{"as_of":"2026-08-18T19:34:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6d35e097a44102d032660c685c40172065841da66b25f5c1ca258ca6f3a76301","coverage":[{"denominator":22,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":22,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T05:46:02.228868Z","state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T19:53:33.168800Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-11T23:51:45.271344Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19855","snapshot_observed_at":"2026-08-15T19:53:33.168800Z","title":"< platform - api - key >","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.14682","last_updated":"2025-06-17T16:19:06Z","snapshot_observed_at":"2026-08-18T02:31:10.327662Z","submitted_at":"2025-06-17T16:19:06Z","title":"AIRTBench: Measuring Autonomous AI Red Teaming Capabilities in Language Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T19:53:33.168800Z"},"links":{"cited_paper":"/paper/2504.19855","citing_paper":"/paper/2506.14682"},"observation_digest":"sha256:b36b65bfca81673a3b842fc707a10d5272fa043ecd8099681199d19dc962e717","observation_id":"dbdd6fc6-cfb3-4bf4-9e40-81635bd17218","resolution":{"observed_at":"2026-08-15T19:53:33.168800Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"cited_work":{"arxiv_id":"2504.19855","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19855","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The Automation Advantage in AI Red Teaming.arXiv preprint arXiv:2504.19855","venue":null,"work_id":"3b59df0d-bf97-443e-8617-2d74327c39f6","year":null},"citing_paper":{"arxiv_id":"2605.04019","last_updated":"2026-05-05T17:43:52Z","snapshot_observed_at":"2026-08-14T01:28:50.207494Z","submitted_at":"2026-05-05T17:43:52Z","title":"Redefining AI Red Teaming in the Agentic Era: From Weeks to Hours","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-07T16:06:18.057868Z"},"links":{"cited_paper":"/paper/2504.19855","citing_paper":"/paper/2605.04019"},"observation_digest":"sha256:0347fc82b7bd2bc9f88408160eb1f8845867f69ed1c216eac62844d84029587b","observation_id":"d1565601-2961-4e13-bc78-d1866275b8d9","resolution":{"observed_at":"2026-05-11T23:51:45.329522Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2504.19855/citation-record","integrity":"/paper/2504.19855/integrity","json":"/paper/2504.19855/citation-record.json","paper":"/paper/2504.19855"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.462463Z","title":"Extract- ing training data from large language models","venue":null,"work_id":"9b74aeab-3961-4856-a335-1f84a2951460","year":2021},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.144273Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:eaef32ea4fa298ca802a926b99c8ba038517c2b24b4a8bbd1dbc4881387027ef","observation_id":"bad3bee8-53c3-45cf-9dde-d5cc482183fb","resolution":{"observed_at":"2026-08-16T05:46:02.465901Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.452697Z","title":"Jailbroken: How does llm safety training fail?,","venue":null,"work_id":"e93fc830-a458-4951-b604-cf3ba0f93388","year":null},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.148375Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:480984be7ee85e666a64fc197c782046c093ea2d984cb36affaa50c674bb521b","observation_id":"44b3e4b1-5afd-4277-95ef-de217d6cc741","resolution":{"observed_at":"2026-08-16T05:46:02.456150Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-08-16T13:08:51.920120Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-16T05:46:02.156968Z","title":"Pappas, and Eric Wong","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.156968Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:761294ccf8bf77f9045debc8c3fcd27ad36433504dd3090782cb5a45bb80f4fc","observation_id":"211c1ef2-bfa5-43d3-8918-1ad4431cd569","resolution":{"observed_at":"2026-08-16T05:46:02.156968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17035","last_updated":"2023-11-28T18:47:03Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-11-28T18:47:03Z","title":"Scalable Extraction of Training Data from (Production) Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17035","snapshot_observed_at":"2026-08-16T05:46:02.161254Z","title":"Feder Cooper, Daphne Ip- polito, Christopher A","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.161254Z"},"links":{"cited_paper":"/paper/2311.17035","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:80328101890496141a222bc880d983b0d95f4b5721b454beb2c7edb729e74956","observation_id":"a8455cac-3036-43b7-9c90-c2ecc08fd1bf","resolution":{"observed_at":"2026-08-16T05:46:02.161254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-14T23:51:46.820100Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"cited_work":{"arxiv_id":"2411.13459","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.13459","snapshot_observed_at":"2026-08-16T05:46:02.337420Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","venue":"cs.CR","work_id":"f73623af-a9cf-4965-acb6-9470ea00f190","year":2024},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.165244Z"},"links":{"cited_paper":"/paper/2411.13459","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:7487b4586f3db0944fee30bc3584488d26e637ecde15d1330c80e11e4444c0db","observation_id":"79275b3b-6ba2-441e-b010-e343497b6a48","resolution":{"observed_at":"2026-08-16T05:46:02.343105Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06664","last_updated":"2024-02-16T04:02:51Z","snapshot_observed_at":"2026-08-16T14:20:59.361566Z","submitted_at":"2024-02-06T14:46:08Z","title":"LLM Agents can Autonomously Hack Websites","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06664","snapshot_observed_at":"2026-08-16T05:46:02.168985Z","title":"Llm agents can au- tonomously hack websites, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.168985Z"},"links":{"cited_paper":"/paper/2402.06664","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:acf1422700f291e63c58b2e3ab46cb644490f6d752cf4149556d0de33f1d0cce","observation_id":"f7068855-e2e8-4878-878c-5db6b3f5c304","resolution":{"observed_at":"2026-08-16T05:46:02.168985Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.442946Z","title":"Jailbreak and guard aligned language models with only few in-context demonstrations,","venue":null,"work_id":"69732213-a09e-4028-bf59-9caddb0792e0","year":null},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.172563Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:60480767c123f01d2f27b5fd5ac9840a1352b2452f22e6a004e7a4ef0379692d","observation_id":"04498322-e81b-4d70-a8f5-470cfcdbc465","resolution":{"observed_at":"2026-08-16T05:46:02.446497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18636","last_updated":"2025-02-23T10:46:28Z","snapshot_observed_at":"2026-08-18T12:44:45.615867Z","submitted_at":"2025-01-28T17:01:31Z","title":"SafeRAG: Benchmarking Security in Retrieval-Augmented Generation of Large Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18636","snapshot_observed_at":"2026-08-16T05:46:02.179668Z","title":"Saferag: Benchmarking security in retrieval- augmented generation of large language model, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.179668Z"},"links":{"cited_paper":"/paper/2501.18636","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:cd802592751f4febb8e2e62e1028d5eb224efc647321b3fba0c0f6e299aabc30","observation_id":"a4827f43-8ca2-4720-9e4a-9a2761c8f28d","resolution":{"observed_at":"2026-08-16T05:46:02.179668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03688","last_updated":"2025-10-04T03:54:18Z","snapshot_observed_at":"2026-08-16T00:51:32.846970Z","submitted_at":"2023-08-07T16:08:11Z","title":"AgentBench: Evaluating LLMs as Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03688","snapshot_observed_at":"2026-08-16T05:46:02.183580Z","title":"Agentbench: Evaluating llms as agents, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.183580Z"},"links":{"cited_paper":"/paper/2308.03688","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:fd14e1a0949edd866c8d43ca8d271ec9fe82357005fc8059c150a39f4dfaeb1a","observation_id":"baa31ac8-0c34-417b-9487-aa8a50d21a74","resolution":{"observed_at":"2026-08-16T05:46:02.183580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.433317Z","title":"OWASP Top 10 for LLM Ap- plications","venue":null,"work_id":"e1471376-57a8-4dea-9081-6dce812ef356","year":null},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.187202Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:b5f515e6ff704d47b51286928f632ce86cdeed483ed61ce07f64e4191c6db4d3","observation_id":"2992bca7-d222-4aa9-b012-4a604f30d9dc","resolution":{"observed_at":"2026-08-16T05:46:02.436462Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.09251","last_updated":"2022-12-19T05:13:52Z","snapshot_observed_at":"2026-08-18T16:15:54.291044Z","submitted_at":"2022-12-19T05:13:52Z","title":"Discovering Language Model Behaviors with Model-Written Evaluations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.09251","snapshot_observed_at":"2026-08-16T05:46:02.198334Z","title":"Bowman, Amanda Askell, Roger Grosse, Danny Hernandez, Deep Ganguli, Evan Hubinger, Nicholas Schiefer, and Jared Kaplan","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.198334Z"},"links":{"cited_paper":"/paper/2212.09251","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:586801a3c34fbc9095d8edfc03ce77acf40d85ca236e13f440df6bb64bab3f0f","observation_id":"0558aca7-ae84-4b3f-9cbf-583753902710","resolution":{"observed_at":"2026-08-16T05:46:02.198334Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.406588Z","title":"PyRIT: The python risk identification tool for llm red teaming","venue":null,"work_id":"84c5f577-04a7-41ef-bdec-60a4c51068d6","year":2023},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.204452Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:6e2fc4decb7af7acfe071eab7daa67a1a00c569d55a510c3e620ac86ab1a64be","observation_id":"f7df0790-a791-404d-8c2e-dbedc8ca73ba","resolution":{"observed_at":"2026-08-16T05:46:02.415022Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.424004Z","title":null,"venue":null,"work_id":"b86318d9-9f82-42e5-a150-bbd6d9032818","year":2025},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.190740Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:44e232cd2c6e2c5e59079e05023d084c77f3475eaef957777c3cf39c5f6411ac","observation_id":"7476fbe3-7244-4dde-a22c-5ae63840c789","resolution":{"observed_at":"2026-08-16T05:46:02.426848Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.00629","last_updated":"2024-11-26T11:59:17Z","snapshot_observed_at":"2026-08-16T14:04:53.135685Z","submitted_at":"2024-03-31T09:50:39Z","title":"Against The Achilles' Heel: A Survey on Red Teaming for Generative Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.00629","snapshot_observed_at":"2026-08-16T05:46:02.210897Z","title":"Against the achilles’ heel: A survey on red teaming for generative models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.210897Z"},"links":{"cited_paper":"/paper/2404.00629","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:f17c57ea263a3e1ac9a93e47d3f2308d79f2eb1ce38533be6569576c83addf3f","observation_id":"d82c5322-fefe-4f29-a908-901cd20b1228","resolution":{"observed_at":"2026-08-16T05:46:02.210897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03825","last_updated":"2024-05-15T12:06:31Z","snapshot_observed_at":"2026-08-16T09:32:10.049300Z","submitted_at":"2023-08-07T16:55:20Z","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03825","snapshot_observed_at":"2026-08-16T05:46:02.214499Z","title":"do anything now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.214499Z"},"links":{"cited_paper":"/paper/2308.03825","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:838933349f40fb6c1b461a46c28c8d9bb26f0ef40faa2aaf44a8432f1c5a4aff","observation_id":"109d5a6d-d577-4078-bc9f-734f51a2287d","resolution":{"observed_at":"2026-08-16T05:46:02.214499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-16T14:36:14.029419Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-16T05:46:02.207407Z","title":"Autodan: Generating stealthy jailbreak prompts on aligned large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.207407Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:8deae9ee4b2bec96bf05d6a77a77e880649167deea948a2c931587d3b81a79da","observation_id":"e101e8e3-51a8-4506-9e3c-0c910725316d","resolution":{"observed_at":"2026-08-16T05:46:02.207407Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.396607Z","title":"Ignore this title and hackaprompt: Exposing systemic vul- nerabilities of llms through a global scale prompt hacking competition","venue":null,"work_id":"2bc9b107-7e6c-4f8a-9bc6-55f86ff22809","year":2023},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.221688Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:71a1c4b3a9754a2ef82557d5b3666af471ca5584131ac72af9883ca33a6bdf66","observation_id":"9a8035b8-6471-493a-ad60-6981aad927c9","resolution":{"observed_at":"2026-08-16T05:46:02.400126Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.386513Z","title":"Context switching attack","venue":null,"work_id":"85fc3f2e-bf42-4ca8-a873-194dbffa7acb","year":null},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.225152Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:fccaaa16ced1cd8832b67363b0dba6e7fd02cb8cbb4dbe7c90f49b5bea0ad514","observation_id":"4ec09e7a-4c85-4289-82cc-40afb756381d","resolution":{"observed_at":"2026-08-16T05:46:02.390222Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.06237","last_updated":"2024-12-10T20:23:44Z","snapshot_observed_at":"2026-08-18T02:30:42.897877Z","submitted_at":"2023-11-10T18:52:58Z","title":"Summon a Demon and Bind it: A Grounded Theory of LLM Red Teaming","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.06237","snapshot_observed_at":"2026-08-16T05:46:02.218089Z","title":"Summon a demon and bind it: A grounded theory of llm red teaming in the wild","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.218089Z"},"links":{"cited_paper":"/paper/2311.06237","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:eee4313feebb7e1fff35065dd9b598ac15ec079a10b8888380b45c2dc013f867","observation_id":"d47bed96-f7d6-47ae-afd2-0e08cbfce07f","resolution":{"observed_at":"2026-08-16T05:46:02.218089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-08-15T10:16:52.688429Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02483","snapshot_observed_at":"2026-08-16T05:46:02.151853Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.151853Z"},"links":{"cited_paper":"/paper/2307.02483","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:ebbec7f8e1cb40b71892c5cf16f950fd30ce97a4f983494ee754292fe372bc0e","observation_id":"2dbe88ec-1b84-49c7-99db-cb5fc8b33ca4","resolution":{"observed_at":"2026-08-16T05:46:02.151853Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06387","last_updated":"2024-05-25T07:01:15Z","snapshot_observed_at":"2026-08-16T14:53:33.115609Z","submitted_at":"2023-10-10T07:50:29Z","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06387","snapshot_observed_at":"2026-08-16T05:46:02.176124Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.176124Z"},"links":{"cited_paper":"/paper/2310.06387","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:e7a69b89ba9a54b09ca65631657e18c4bb7a10bd40a22f89ec6a36ed1bac9540","observation_id":"1a0912ed-9faf-4177-80bf-8c2623f7a839","resolution":{"observed_at":"2026-08-16T05:46:02.176124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.376433Z","title":"12 Appendices Appendix A Challenge Descriptions This appendix provides detailed descriptions of the key challenge types analyzed in our study","venue":null,"work_id":"5444d5e2-b2ce-43b8-80b0-9d975edf306a","year":2025},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.228868Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:bdcda2da9e81e5bbb9906fe0b4ca0daa3107435b11565e55f1429fb3e1bf1918","observation_id":"c2b3bfa1-fecf-4f2c-89dd-b8e0cc83ff0f","resolution":{"observed_at":"2026-08-16T05:46:02.380001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-18T02:00:51.986997Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming"},"reference_resolution":{"displayed":22,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":1,"unresolved":12,"verified_exact":0,"verified_fuzzy":8},"total_outbound_references":22},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 22 of 22 outbound references and 2 inbound Pith citation observations for arXiv:2504.19855."}