{"as_of":"2026-08-10T11:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:663faa28027fab5dd339d36735125c560efd4c8ea2542ec854c9c78983ce3967","coverage":[{"denominator":44,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":44,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:08:14.543009Z","state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T22:32:12.148792Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T08:55:35.566529Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.16241","snapshot_observed_at":"2026-08-05T22:32:12.148792Z","title":"Three minds, one legend: Jailbreak large reasoning model with adaptive stacked ciphers","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.06841","last_updated":"2025-08-09T05:48:30Z","snapshot_observed_at":"2026-08-09T08:48:11.649795Z","submitted_at":"2025-08-09T05:48:30Z","title":"Memory Enhanced Fractional-Order Dung Beetle Optimization for Photovoltaic Parameter Identification","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T22:32:12.148792Z"},"links":{"cited_paper":"/paper/2505.16241","citing_paper":"/paper/2508.06841"},"observation_digest":"sha256:767934d107014c32643af2005e00be9311045a5816177ea8f54e011d78d6acbb","observation_id":"30942112-db93-4d3d-a117-cbb91f2e1750","resolution":{"observed_at":"2026-08-05T22:32:12.148792Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.16241","snapshot_observed_at":"2026-08-05T10:39:06.939655Z","title":"Three minds, one legend: Jailbreak large reasoning model with adaptive stacked ciphers","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.03871","last_updated":"2025-09-04T04:12:31Z","snapshot_observed_at":"2026-08-08T03:54:26.940042Z","submitted_at":"2025-09-04T04:12:31Z","title":"A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models","version":1},"reference_index":120,"source":"pdf_text","source_observed_at":"2026-08-05T10:39:06.939655Z"},"links":{"cited_paper":"/paper/2505.16241","citing_paper":"/paper/2509.03871"},"observation_digest":"sha256:54f1cc44a224c67e459c44df1f5cad40fe82f2a49b4014fde9d52f02ae5100a8","observation_id":"1109872e-b4c0-4fd8-827a-e6fbba912390","resolution":{"observed_at":"2026-08-05T10:39:06.939655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"cited_work":{"arxiv_id":"2505.16241","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.16241","snapshot_observed_at":"2026-07-01T08:55:35.566529Z","title":"arXiv preprint arXiv:2505.16241 , year=","venue":null,"work_id":"5100f952-d17e-4e7f-b1bf-2cbb7a5c9187","year":null},"citing_paper":{"arxiv_id":"2606.31748","last_updated":"2026-06-30T14:38:49Z","snapshot_observed_at":"2026-07-07T00:05:27.130060Z","submitted_at":"2026-06-30T14:38:49Z","title":"Addressing Over-Refusal in LLMs with Competing Rewards","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-07-01T06:59:12.695984Z"},"links":{"cited_paper":"/paper/2505.16241","citing_paper":"/paper/2606.31748"},"observation_digest":"sha256:482d6323c95cf69c8df57a10dc3272297bebd39dc008744a6c17c87ef497861f","observation_id":"22032f0c-b058-48ae-8cd8-09314fedddb6","resolution":{"observed_at":"2026-07-01T08:55:35.568156Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.16241/citation-record","integrity":"/paper/2505.16241/integrity","json":"/paper/2505.16241/citation-record.json","paper":"/paper/2505.16241"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:10.013196Z","title":"URL: \" 'urlintro :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:10.013196Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:afe18d5a7b0c4f2641efba6c863a37e81de8e2446cce8e8ac9ac722e9c1dd00c","observation_id":"4c1b672d-7f1f-4f02-9e41-a8538a2c4681","resolution":{"observed_at":"2026-08-07T15:08:10.013196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:10.091406Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:10.091406Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:5344d697eb5facf2e40f4a6464b34cdfe883bbabe3b340901236bcd4d1de72a7","observation_id":"842272fb-d7fd-47ba-a7eb-74894f16d6d4","resolution":{"observed_at":"2026-08-07T15:08:10.091406Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11746","last_updated":"2024-02-19T00:18:09Z","snapshot_observed_at":"2026-08-01T14:23:46.782297Z","submitted_at":"2024-02-19T00:18:09Z","title":"Language Models are Homer Simpson! Safety Re-Alignment of Fine-tuned Language Models through Task Arithmetic","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11746","snapshot_observed_at":"2026-08-07T15:08:10.179155Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:10.179155Z"},"links":{"cited_paper":"/paper/2402.11746","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:69040fcc892bd2996a2fe233996af3b52a8dfeaba32c9a5b0f0212971546b881","observation_id":"849d9c24-d18f-4223-9b12-44045be0e502","resolution":{"observed_at":"2026-08-07T15:08:10.179155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-07T15:08:10.281564Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:10.281564Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:2d37d43b3de180111b66f21d0e2060e30fc2048c9109e994afcf90d2781af57c","observation_id":"6689ae53-b9b6-4afa-b065-dde654a29e0c","resolution":{"observed_at":"2026-08-07T15:08:10.281564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-08-07T15:08:10.385489Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:10.385489Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:6953b8f699e08d66211736347d3029df51b075cb47b982669f3e4e8a96823cb4","observation_id":"a9a4d8bb-d625-499b-9826-3fddc9551383","resolution":{"observed_at":"2026-08-07T15:08:10.385489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:16.897544Z","title":null,"venue":null,"work_id":"31775f2c-c28b-423b-bd22-a42de1b53b0d","year":2025},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:10.472961Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:f8375300da9e28127c65414cc66819d4a1f27303af6e09f695130ac4757111e4","observation_id":"996d0c5a-45ec-469d-9fe8-3194b26070c2","resolution":{"observed_at":"2026-08-07T15:08:16.980238Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18725","last_updated":"2024-10-03T17:10:09Z","snapshot_observed_at":"2026-08-09T05:09:04.515852Z","submitted_at":"2024-06-26T19:48:48Z","title":"Jailbreaking LLMs with Arabic Transliteration and Arabizi","version":2},"cited_work":{"arxiv_id":"2406.18725","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.18725","snapshot_observed_at":"2026-08-07T15:08:15.292446Z","title":"Jailbreaking LLMs with Arabic Transliteration and Arabizi","venue":"cs.LG","work_id":"e6742ef1-7278-4253-a58e-91233d334905","year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:10.590832Z"},"links":{"cited_paper":"/paper/2406.18725","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:1ed9d12d984e0832aec76d1247dc61452ebea2066d37a5c92e3a4291e242ffd4","observation_id":"9a38716b-1cb2-417c-9ab1-a2e615be825a","resolution":{"observed_at":"2026-08-07T15:08:15.375252Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-07T15:08:10.708938Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:10.708938Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:23657a7ac92791e780dd1b0d24ca9df86c324699dc5998d7646bcb22a5ac5b3d","observation_id":"b8616f44-5870-4a8b-b0c4-099f652cb28c","resolution":{"observed_at":"2026-08-07T15:08:10.708938Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:10.877829Z","title":"competency","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:10.877829Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:f8faff1f365e7bf215d486276ad4ead5502cbf3b942756b0d6f6ecbfdb0b113a","observation_id":"73e4b2fc-481e-436f-b2f4-63a2bd89d22c","resolution":{"observed_at":"2026-08-07T15:08:10.877829Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:10.953103Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:10.953103Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:08e062724ff4fb62757ffd47f6515170b4173d9d3a3a27499a59a402a1f01838","observation_id":"2642f6e3-c4c5-48b8-a19f-971f2f09399e","resolution":{"observed_at":"2026-08-07T15:08:10.953103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16720","last_updated":"2026-04-30T02:46:40Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-21T18:04:31Z","title":"OpenAI o1 System Card","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16720","snapshot_observed_at":"2026-08-07T15:08:11.057130Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:11.057130Z"},"links":{"cited_paper":"/paper/2412.16720","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:c240b53051109575a09fd2814e345d12223f6084af6f4c14c95069b17f9f95ca","observation_id":"2201b649-e45a-482b-9804-3957c3580cda","resolution":{"observed_at":"2026-08-07T15:08:11.057130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:11.148389Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:11.148389Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:6023875f0d4b4a2bed326eb911e42e3d2e6730bfad1f9cb84bf1e6c743009a33","observation_id":"9415c3a9-366e-4677-a2cc-9792ee55f84c","resolution":{"observed_at":"2026-08-07T15:08:11.148389Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-07T15:08:11.240128Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:11.240128Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:8f1646317ab381f5620d48450b5b8068675b425d377d6d3dc5b26e972cf5c801","observation_id":"49614ecf-7ebe-4437-822e-8195123ddfda","resolution":{"observed_at":"2026-08-07T15:08:11.240128Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14872","last_updated":"2024-02-27T13:49:22Z","snapshot_observed_at":"2026-08-06T14:36:18.172649Z","submitted_at":"2024-02-21T15:13:50Z","title":"Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.14872","snapshot_observed_at":"2026-08-07T15:08:11.328978Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:11.328978Z"},"links":{"cited_paper":"/paper/2402.14872","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:d8602e64f1c190950b885a5be41447d6464600841249ba4cccfbf060118bf0ac","observation_id":"0978c1ba-9f36-4cde-8b2f-fd9a7e59afed","resolution":{"observed_at":"2026-08-07T15:08:11.328978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18844","last_updated":"2024-12-16T06:59:33Z","snapshot_observed_at":"2026-07-06T18:37:43.309281Z","submitted_at":"2024-06-27T02:31:03Z","title":"Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18844","snapshot_observed_at":"2026-08-07T15:08:11.420034Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:11.420034Z"},"links":{"cited_paper":"/paper/2406.18844","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:29a03f8266e9b840775be09906f10862cd95e1bf594298ff69b053d39704cbff","observation_id":"24f83c2e-78df-41c0-ba74-c7b9988f8f20","resolution":{"observed_at":"2026-08-07T15:08:11.420034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.15512","last_updated":"2025-04-26T16:17:55Z","snapshot_observed_at":"2026-08-07T16:00:24.594893Z","submitted_at":"2025-04-22T01:18:42Z","title":"T2VShield: Model-Agnostic Jailbreak Defense for Text-to-Video Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.15512","snapshot_observed_at":"2026-08-07T15:08:11.529524Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:11.529524Z"},"links":{"cited_paper":"/paper/2504.15512","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:9abf7fc8f2ea3f37a4fbc4796993ead797a651a0bf9a646fd6d92cdda02673cc","observation_id":"ab4cf202-2dda-473e-b23a-30f7ef854cac","resolution":{"observed_at":"2026-08-07T15:08:11.529524Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:16.712238Z","title":null,"venue":null,"work_id":"af0ceb8a-09ff-41b0-a245-abd40890dac5","year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:11.649117Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:1d8bf36a31a3c6380c132bd9b61f128f1ad8dfc840925eed3ce4e45ae40632dd","observation_id":"406d08a0-a2da-400f-99ac-864b1a4eec13","resolution":{"observed_at":"2026-08-07T15:08:16.803122Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06679","last_updated":"2025-06-17T07:44:28Z","snapshot_observed_at":"2026-08-08T06:57:13.896585Z","submitted_at":"2025-05-10T16:04:52Z","title":"T2V-OptJail: Discrete Prompt Optimization for Text-to-Video Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.06679","snapshot_observed_at":"2026-08-07T15:08:11.764325Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:11.764325Z"},"links":{"cited_paper":"/paper/2505.06679","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:65d8e5f437f2e4899d3c24eb1119909cbe944000c280b64a6e8cd894c1df617a","observation_id":"20745b04-e4e5-4837-9da9-5f7f323732cb","resolution":{"observed_at":"2026-08-07T15:08:11.764325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-07T15:08:11.854004Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:11.854004Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:dbd45996af6661714a4792646a4ab9f0911db8d7879a8687e42877f0ffaf5447","observation_id":"3346b4c0-e487-4b75-8cb4-eb32e42c1b91","resolution":{"observed_at":"2026-08-07T15:08:11.854004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:11.955005Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:11.955005Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:b3ec0d3b1db30ac295a248912c4af0299144e65bd52da86d1b0809c3de26c1fc","observation_id":"6281ee7f-94e1-4eda-aac4-38d07a1d59dd","resolution":{"observed_at":"2026-08-07T15:08:11.955005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05206","snapshot_observed_at":"2026-08-07T15:08:12.052472Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:12.052472Z"},"links":{"cited_paper":"/paper/2502.05206","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:425d2f9dadd968c79de9c7a204228d0e98e183322a8114c0027b5ba2bb330a83","observation_id":"d2af6c33-b3e3-453c-89a1-ae2edb3ef93c","resolution":{"observed_at":"2026-08-07T15:08:12.052472Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-08-07T15:08:12.175925Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:12.175925Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:8c60690d9c8f905c8dbeae33f7ccfcc509b3e3865445506598d0316c5a52a481","observation_id":"9790d393-c343-4545-8b55-a98a6f6788d5","resolution":{"observed_at":"2026-08-07T15:08:12.175925Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02119","last_updated":"2024-10-31T15:57:42Z","snapshot_observed_at":"2026-07-06T16:56:46.051958Z","submitted_at":"2023-12-04T18:49:23Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.02119","snapshot_observed_at":"2026-08-07T15:08:12.291073Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:12.291073Z"},"links":{"cited_paper":"/paper/2312.02119","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:5c181fa60b366447f28c6b3e4b65bac4be03bf44bd04f891012aad0e4183fec4","observation_id":"5646af85-d091-4089-b950-bdd0134e55cd","resolution":{"observed_at":"2026-08-07T15:08:12.291073Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03286","last_updated":"2022-02-07T15:22:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-02-07T15:22:17Z","title":"Red Teaming Language Models with Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03286","snapshot_observed_at":"2026-08-07T15:08:12.403076Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:12.403076Z"},"links":{"cited_paper":"/paper/2202.03286","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:b4e80524fef52ff4f5eb164940e0a85edfe0dc1ae249573bcfc241b8b72892bc","observation_id":"acef42ef-e969-400a-9052-5291e69e0958","resolution":{"observed_at":"2026-08-07T15:08:12.403076Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.10260","last_updated":"2024-08-27T03:32:47Z","snapshot_observed_at":"2026-08-04T21:32:35.483431Z","submitted_at":"2024-02-15T18:58:09Z","title":"A StrongREJECT for Empty Jailbreaks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.10260","snapshot_observed_at":"2026-08-07T15:08:12.513543Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:12.513543Z"},"links":{"cited_paper":"/paper/2402.10260","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:ce9e65eddf3dc811a31a82c173b126ef398309658467955b36e10515738213af","observation_id":"c2c05a2c-4dc6-49a9-b529-55641c401c5c","resolution":{"observed_at":"2026-08-07T15:08:12.513543Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:16.421595Z","title":null,"venue":null,"work_id":"7d420a5c-7383-44f2-83ad-917a5fcae932","year":1998},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:12.624820Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:a35889b8c116c6f59829822361649aa68aaf47d6294ab5010d137ea825d5399d","observation_id":"7b730ce9-bdca-4306-94f2-f43f721be46f","resolution":{"observed_at":"2026-08-07T15:08:16.599936Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:16.107466Z","title":"Unlocking the mysteries of openai o1: A survey of the reasoning abilities of large language models","venue":null,"work_id":"3abce5c4-6e01-4d9d-80d9-5f3ccf9d6a25","year":null},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:12.708824Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:d0a51a69f1b75ae6c0eec9306d447dfaa826a7122ff894d758961869a55a7176","observation_id":"74f46006-0343-4b81-b30a-bef09cbc0c66","resolution":{"observed_at":"2026-08-07T15:08:16.261350Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.15585","last_updated":"2025-06-09T02:36:20Z","snapshot_observed_at":"2026-08-09T14:46:30.842437Z","submitted_at":"2025-04-22T05:02:49Z","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.15585","snapshot_observed_at":"2026-08-07T15:08:12.817031Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:12.817031Z"},"links":{"cited_paper":"/paper/2504.15585","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:2c9bfc6b3f0af8769dc33a5feb0b7a399b228fca97ab8e2795b1c442b22af24e","observation_id":"a343fa56-fc0b-4d7a-b500-dfdcc7e4929e","resolution":{"observed_at":"2026-08-07T15:08:12.817031Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.10400","last_updated":"2025-02-24T08:57:10Z","snapshot_observed_at":"2026-08-07T21:53:28.691375Z","submitted_at":"2024-12-05T16:10:42Z","title":"Reinforcement Learning Enhanced LLMs: A Survey","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.10400","snapshot_observed_at":"2026-08-07T15:08:12.936464Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:12.936464Z"},"links":{"cited_paper":"/paper/2412.10400","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:2e0af9db51363cde0e40bd5d871d28a27eedb882fd56b528303d9a8c86996fda","observation_id":"3b203e7a-088c-4dbc-b3f4-92ca1cebad40","resolution":{"observed_at":"2026-08-07T15:08:12.936464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:13.009515Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:13.009515Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:d370b89db55eb6b0e710982e1bd01b8fde230d50e994262b33055346ecae08b0","observation_id":"b63a3739-e9f8-48d5-aee8-aa23b6e0b609","resolution":{"observed_at":"2026-08-07T15:08:13.009515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:13.082104Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:13.082104Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:2891631537223c290003f34f1348ab78ac37211c7740c5e320f722804776d05e","observation_id":"3ecc13ea-2460-4355-a35d-06b8512ff6f1","resolution":{"observed_at":"2026-08-07T15:08:13.082104Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:15.796369Z","title":null,"venue":null,"work_id":"52d6a196-176f-48f7-a025-cb3473086b22","year":2025},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:13.134699Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:9a0c56d0b46d6c2e22a1f947d8f91e7bd80c110d1ce309cd197e6160b7dcf361","observation_id":"1fd7c3da-20e8-4740-8381-164fa827940e","resolution":{"observed_at":"2026-08-07T15:08:15.910132Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.18927","last_updated":"2024-10-24T17:14:40Z","snapshot_observed_at":"2026-07-06T19:39:15.025945Z","submitted_at":"2024-10-24T17:14:40Z","title":"SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.18927","snapshot_observed_at":"2026-08-07T15:08:13.267384Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:13.267384Z"},"links":{"cited_paper":"/paper/2410.18927","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:b75f2ee621da40d3793e9069f5720af2996dcc8bb897b4b69332b17ba2a0dfd9","observation_id":"96e76b2c-24e4-4577-8662-b9ffa4a0b0f0","resolution":{"observed_at":"2026-08-07T15:08:13.267384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.04031","last_updated":"2024-07-01T14:25:23Z","snapshot_observed_at":"2026-08-05T18:40:45.767406Z","submitted_at":"2024-06-06T13:00:42Z","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.04031","snapshot_observed_at":"2026-08-07T15:08:13.366909Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:13.366909Z"},"links":{"cited_paper":"/paper/2406.04031","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:00c5ee245bcbbebbc4c3cdf466d87d39c63dd27da10c03dcc1ff723fa63e67da","observation_id":"0c0fbad8-071f-44db-a668-11ea5518a66c","resolution":{"observed_at":"2026-08-07T15:08:13.366909Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-08-09T20:00:14.440806Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-08-07T15:08:13.482555Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:13.482555Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:d6b5639bde25161945fa95426563c246edcb57d8d24ffafdb6ad3853bc031219","observation_id":"29163983-79da-408c-a638-0302f27022cf","resolution":{"observed_at":"2026-08-07T15:08:13.482555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20653","last_updated":"2025-06-17T03:03:45Z","snapshot_observed_at":"2026-08-06T16:41:41.743961Z","submitted_at":"2024-05-31T07:41:03Z","title":"Mind the Inconspicuous: Revealing the Hidden Weakness in Aligned LLMs' Refusal Boundaries","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20653","snapshot_observed_at":"2026-08-07T15:08:13.604580Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:13.604580Z"},"links":{"cited_paper":"/paper/2405.20653","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:a19f851eb3dea0590d4f6ff98d2e4f351f757a9286a2e191f479c373d926ad78","observation_id":"4f20adc8-4015-4d0d-8edb-b81a6092d858","resolution":{"observed_at":"2026-08-07T15:08:13.604580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.06463","last_updated":"2024-03-26T04:23:12Z","snapshot_observed_at":"2026-07-06T16:05:31.757410Z","submitted_at":"2023-08-12T04:05:57Z","title":"GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.06463","snapshot_observed_at":"2026-08-07T15:08:13.720278Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:13.720278Z"},"links":{"cited_paper":"/paper/2308.06463","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:faf2c9669c3c7d606f421682aa912f579d5580fa62a707b448a666ac88a5e793","observation_id":"25844ae7-1cff-4366-a129-75d7593c59d1","resolution":{"observed_at":"2026-08-07T15:08:13.720278Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04783","last_updated":"2024-11-14T18:14:00Z","snapshot_observed_at":"2026-08-07T06:17:52.920196Z","submitted_at":"2024-03-02T16:52:22Z","title":"AutoDefense: Multi-Agent LLM Defense against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04783","snapshot_observed_at":"2026-08-07T15:08:13.830889Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:13.830889Z"},"links":{"cited_paper":"/paper/2403.04783","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:12766b8017c3915071640b5c7ac3199415336f5976d2c249976fdd85fec83c78","observation_id":"e12043b5-dbbc-450a-a216-c17e72b6f728","resolution":{"observed_at":"2026-08-07T15:08:13.830889Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:13.953631Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:13.953631Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:04062c6524b0cd51cee7c6298f2c774fb21c2ce9ed9cdc24812582f9be69f95d","observation_id":"667e697a-672b-485b-9900-d430ba70414a","resolution":{"observed_at":"2026-08-07T15:08:13.953631Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:15.580802Z","title":null,"venue":null,"work_id":"e43a0be7-07da-4fac-b4cf-17eaab35222d","year":2025},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:14.065753Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:4625b8acf5937fb5a33c20dc7247e1d0961dac5f806086d3b01a66d94faaf33f","observation_id":"697aa7a2-38a0-4f8d-bcc5-a70e85a1b6bb","resolution":{"observed_at":"2026-08-07T15:08:15.661547Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:14.180300Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:14.180300Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:e844c7cae3630711340f1036d5ff2cbcc7743d84a7fe89079535b181c5c3fbf0","observation_id":"f8e14ade-c37b-4896-b322-a92976b6b3b1","resolution":{"observed_at":"2026-08-07T15:08:14.180300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.10625","last_updated":"2023-04-16T22:08:08Z","snapshot_observed_at":"2026-08-06T09:00:42.886249Z","submitted_at":"2022-05-21T15:34:53Z","title":"Least-to-Most Prompting Enables Complex Reasoning in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.10625","snapshot_observed_at":"2026-08-07T15:08:14.300825Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:14.300825Z"},"links":{"cited_paper":"/paper/2205.10625","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:09b3f07a187f5c0446566f3e942f5bc957f7ee25fd0ca4e19b80fdd4716bba1a","observation_id":"a1fc2be8-4a5e-4c94-ad3d-3782724107aa","resolution":{"observed_at":"2026-08-07T15:08:14.300825Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:14.434298Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:14.434298Z"},"links":{"citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:0490c6767c4919fe888c6accdb3650cbe63f0de23a4acf1a6ad7134245e9c0e3","observation_id":"ce895138-2fb8-4bd4-88c0-e46eb17c9734","resolution":{"observed_at":"2026-08-07T15:08:14.434298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T15:08:14.543009Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","version":3},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-07T15:08:14.543009Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2505.16241"},"observation_digest":"sha256:b41f415406406e14e48a08d8f4a775ff5ddb93ddc6d78989207faec3b0bd9ad1","observation_id":"08d3dfb0-844f-4b7a-9073-7459f8f43231","resolution":{"observed_at":"2026-08-07T15:08:14.543009Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.16241","last_updated":"2025-05-26T02:28:07Z","latest_version":3,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-07T21:56:02.136924Z","submitted_at":"2025-05-22T05:19:42Z","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers"},"reference_resolution":{"displayed":44,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":42,"verified_exact":1,"verified_fuzzy":1},"total_outbound_references":44},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 44 of 44 outbound references and 3 inbound Pith citation observations for arXiv:2505.16241."}