{"as_of":"2026-08-19T16:25:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2ce5ca348b95f0ff5984ebd40eb26ccf3068c183bc7a0b4646c64408ec528d51","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":12,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T23:23:38.880495Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-16T12:40:54.179121Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":"2504.11168","doi":"10.48550/arxiv.2504.11168","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails","venue":"ArXiv.org","work_id":"25e52395-d184-41d7-97d7-e875af90914b","year":2025},"citing_paper":{"arxiv_id":"2504.14668","last_updated":"2025-04-20T16:18:06Z","snapshot_observed_at":"2026-08-02T21:19:40.663901Z","submitted_at":"2025-04-20T16:18:06Z","title":"A Byzantine Fault Tolerance Approach towards AI Safety","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-22T19:15:09.861706Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2504.14668"},"observation_digest":"sha256:b13a4573c51dedfdc881f4c71ad95f6f65ae0252f15d2872e3ac682e36fa46cc","observation_id":"f296bbb6-81ee-408c-a4db-8080aae50f7d","resolution":{"observed_at":"2026-05-22T19:16:58.783644Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-16T12:40:54.179121Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-15T23:23:38.880495Z","title":"”Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails.” arXiv:2504.11168","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.04806","last_updated":"2025-05-13T05:36:34Z","snapshot_observed_at":"2026-08-16T21:53:39.240862Z","submitted_at":"2025-05-07T21:15:40Z","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T23:23:38.880495Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2505.04806"},"observation_digest":"sha256:86277896b28065845ad14cedb25f963f48a8b498ceb8ebd427eb67a15e9fa322","observation_id":"9e36fdde-7b4d-4e3c-a81f-dfbe9af0e352","resolution":{"observed_at":"2026-08-15T23:23:38.880495Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-16T12:40:54.179121Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-15T20:15:17.903838Z","title":"Shibo Hao, Sainbayar Sukhbaatar, DiJia Su, Xian Li, Zhiting Hu, Jason Weston, and Yuandong Tian","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.13775","last_updated":"2026-05-25T19:08:50Z","snapshot_observed_at":"2026-08-16T15:55:27.615593Z","submitted_at":"2025-05-19T23:29:23Z","title":"Beyond Semantics: The Unreasonable Effectiveness of Reasonless Intermediate Tokens","version":4},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T20:15:17.903838Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2505.13775"},"observation_digest":"sha256:98e7dfe59f76bd409dc61a092ff289032f862bc3acff38aab43007edbec9f496","observation_id":"af66bd55-7b18-4682-93de-aead3f4b420e","resolution":{"observed_at":"2026-08-15T20:15:17.903838Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-16T12:40:54.179121Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-07T14:46:03.097933Z","title":"Hackett, L","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.17654","last_updated":"2026-05-27T08:26:10Z","snapshot_observed_at":"2026-08-16T11:02:16.928461Z","submitted_at":"2025-05-23T09:18:01Z","title":"EVADE-Bench: Multimodal Benchmark for Evaluating and Enhancing Evasive Content Detection","version":4},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T14:46:03.097933Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2505.17654"},"observation_digest":"sha256:e2b1bfe774943da44829801dd527cf7ccbc98dfc62f13445f5d27641d2349ecf","observation_id":"656ad9a6-f126-46b6-be17-5d45e6ad8bb2","resolution":{"observed_at":"2026-08-07T14:46:03.097933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-16T12:40:54.179121Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-04T18:34:49.857445Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.09912","last_updated":"2025-09-12T00:57:50Z","snapshot_observed_at":"2026-08-16T14:33:08.027198Z","submitted_at":"2025-09-12T00:57:50Z","title":"When Your Reviewer is an LLM: Biases, Divergence, and Prompt Injection Risks in Peer Review","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T18:34:49.857445Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2509.09912"},"observation_digest":"sha256:97ce95196617204d8273e9468748a139eb28e75ff43aed20b00a3a5e56d6958c","observation_id":"a94fe550-8ff2-4ed4-b795-cb290d71e09d","resolution":{"observed_at":"2026-08-04T18:34:49.857445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-16T12:40:54.179121Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":"2504.11168","doi":"10.48550/arxiv.2504.11168","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails","venue":"ArXiv.org","work_id":"25e52395-d184-41d7-97d7-e875af90914b","year":2025},"citing_paper":{"arxiv_id":"2510.09093","last_updated":"2026-04-10T06:21:50Z","snapshot_observed_at":"2026-08-13T02:32:03.178399Z","submitted_at":"2025-10-10T07:39:01Z","title":"Exploiting Web Search Tools of AI Agents for Data Exfiltration","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-18T08:36:04.262528Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2510.09093"},"observation_digest":"sha256:43f0f782a90f476fc35d72616e6d73735ce99e2ffe10975d053def0a3ad42002","observation_id":"76bcc266-7f5b-4bf9-ae9a-6f331c26adf1","resolution":{"observed_at":"2026-05-18T08:36:07.217273Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-16T12:40:54.179121Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-02T15:56:48.257415Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.18248","last_updated":"2026-07-30T16:35:11Z","snapshot_observed_at":"2026-08-02T23:57:45.082199Z","submitted_at":"2026-04-20T13:27:05Z","title":"Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection","version":4},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T15:56:48.257415Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2604.18248"},"observation_digest":"sha256:3bcc1e78407a4379a20610fa3c287f22799497b468f5add6930decb985d7aaf0","observation_id":"cbe39f0e-1efa-492f-9af0-78502964a57d","resolution":{"observed_at":"2026-08-02T15:56:48.257415Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-16T12:40:54.179121Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":"2504.11168","doi":"10.48550/arxiv.2504.11168","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails","venue":"ArXiv.org","work_id":"25e52395-d184-41d7-97d7-e875af90914b","year":2025},"citing_paper":{"arxiv_id":"2606.03136","last_updated":"2026-06-02T04:24:20Z","snapshot_observed_at":"2026-08-12T19:19:36.319585Z","submitted_at":"2026-06-02T04:24:20Z","title":"PsychoPass: Geometric Profiling of Multi-Turn Adversarial LLM Conversations","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-28T09:55:56.227335Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2606.03136"},"observation_digest":"sha256:f2faebc4816d0925a6e1edd09bf20448c8c75b46c64dfdeb7ada195ca9be87a4","observation_id":"5b6e66dc-3014-4f87-bc5f-81cb25b6775c","resolution":{"observed_at":"2026-07-02T03:36:29.442477Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-16T12:40:54.179121Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":"2504.11168","doi":"10.48550/arxiv.2504.11168","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails","venue":"ArXiv.org","work_id":"25e52395-d184-41d7-97d7-e875af90914b","year":2025},"citing_paper":{"arxiv_id":"2606.05946","last_updated":"2026-06-04T09:46:32Z","snapshot_observed_at":"2026-08-13T02:09:29.001358Z","submitted_at":"2026-06-04T09:46:32Z","title":"Short paper: Models in the dark -- Rectification and erasure under GDPR in ML supply chains","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-28T03:24:45.955589Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2606.05946"},"observation_digest":"sha256:fd17812b7266880ae8247c48a5e6214ca07e9bea3bdd7a766749cafa9f426478","observation_id":"9c7a0633-192b-4021-b033-0c2f1c7bfaa4","resolution":{"observed_at":"2026-06-28T03:31:30.366296Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-16T12:40:54.179121Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":"2504.11168","doi":"10.48550/arxiv.2504.11168","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails","venue":"ArXiv.org","work_id":"25e52395-d184-41d7-97d7-e875af90914b","year":2025},"citing_paper":{"arxiv_id":"2606.14517","last_updated":"2026-06-16T09:28:39Z","snapshot_observed_at":"2026-07-06T23:52:28.557859Z","submitted_at":"2026-06-12T14:49:00Z","title":"From Shield to Target: Denial-of-Service Attacks on LLM-Based Agent Guardrails","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-27T04:42:05.886984Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2606.14517"},"observation_digest":"sha256:0f77b30f029ffa3a9a5009471613c4243c083c75af0d25f5dcc222183d8f39d7","observation_id":"adde285b-0aec-4e56-bb24-13ed97d70d5a","resolution":{"observed_at":"2026-07-03T16:58:43.511470Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-16T12:40:54.179121Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":"2504.11168","doi":"10.48550/arxiv.2504.11168","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails","venue":"ArXiv.org","work_id":"25e52395-d184-41d7-97d7-e875af90914b","year":2025},"citing_paper":{"arxiv_id":"2606.22237","last_updated":"2026-06-20T21:37:12Z","snapshot_observed_at":"2026-08-06T06:38:36.041719Z","submitted_at":"2026-06-20T21:37:12Z","title":"Investigating The Security of Modern AI and Cloud Infrastructure","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-06-26T11:31:39.910784Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2606.22237"},"observation_digest":"sha256:74203feda37093378c98cee923fa12d905fac42d5cdf2471493391471ce5b320","observation_id":"c42ea2ac-1377-4141-8751-65258d51ca10","resolution":{"observed_at":"2026-07-04T08:29:42.302084Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","snapshot_observed_at":"2026-08-16T12:40:54.179121Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","version":3},"cited_work":{"arxiv_id":"2504.11168","doi":"10.48550/arxiv.2504.11168","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.11168","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails","venue":"ArXiv.org","work_id":"25e52395-d184-41d7-97d7-e875af90914b","year":2025},"citing_paper":{"arxiv_id":"2606.24598","last_updated":"2026-06-15T15:27:08Z","snapshot_observed_at":"2026-08-09T05:50:18.067951Z","submitted_at":"2026-06-15T15:27:08Z","title":"Toward Self-Evolution-Ready Workflow Harnesses: A Reversible Migration Path and Convertibility Taxonomy for Expert LLM Pipelines","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-27T03:39:24.426862Z"},"links":{"cited_paper":"/paper/2504.11168","citing_paper":"/paper/2606.24598"},"observation_digest":"sha256:69fe1504081ed2f2f591ecd65be356d96095014fac66d867ea25ad29b3de8f1d","observation_id":"3d867835-2020-452d-a5c9-1100f787cedb","resolution":{"observed_at":"2026-07-03T17:48:46.404918Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2504.11168/citation-record","integrity":"/paper/2504.11168/integrity","json":"/paper/2504.11168/citation-record.json","paper":"/paper/2504.11168"},"outbound":[],"paper":{"arxiv_id":"2504.11168","last_updated":"2025-07-14T15:27:11Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T12:40:54.179121Z","submitted_at":"2025-04-15T13:16:02Z","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 12 inbound Pith citation observations for arXiv:2504.11168."}