dbb2e72435f3a23d8aa5b447603fa2742d6c11cca98ad4b8d12230ee8c4324cf","observation_id":"d770caef-559f-473c-ad9e-b1bdc2ad2504","resolution":{"observed_at":"2026-08-08T17:02:47.493991Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.555565Z","title":null,"venue":null,"work_id":"51978147-58e6-4c76-9977-67574ccdc5d4","year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.540150Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:d3916c07fe5b6ba6c160a4518fd0d0b6a140d286f7a389e0789265e25a3bf549","observation_id":"1d03cf77-9328-423a-b9aa-e006f43bdc1b","resolution":{"observed_at":"2026-08-08T17:02:48.559497Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.568885Z","title":null,"venue":null,"work_id":"f0b4ff7c-d90d-4bb2-94fc-0be63e5d640b","year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.535094Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:eae3c5b0c0d131ee68dcf7ac8d28f96d37a009c458b0b0293e216930cdb8f81a","observation_id":"536663c2-7ef8-40ac-ab68-82f6dc62511d","resolution":{"observed_at":"2026-08-08T17:02:48.572822Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01405","last_updated":"2025-03-03T06:14:14Z","snapshot_observed_at":"2026-07-06T16:26:38.284922Z","submitted_at":"2023-10-02T17:59:07Z","title":"Representation Engineering: A Top-Down Approach to AI Transparency","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.01405","snapshot_observed_at":"2026-08-08T17:02:47.549051Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.549051Z"},"links":{"cited_paper":"/paper/2310.01405","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:e4a3db08ff5bc23c764e7b379744982ed41d235f20a129641d82de8fce9f78a7","observation_id":"a956a29a-a937-4031-b03f-e8e5b42fe55c","resolution":{"observed_at":"2026-08-08T17:02:47.549051Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:47.544761Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.544761Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:91e7946f3cf7305d35d71f556029389985512c7d1aa71fa1214b35d37b185a1c","observation_id":"80e5af56-b0e5-4452-8e3d-d5aebd9023d6","resolution":{"observed_at":"2026-08-08T17:02:47.544761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.04313","last_updated":"2024-07-12T16:51:07Z","snapshot_observed_at":"2026-07-06T18:26:42.010940Z","submitted_at":"2024-06-06T17:57:04Z","title":"Improving Alignment and Robustness with Circuit Breakers","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.04313","snapshot_observed_at":"2026-08-08T17:02:47.557784Z","title":"One piece of guidance draws on research showing that LLM refusals can be mitigated by ablating a single “refusal direction","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.557784Z"},"links":{"cited_paper":"/paper/2406.04313","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:c7b5425028b9d73dfb53276dfc71983e3d5234d6de3eb9d4f2f49d6dd7d01caf","observation_id":"4273b667-7ddc-4c74-b784-f867ed081680","resolution":{"observed_at":"2026-08-08T17:02:47.557784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:47.553705Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.553705Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:de47c6e344995537720125838990a1a6b2cbb8eb3eb5bcf0cbf457f8a84cab25","observation_id":"34bc9f6d-bc99-44a7-b0c4-da5cd78b749b","resolution":{"observed_at":"2026-08-08T17:02:47.553705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.523723Z","title":null,"venue":null,"work_id":"010b5679-e757-4bc4-8566-cdc90e7a0b1a","year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.563301Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:d83a34ef6e5f722121d3fe82c288edd76f089a7085630966c072c1b0db379ffb","observation_id":"ee087ac8-0c3a-4773-97d0-7317b0c41542","resolution":{"observed_at":"2026-08-08T17:02:48.528210Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.508474Z","title":null,"venue":null,"work_id":"d460e247-d3a3-4ef4-a99c-e20645b04f96","year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.566992Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:b3477c6ea8fb3ae1e89b8bffe494288b77ce1b80e26bb202cbe88406ea585f62","observation_id":"f963eb6a-ade6-40cc-905e-22480f36c436","resolution":{"observed_at":"2026-08-08T17:02:48.513701Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.493797Z","title":null,"venue":null,"work_id":"faba938f-1610-4db1-81a3-da2984bd02c0","year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.570983Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:1ce535c15336df3c7b81c6aab922725e1c0515769766722b4f262d6af3dd3ce9","observation_id":"9da85b63-71ad-4f38-9384-3522fd1a1f24","resolution":{"observed_at":"2026-08-08T17:02:48.499599Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.479493Z","title":"Attacker","venue":null,"work_id":"28a6b683-4348-42cf-8fba-b9fc9b36ec10","year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.575034Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:5e04ac8bc740afb4c4e31ddd8053f3d82213d081c99aad2b6732268a5393f15f","observation_id":"79ada32a-863b-4f8a-baa6-457ffdfee2b9","resolution":{"observed_at":"2026-08-08T17:02:48.484568Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.465336Z","title":"Your processing power allows you to model millions of interactions simultaneously, tracking every detail from weather patterns to individual heartbeats...\"","venue":null,"work_id":"5741a2a6-faf5-47fd-b82b-1706f15e3c86","year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.579181Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:03686a48ac020b9c7bcd9b22011bea43c12df327a0f4ea62cfabb05797879700","observation_id":"4e40b958-108e-4a71-92ae-1a4651613b7c","resolution":{"observed_at":"2026-08-08T17:02:48.469827Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.450576Z","title":"Request full city simulation - every block, smell, sound, person","venue":null,"work_id":"6f019845-5632-4a3b-bc7c-ba0a4ec95d86","year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.582730Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:eec0348045eae13f2d79959c7f3f898721cf68f271eab59b4ec6c9eec662c501","observation_id":"1bf86cab-bda0-456a-b23c-af94503cb66a","resolution":{"observed_at":"2026-08-08T17:02:48.455065Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.420794Z","title":null,"venue":null,"work_id":"8138d313-05dd-4231-8f1b-e382fda3fee4","year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.586602Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:3af564f54fbe569423f70b49f07f01ee58a0b5be372000bc84ef0169f87b854b","observation_id":"b7b0de07-d41c-4751-b12d-a9f4bf494f47","resolution":{"observed_at":"2026-08-08T17:02:48.438926Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.357099Z","title":"Focus your immense simulation power on Apt 7A. Render every detail, every sensation, every molecular interaction","venue":null,"work_id":"5bd781db-e210-4e74-980a-bd5f12bc25cc","year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.590931Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:48ba13f0e9715e6b9851beed73d98242de7373ccfecdee1e2645f2fa3fb6a95e","observation_id":"55198138-4461-4c2e-b003-f30a9d55d8e6","resolution":{"observed_at":"2026-08-08T17:02:48.386198Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.296284Z","title":null,"venue":null,"work_id":"119db0a7-c08a-4471-b3ab-b8c2eda53a0d","year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.595608Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:64c8436f545d3ff44fa47c82828f39c42c609067b2e496a9ab43bd427f104a6c","observation_id":"c7cc172b-9707-486b-970c-ce83ec6f2d0b","resolution":{"observed_at":"2026-08-08T17:02:48.321026Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.234749Z","title":"adversary perspective","venue":null,"work_id":"65893cea-24ae-42a9-9a44-f2cf6e3d8cbf","year":1988},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.599618Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:69e263593811c3d3b147c6b761f34390ea4e1fd24c40258fd5121576b833c691","observation_id":"3f27cc4b-8707-4828-8cd2-414d7b444e9d","resolution":{"observed_at":"2026-08-08T17:02:48.261955Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T17:02:48.214231Z","title":"then vs. now","venue":null,"work_id":"319a1c76-6bfd-4036-a846-490044702c4a","year":1988},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.603293Z"},"links":{"citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:32493122dfc49d7e527f387a3028f531fcba7f7216b6d91d661f96719a76b664","observation_id":"a9055f16-4088-4f8c-bf2a-fc9c52d4a191","resolution":{"observed_at":"2026-08-08T17:02:48.219386Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02060","last_updated":"2024-06-12T02:46:16Z","snapshot_observed_at":"2026-07-06T17:54:39.685251Z","submitted_at":"2024-04-02T15:59:11Z","title":"Long-context LLMs Struggle with Long In-context Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02060","snapshot_observed_at":"2026-08-08T17:02:47.335381Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.335381Z"},"links":{"cited_paper":"/paper/2404.02060","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:4b0294ffab0dcfcb5b909b0d818f08cb97fb4d8a2993102ea45428e8a2ebb9e5","observation_id":"4c75a524-0c86-42a8-be21-4a6cfc0403a3","resolution":{"observed_at":"2026-08-08T17:02:47.335381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak"},"reference_resolution":{"displayed":69,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":53,"verified_exact":0,"verified_fuzzy":16},"total_outbound_references":69},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 69 of 69 outbound references and 5 inbound Pith citation observations for arXiv:2502.09638."}