{"as_of":"2026-08-21T03:55:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:58aaca79cab066008efc58f0f1cf9084a5db9aaa0f22568ededd4f2ce77409ec","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":10,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":10,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":10,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T21:50:25.394358Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T04:09:34.490736Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-18T13:06:50.926469Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-08-06T21:50:25.394358Z","title":"and Arel, R","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.02956","last_updated":"2025-06-29T23:28:55Z","snapshot_observed_at":"2026-08-18T02:19:50.093237Z","submitted_at":"2025-06-29T23:28:55Z","title":"A Representation Engineering Perspective on the Effectiveness of Multi-Turn Jailbreaks","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-06T21:50:25.394358Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2507.02956"},"observation_digest":"sha256:4d26f2d25d5b85c3fb5a90e1227f1b9bea667faea21c6f7285ae35a3df9d173c","observation_id":"1fb5d3d7-f02d-4e4d-bae5-75e22877ec81","resolution":{"observed_at":"2026-08-06T21:50:25.394358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-18T13:06:50.926469Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-08-02T23:16:37.266923Z","title":"and Arel, R","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.14399","last_updated":"2026-05-28T04:31:34Z","snapshot_observed_at":"2026-08-17T11:24:02.533527Z","submitted_at":"2026-02-16T02:15:58Z","title":"Multi-Turn Adaptive Prompting Attack on Large Vision-Language Models","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T23:16:37.266923Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2602.14399"},"observation_digest":"sha256:2d3dfa2c8bc69733b6aaf9ef698ec4ba11567b3d5753dbfc1e3ba2eee660e518","observation_id":"00241a2f-ca3c-41a2-a0f1-76fda022f846","resolution":{"observed_at":"2026-08-02T23:16:37.266923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-18T13:06:50.926469Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":"2503.10619","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-07-04T04:09:34.490736Z","title":"Siege: Autonomous multi-turn jailbreaking of large language models with tree search","venue":null,"work_id":"a422fb6d-f9ef-4193-8747-f6931bc43630","year":2025},"citing_paper":{"arxiv_id":"2604.04060","last_updated":"2026-04-05T11:06:13Z","snapshot_observed_at":"2026-08-18T00:04:26.598904Z","submitted_at":"2026-04-05T11:06:13Z","title":"CoopGuard: Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Round Attacks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-13T17:06:46.917177Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2604.04060"},"observation_digest":"sha256:c068986dd5024b02d514a7b7c733043ab31075e3d923203bef812e2f6b1710cf","observation_id":"60c8bc56-eba8-4e57-ad09-b85ac467a866","resolution":{"observed_at":"2026-05-13T17:08:00.744766Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-18T13:06:50.926469Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":"2503.10619","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-07-04T04:09:34.490736Z","title":"Siege: Autonomous multi-turn jailbreaking of large language models with tree search","venue":null,"work_id":"a422fb6d-f9ef-4193-8747-f6931bc43630","year":2025},"citing_paper":{"arxiv_id":"2604.10326","last_updated":"2026-04-11T19:19:05Z","snapshot_observed_at":"2026-08-13T01:40:06.438063Z","submitted_at":"2026-04-11T19:19:05Z","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-05-10T15:19:46.920899Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2604.10326"},"observation_digest":"sha256:2d120733e179ea7c44520fedb2c7b4cb7101465901a3474500ecb7138099cec2","observation_id":"94ea1ed8-5907-4a23-9283-27f0b9c9f27d","resolution":{"observed_at":"2026-05-11T10:46:04.396391Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-18T13:06:50.926469Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":"2503.10619","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-07-04T04:09:34.490736Z","title":"Siege: Autonomous multi-turn jailbreaking of large language models with tree search","venue":null,"work_id":"a422fb6d-f9ef-4193-8747-f6931bc43630","year":2025},"citing_paper":{"arxiv_id":"2604.11309","last_updated":"2026-04-13T11:12:30Z","snapshot_observed_at":"2026-08-10T14:33:23.383610Z","submitted_at":"2026-04-13T11:12:30Z","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-10T16:07:31.602378Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2604.11309"},"observation_digest":"sha256:93e469c640cec6fc8e64a464511c1650c2567486ea41d3404e91afebd0cafee7","observation_id":"327a4694-66bf-4d44-aebf-d2abf2b97f8c","resolution":{"observed_at":"2026-05-11T09:16:04.018620Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-18T13:06:50.926469Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":"2503.10619","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-07-04T04:09:34.490736Z","title":"Siege: Autonomous multi-turn jailbreaking of large language models with tree search","venue":null,"work_id":"a422fb6d-f9ef-4193-8747-f6931bc43630","year":2025},"citing_paper":{"arxiv_id":"2605.05058","last_updated":"2026-05-06T15:53:17Z","snapshot_observed_at":"2026-07-06T23:17:43.402046Z","submitted_at":"2026-05-06T15:53:17Z","title":"SoK: Robustness in Large Language Models against Jailbreak Attacks","version":1},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-05-08T16:42:41.137808Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2605.05058"},"observation_digest":"sha256:0e2f60c0be4ca251ccf0be9770d71a31f083ec348596175aa96f144dc9583809","observation_id":"71308c43-9c63-49b1-91d1-173514c5c98b","resolution":{"observed_at":"2026-05-11T18:01:08.798710Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-18T13:06:50.926469Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":"2503.10619","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-07-04T04:09:34.490736Z","title":"Siege: Autonomous multi-turn jailbreaking of large language models with tree search","venue":null,"work_id":"a422fb6d-f9ef-4193-8747-f6931bc43630","year":2025},"citing_paper":{"arxiv_id":"2606.20408","last_updated":"2026-06-19T01:38:27Z","snapshot_observed_at":"2026-08-12T14:23:52.851966Z","submitted_at":"2026-06-18T15:57:53Z","title":"NRT-Bench: Benchmarking Multi-Turn Red-Teaming of LLM Operator Agents in Safety-Critical Control Rooms","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-26T17:13:26.201462Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2606.20408"},"observation_digest":"sha256:ece54be552bf7498f0595287d2a60da0ad1918ccdcb6414b8b9fb58d3e30b4dd","observation_id":"9a436609-e5ba-4ade-9b4f-0c3becbc2a21","resolution":{"observed_at":"2026-07-04T04:09:34.492676Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-18T13:06:50.926469Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-07-30T20:11:00.877932Z","title":"arXiv preprint arXiv:2503.10619 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-20T16:00:18.236078Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.877932Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:d6f7316fd5b12b8946123fc95f2eb2cacbeb6a15d62d2d70da9a32051f7bf571","observation_id":"0baaf9e3-a3da-45fd-9117-c5c074ef5db7","resolution":{"observed_at":"2026-07-30T20:11:00.877932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-18T13:06:50.926469Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-08-04T01:16:12.344757Z","title":"Siege: Autonomous multi-turn jailbreaking of large language models with tree search,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00134","last_updated":"2026-07-31T14:04:49Z","snapshot_observed_at":"2026-08-14T22:54:09.591958Z","submitted_at":"2026-07-31T14:04:49Z","title":"Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:12.344757Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2608.00134"},"observation_digest":"sha256:440e7128e5c9ce3d1160f384aa5c73ce5f8c4f57d65242db8b0349fec9091d3d","observation_id":"bec4a2cb-5209-4cbe-9ebe-e9c849fb47d7","resolution":{"observed_at":"2026-08-04T01:16:12.344757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-18T13:06:50.926469Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-08-06T00:32:01.874179Z","title":"Tempest: Autonomous multi-turn jailbreak- ing of large language models with tree search,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01117","last_updated":"2026-08-02T09:24:08Z","snapshot_observed_at":"2026-08-20T03:31:31.155237Z","submitted_at":"2026-08-02T09:24:08Z","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T00:32:01.874179Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2608.01117"},"observation_digest":"sha256:f13c02361c503e7dd0993b8f5db2ae04b329e06d34883ddf9a8b7ae4358d2ac9","observation_id":"aa2b3761-a635-4c4f-b46f-7bfb360c4877","resolution":{"observed_at":"2026-08-06T00:32:01.874179Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2503.10619/citation-record","integrity":"/paper/2503.10619/integrity","json":"/paper/2503.10619/citation-record.json","paper":"/paper/2503.10619"},"outbound":[],"paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","latest_version":5,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-18T13:06:50.926469Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 10 inbound Pith citation observations for arXiv:2503.10619."}