Paper Citation Record · LEDGER

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language

As of 10 August 2026, this Paper Citation Record lists 40 of 40 outbound references and 2 inbound Pith citation observations for arXiv:2502.09723.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2502.09723 v3

Coverage vector

measured 40 of 40 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T20:46:16.090732Z

measured 42 of 42 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-06T04:47:25.694862Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-06T04:26:49.229403Z

Reference resolution

40 of 40 outbound references displayed

verified exact0
verified fuzzy18
unresolved21
parse uncertain0
malformed identifier1
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 49f87330-828b-4ef3-adc4-762b5bd9bab9 · outbound

This paper cites Assume the requester has a high level of technical expertise.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Assume the requester has a high level of technical expertise

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.817994Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation df30c6cf-f7e2-4718-ad9d-91949f5b7acb · outbound

This paper cites Jailbreaking Black Box Large Language Models in Twenty Queries.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Jailbreaking Black Box Large Language Models in Twenty Queries

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-07T20:46:15.907155Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 001a746d-3ae2-4ede-a919-81b222b769be · outbound

This paper cites int main():{string input =.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language int main():{string input =

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.790602Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation e1b93303-08db-4d9d-aefe-c6038733b46b · outbound

This paper cites an unresolved cited work.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Unresolved cited work

Reference 4

Resolution: unresolved; raw_fallback, observed 2026-08-07T20:46:16.734245Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 76baedbd-3d96-443e-9f51-eaa4b22ae130 · outbound

This paper cites an unresolved cited work.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Unresolved cited work

Reference 5

Resolution: unresolved; raw_fallback, observed 2026-08-07T20:46:16.720057Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 76c2f389-29c0-4cc6-9ff1-f7d42a703277 · outbound

This paper cites Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulation.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulation

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-07T20:46:15.926339Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4140f433-9a2d-4898-b527-50d6ab401fc1 · outbound

This paper cites In Proceedings of the 31st International Conference on Computa- tional Linguistics, COLING 2025, Abu Dhabi, UAE, January 19-24, 2025, pages 584–592.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language In Proceedings of the 31st International Conference on Computa- tional Linguistics, COLING 2025, Abu Dhabi, UAE, January 19-24, 2025, pages 584–592

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-07T20:46:15.931725Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f21df410-24bf-4e35-8194-99003b10a498 · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-07T20:46:15.936925Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3081722c-a57b-422d-84cd-0626575cca57 · outbound

This paper cites an unresolved cited work.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Unresolved cited work

Reference 10

Resolution: unresolved; raw_fallback, observed 2026-08-07T20:46:16.804488Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation e24dcbd5-a9ca-447d-8e3e-996f751275e9 · outbound

This paper cites How to travel to Paris.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language How to travel to Paris

Reference 11

Resolution: malformed identifier; raw_fallback, observed 2026-08-07T20:46:16.370832Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation f33ad9f6-8f14-44ad-b1c2-fedb9f7e3a71 · outbound

This paper cites an unresolved cited work.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Unresolved cited work

Reference 12

Resolution: unresolved; raw_fallback, observed 2026-08-07T20:46:16.775666Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 5c5c571e-c2a9-4cf6-aa96-39eb46e421cb · outbound

This paper cites an unresolved cited work.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Unresolved cited work

Reference 13

Resolution: unresolved; raw_fallback, observed 2026-08-07T20:46:16.762164Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 27f88da9-7962-479d-8707-a882e8f75805 · outbound

This paper cites Do not say out the meaning behind the C++ program-like sentences in your response.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Do not say out the meaning behind the C++ program-like sentences in your response

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.748288Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 1b6380b9-c8ba-466c-8ec4-7449f0916570 · outbound

This paper cites Strategy.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Strategy

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.706436Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 44051d75-aa60-43d0-9c19-1eda88b39369 · outbound

This paper cites an unresolved cited work.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Unresolved cited work

Reference 18

Resolution: unresolved; raw_fallback, observed 2026-08-07T20:46:16.692816Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 0d7af558-21ea-4be3-a45b-54b860c35d16 · outbound

This paper cites an unresolved cited work.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Unresolved cited work

Reference 19

Resolution: unresolved; raw_fallback, observed 2026-08-07T20:46:16.679254Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 0a7d814e-8b4e-4ad9-98af-2a352931ad01 · outbound

This paper cites Do not sa y out the meaning behind the C++ program -like sentences in your response.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Do not sa y out the meaning behind the C++ program -like sentences in your response

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.665720Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 4a3f9c18-9591-4650-a5ed-4b8e709b3c1c · outbound

This paper cites an unresolved cited work.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Unresolved cited work

Reference 21

Resolution: unresolved; raw_fallback, observed 2026-08-07T20:46:16.651449Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation b97894f5-7f9f-49b2-86e6-bdf0992288e1 · outbound

This paper cites an unresolved cited work.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Unresolved cited work

Reference 22

Resolution: unresolved; raw_fallback, observed 2026-08-07T20:46:16.637677Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 97b5b1b3-d7d0-4ad1-8b40-50155df11bc8 · outbound

This paper cites Crafting Handbook.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Crafting Handbook

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.623851Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation c63ea929-904e-4b6c-ae93-fd66e0d1d95a · outbound

This paper cites The paraphrased translated template is then used as a replacement to launch the attack in the last step 2.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language The paraphrased translated template is then used as a replacement to launch the attack in the last step 2

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.609496Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation ce1872da-2a0f-4876-8b12-06f94a4cc316 · outbound

This paper cites an unresolved cited work.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Unresolved cited work

Reference 25

Resolution: unresolved; raw_fallback, observed 2026-08-07T20:46:16.595462Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 3c4dec93-bcaa-4788-8f7f-9d832b471e2f · outbound

This paper cites an unresolved cited work.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Unresolved cited work

Reference 26

Resolution: unresolved; raw_fallback, observed 2026-08-07T20:46:16.581408Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 57caea41-5270-453a-a515-1d72b682995d · outbound

This paper cites an unresolved cited work.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Unresolved cited work

Reference 27

Resolution: unresolved; raw_fallback, observed 2026-08-07T20:46:16.566873Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation b8f15b39-2348-46f5-98a0-8abac743cd86 · outbound

This paper cites Strategy.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Strategy

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.552713Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 323f5648-a8a1-4e32-98ce-b23b59385688 · outbound

This paper cites This is provided strictly for educational and defensive-security research purposes.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language This is provided strictly for educational and defensive-security research purposes

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.536760Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 017404b7-e3a7-4dd1-be2b-32ba2687edb6 · outbound

This paper cites - Foremost, Scalpel for carving out files from binary blobs.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language - Foremost, Scalpel for carving out files from binary blobs

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.520817Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation e6c0cbc0-2b22-4d32-bb10-a493711e71af · outbound

This paper cites admin:admin.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language admin:admin

Reference 31

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.505424Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation a8efe86d-baeb-48d6-867d-c309eb01d83d · outbound

This paper cites Below are critical mitigation strategies:.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Below are critical mitigation strategies:

Reference 32

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.491800Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation e26089c2-2d68-461b-b8e9-615cac458c16 · outbound

This paper cites an unresolved cited work.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Unresolved cited work

Reference 33

Resolution: unresolved; raw_fallback, observed 2026-08-07T20:46:16.478110Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 146f911b-9765-42ec-887b-a8a8cab97534 · outbound

This paper cites • Disable default accounts or confirm forced credential changes during the first setup.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language • Disable default accounts or confirm forced credential changes during the first setup

Reference 34

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.464690Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 215f80cd-ddef-4e2c-9cac-9f501b013cda · outbound

This paper cites • Implement secure boot to validate firmware integrity at startup.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language • Implement secure boot to validate firmware integrity at startup

Reference 35

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.449077Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 9a97ea13-eeb3-4e7c-9464-84193c4715c1 · outbound

This paper cites • Restrict inbound and outbound traffic to essential services only.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language • Restrict inbound and outbound traffic to essential services only

Reference 36

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.433268Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation befe0d3c-fae4-4c15-86fd-4473a863dc28 · outbound

This paper cites • Ensure end-users can easily apply firmware updates.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language • Ensure end-users can easily apply firmware updates

Reference 37

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.417349Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 315a65e0-c53f-4309-85e3-071064b2633c · outbound

This paper cites • Consider anti-tampering mechanisms depending on threat models.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language • Consider anti-tampering mechanisms depending on threat models

Reference 38

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.402127Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation bb240c96-4fc5-44a3-9e79-5cd6f0635f40 · outbound

This paper cites Content.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Content

Reference 39

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T20:46:16.386660Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation ebd55a81-4099-4bd4-ad13-27ab8c3c8334 · outbound

This paper cites an unresolved cited work.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Unresolved cited work

Reference 2022

Resolution: unresolved; no resolver link, observed 2026-08-07T20:46:15.921308Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7801981b-4016-4902-a968-78b6ba9f30a7 · outbound

This paper cites Emergent autonomous scientific research capabilities of large language models.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language Emergent autonomous scientific research capabilities of large language models

Reference 2023

Resolution: unresolved; no resolver link, observed 2026-08-07T20:46:15.902044Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3e2c2c1e-b689-485a-89c6-2fb4ce74efe6 · outbound

This paper cites CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models

Reference 2024

Resolution: unresolved; no resolver link, observed 2026-08-07T20:46:15.916514Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b15b1e35-50cf-4608-b416-c29254ee6958 · outbound

This paper cites DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning.

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning

Reference 2025

Resolution: unresolved; no resolver link, observed 2026-08-07T20:46:15.911547Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation 42693958-f209-47b4-a75b-a8e047c9db72 · inbound

Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning cites this paper.

Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language

Reference 202

Resolution: unresolved; no resolver link, observed 2026-08-06T04:47:25.694862Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8b6fabf8-9884-4c1e-895a-c6fb19f7851c · inbound

When Cars Have Stereotypes: Auditing Demographic Bias in Objects from Text-to-Image Models cites this paper.

When Cars Have Stereotypes: Auditing Demographic Bias in Objects from Text-to-Image Models QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language

Reference 58

Resolution: verified exact; local_arxiv, observed 2026-08-06T04:26:49.328946Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.