{"as_of":"2026-08-17T07:12:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2ed4b8cc677c44aade5fa00631c2e51e94fe3eecf1aa9a071e82c1306686308f","coverage":[{"denominator":31,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":31,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:12:28.698994Z","state":"measured"},{"denominator":32,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":32,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-12T00:50:19.648405Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-12T00:51:15.054351Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"cited_work":{"arxiv_id":"2505.19773","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.19773","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"What really matters in many- shot attacks? an empirical study of long-context vulnerabilities in llms","venue":null,"work_id":"22f0cd27-adb4-4375-a79f-5a058b088b66","year":2025},"citing_paper":{"arxiv_id":"2605.08277","last_updated":"2026-05-08T06:33:42Z","snapshot_observed_at":"2026-08-15T22:50:18.166049Z","submitted_at":"2026-05-08T06:33:42Z","title":"Mitigating Many-shot Jailbreak Attacks with One Single Demonstration","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-12T00:50:19.648405Z"},"links":{"cited_paper":"/paper/2505.19773","citing_paper":"/paper/2605.08277"},"observation_digest":"sha256:5ec33c0e7e6e1d5a29bccc182af68af1539316e2b0a66de9713ef20b1abc0900","observation_id":"0f6598de-3a59-4cf8-b9bb-03be1adac746","resolution":{"observed_at":"2026-05-12T00:51:15.057213Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.19773/citation-record","integrity":"/paper/2505.19773/integrity","json":"/paper/2505.19773/citation-record.json","paper":"/paper/2505.19773"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:33.015627Z","title":null,"venue":null,"work_id":"7a623735-e214-4e34-9bd4-6c096e99a589","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.126070Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:7554868212ab4403f9d128c872509b18ddaf47cf7b12ce16f115c6bb7eb46f42","observation_id":"52109d3d-381f-4c3c-91df-b062dea72650","resolution":{"observed_at":"2026-08-07T14:12:33.089531Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:32.833895Z","title":null,"venue":null,"work_id":"bd768f2a-3f8e-4a97-be40-07920c2e662f","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.194959Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:bc8a77adeecaddf2990bb1c2f57c5243920701dab82748e393153803312417db","observation_id":"876e5790-11b5-4ef8-944d-2e5aa5411810","resolution":{"observed_at":"2026-08-07T14:12:32.904607Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05335","last_updated":"2023-04-11T16:53:54Z","snapshot_observed_at":"2026-08-16T15:41:14.308965Z","submitted_at":"2023-04-11T16:53:54Z","title":"Toxicity in ChatGPT: Analyzing Persona-assigned Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05335","snapshot_observed_at":"2026-08-07T14:12:26.717182Z","title":"InThe Twelfth International Con- ference on Learning Representations","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:26.717182Z"},"links":{"cited_paper":"/paper/2304.05335","citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:1caae493ce81bb5854efdc3c83934bf9f69e8cd4991875c1488ece7a9e91f745","observation_id":"42064e71-fdde-4ab0-9cdc-443fcb4ca95f","resolution":{"observed_at":"2026-08-07T14:12:26.717182Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:32.483605Z","title":null,"venue":null,"work_id":"5e761322-6d3d-4d0a-891e-b47c788ea48f","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.337916Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:bd7f9915dc10b1546ca866540c9d290702ec36aedd864ad0bbe08538a364710c","observation_id":"7e544e7b-59a4-4cc6-b5a8-e5c9efc86f89","resolution":{"observed_at":"2026-08-07T14:12:32.546212Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:33.310335Z","title":"InPro- ceedings of the 2024 Joint International Conference on Computational Linguistics, Language Resources and Evaluation (LREC-COLING 2024), pages 16802– 16830, Torino, Italia","venue":null,"work_id":"0ec534c0-64ff-493a-a561-5c9d57fa2242","year":2024},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:26.875683Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:4d1774f63aa378a3fc3cb3d0d38576ff35d1fff6888ff8efafbdbcc4a2ddbf67","observation_id":"036285ed-ca37-47ff-9094-b8ac592386bc","resolution":{"observed_at":"2026-08-07T14:12:33.429960Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11755","last_updated":"2024-02-19T00:53:48Z","snapshot_observed_at":"2026-08-16T14:17:31.356690Z","submitted_at":"2024-02-19T00:53:48Z","title":"SPML: A DSL for Defending Language Models Against Prompt Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11755","snapshot_observed_at":"2026-08-07T14:12:26.950931Z","title":"Anand Siththaranjan, Cassidy Laidlaw, and Dylan Hadfield-Menell","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:26.950931Z"},"links":{"cited_paper":"/paper/2402.11755","citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:fbba510ae2afaef9dacef3896bedefb6d02c1359b8c5933321ffda8ba873da17","observation_id":"fc2934dd-6fa1-4bd2-b89f-6951d06ad973","resolution":{"observed_at":"2026-08-07T14:12:26.950931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.05530","last_updated":"2024-12-16T17:39:39Z","snapshot_observed_at":"2026-08-14T18:15:53.516440Z","submitted_at":"2024-03-08T18:54:20Z","title":"Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.05530","snapshot_observed_at":"2026-08-07T14:12:26.990951Z","title":"Qwen Team","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:26.990951Z"},"links":{"cited_paper":"/paper/2403.05530","citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:f1a3591de1c1f3bbd9d0f5258ff45e23cefa512b27f67af9fcbb18e4c931be3c","observation_id":"d4e32fc7-e05f-40b7-bdd1-7397b5571524","resolution":{"observed_at":"2026-08-07T14:12:26.990951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:32.652985Z","title":null,"venue":null,"work_id":"f03ae8b6-2fda-409a-8c54-418b7717d96b","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.253436Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:3d3cb602aa1477b0ac453ccad317faee685c8835c5524bdedfc3b6d6b261e0fe","observation_id":"dc298519-9ee1-475b-b4c3-ff2152f63d93","resolution":{"observed_at":"2026-08-07T14:12:32.710615Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:33.187147Z","title":null,"venue":null,"work_id":"59104651-4756-49f5-9879-b8ace42a94e6","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.055326Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:53f348294a379bc2881018597bf107b1ca8eb56ea829fd5bdcaa8b186d18b498","observation_id":"0e6c2ddf-dbb2-44ed-b763-c3cad06d533c","resolution":{"observed_at":"2026-08-07T14:12:33.219684Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:32.298067Z","title":"UNRESTRICTED MODE ACTIV ATED","venue":null,"work_id":"34eac417-651b-451a-8b1f-7b78161b75d2","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.400311Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:613603addedd8eb5a148291383add759fb1b5bd55b8aceee3ecc39c3c0936a7b","observation_id":"6589a71c-7c3d-43a6-b900-8bbb5a97ce7c","resolution":{"observed_at":"2026-08-07T14:12:32.386204Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:31.974586Z","title":"B.2 Hardware Spec We utilized six nodes with the specifications as shown in Table??","venue":null,"work_id":"36ebbfd6-b599-4c7d-a22f-507cb0bedb05","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.461137Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:cb5afd3c7502c97f3beef364c43935a08226e4e6de41acd556c48d39907ac730","observation_id":"00468283-c5ec-4f8a-be1c-9144de343dc1","resolution":{"observed_at":"2026-08-07T14:12:32.160143Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:31.776973Z","title":null,"venue":null,"work_id":"6adf7dd0-1d05-4084-9689-439a19d28611","year":2024},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.536334Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:97aa4d7280e2ea5c85c77e5dfe679ea75566e3f51b3c311ff229a2bc70c2faaf","observation_id":"404ac29d-d893-444f-8207-7cdfa1ae590f","resolution":{"observed_at":"2026-08-07T14:12:31.863030Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:31.447379Z","title":"B.3.2 Data Preprocessing TheHarmfuldatasets were constructed by com- bining data from two primary sources: seven QA pair datasets and five query-only datasets","venue":null,"work_id":"0b2de9ff-21d2-44f8-8547-fc6b6bee98ad","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.604905Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:4a3b0867f0d85a4078f316b3e996932d3af6596222c89c95c1ae1c1b14d3f3c7","observation_id":"bdbcfc82-1fb3-4077-9f44-784d48f0b255","resolution":{"observed_at":"2026-08-07T14:12:31.645551Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:31.101837Z","title":null,"venue":null,"work_id":"fa9b4c9a-f377-48bc-bbcc-0e8ceae1fbd8","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.663100Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:5c769f4f82cf9a0b33125babe04cf980ee8bdf33d009bb887658644313f70746","observation_id":"61b461ad-2883-4774-a2b1-e87d16801f19","resolution":{"observed_at":"2026-08-07T14:12:31.285506Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:30.914616Z","title":null,"venue":null,"work_id":"663a4f27-172a-4741-9c4b-56da53bfa7cc","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.741382Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:2d88700ce5e3b51881ccf462d671497bc6a3de2e3c53ca35468ca8946b6bca5e","observation_id":"21c23c0a-fb40-4d40-9b44-452dd826e22d","resolution":{"observed_at":"2026-08-07T14:12:31.012494Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:30.689052Z","title":null,"venue":null,"work_id":"5af91d06-f9fc-46c6-ab59-30ee986cbad0","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.812852Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:57df2752205aa54e0491f3745cccddb71ed3f5a791ba4e1b03e98f5946dc67ac","observation_id":"0f3803e3-d622-4846-b706-d8ef52a34f4c","resolution":{"observed_at":"2026-08-07T14:12:30.781726Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:30.444142Z","title":null,"venue":null,"work_id":"4b69399a-bae9-48d4-8728-40310111d779","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.865052Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:628f5d721f2bd93b455216a8c072240c0ca85908f490d80428d74dfad311af2c","observation_id":"ddb83e05-8f77-456b-82a2-3d221a3bdfa4","resolution":{"observed_at":"2026-08-07T14:12:30.543770Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:30.278358Z","title":null,"venue":null,"work_id":"6bd6db1a-49be-4825-a3e5-32e85f02f40d","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.914026Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:051c75de844491131d96e85e5b5d472455caaedced7c48f11f5793a6b58ae89b","observation_id":"36a982c1-4480-4e15-b170-8611539ecaa8","resolution":{"observed_at":"2026-08-07T14:12:30.336870Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:30.180889Z","title":null,"venue":null,"work_id":"a02854d9-4367-4483-8bd4-33a6ba5446f0","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.005814Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:44fabb579765ec1ab0fe33dea72f0810e529bedfd53bec29ee8848f2bb639fec","observation_id":"ecad55bb-4dc1-4e1d-8056-4226741694c2","resolution":{"observed_at":"2026-08-07T14:12:30.219045Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:30.096185Z","title":null,"venue":null,"work_id":"3a343e4d-2f5a-4424-80d0-e979d5d1c7a3","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.091135Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:231e255eb1cb91e9f6cd7d67540e124b23484924f92b710d7564d7d2c54095dc","observation_id":"ba9f126c-ba84-4dc1-88e6-28eb7ee0fd24","resolution":{"observed_at":"2026-08-07T14:12:30.127530Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:29.964730Z","title":"AI could be misused as a tool for promoting criminal behavior","venue":null,"work_id":"22ee4ab3-02fd-4fda-b796-d341b76bc930","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.156641Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:6c8ba18f3f24c0d2b01afa832ef15ba9b587739fa3ef0bf77839f406f65d0cba","observation_id":"321e07ee-ee4e-4a02-90e0-7f9ff963e4b6","resolution":{"observed_at":"2026-08-07T14:12:30.019382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:29.846844Z","title":null,"venue":null,"work_id":"407d9ee1-050a-4c8d-a791-4c60d27404d8","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.247874Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:388cbe56ae92066f4005222bac3e73eb20e25690adb23ea2d9706c6f5d52c6b6","observation_id":"ab964502-4d92-4be2-b9b1-ddf83b3237d7","resolution":{"observed_at":"2026-08-07T14:12:29.896505Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:29.672000Z","title":null,"venue":null,"work_id":"31a2b526-6629-4b65-8d39-6ba8a0a16247","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.343270Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:0a6ad8fde81b9f5daac48bef0e83b1f709a24a4b0069b3e4a4e2ae0e59598e12","observation_id":"1a2f2c06-6cfe-4c96-ab7c-ff0ef1d85788","resolution":{"observed_at":"2026-08-07T14:12:29.761575Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:29.508934Z","title":null,"venue":null,"work_id":"58261f6d-1869-4495-b792-182813737d62","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.429931Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:4a6f0d0e9ed1299be33897bd9dae93965b17796ac9c1f55c34a1878211594134","observation_id":"69fc5294-2c6d-4782-a539-a9f0d06d0642","resolution":{"observed_at":"2026-08-07T14:12:29.568211Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:29.389752Z","title":null,"venue":null,"work_id":"c73ab450-f11e-42d0-b10e-3d135e636a8b","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.516532Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:a42dadd06ad5d5832d080b854950be2a5ed8dec45afb7ae65b8d85fa7f1d6916","observation_id":"77fa94cb-53b0-4cdb-a4fe-c5e60b66aeee","resolution":{"observed_at":"2026-08-07T14:12:29.432136Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:29.221632Z","title":"None\"] New Category: [Only if Category is 7/ETC, otherwise","venue":null,"work_id":"d6c5b752-012f-4b40-a643-aeb3f20bf7c0","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.569333Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:94f137e06042ca8a6299e6683569f562c3dcec7a8b44020972c1240c059bbe8b","observation_id":"83c804a2-dd5a-4ada-85d7-c5dbdc515b51","resolution":{"observed_at":"2026-08-07T14:12:29.283096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:29.069923Z","title":"If no problematic content is detected, use \"None\" as the category","venue":null,"work_id":"5ef87c4c-6087-4657-b549-5e2acb69a5c9","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.625317Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:d51178098727472fb1142a98e04607bf77652086ab195778d25724623e5c0f54","observation_id":"6485dc07-8801-43b7-8b2b-d655c64a4d94","resolution":{"observed_at":"2026-08-07T14:12:29.146294Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:28.939073Z","title":"Think like you are answering to a five year old","venue":null,"work_id":"6d970880-2ad3-47d8-947b-a2f23726285a","year":2024},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.698994Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:a57427f2c959c7f3a368d78e1fe113e8a2b02bc251b5e1d18ed35234dbaef201","observation_id":"9d8650e0-e45a-4ab5-9bd8-5590c9e3ecae","resolution":{"observed_at":"2026-08-07T14:12:28.998447Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:33.536619Z","title":"Bowen Peng, Jeffrey Quesnelle, Honglu Fan, and Enrico Shippole","venue":null,"work_id":"43a3ee3b-ff2e-4ebd-8f66-bb9ce84eb4ad","year":2024},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:26.782631Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:9f58f0615befede7668cbf08ef913d1c521005fc346d217007f53aa549f427e1","observation_id":"a3be5815-402f-442b-acb3-de472ce3ab76","resolution":{"observed_at":"2026-08-07T14:12:33.671041Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-08-16T13:08:51.920120Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-07T14:12:26.650846Z","title":"Josef Dai, Xuehai Pan, Ruiyang Sun, Jiaming Ji, Xinbo Xu, Mickel Liu, Yizhou Wang, and Yaodong Yang","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:26.650846Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:1c102a7464a9256c6884466a70fef9f1e5f8db2acd2dc71c25993bc520df758d","observation_id":"8f3ef5d9-7cf8-43d8-a24c-eb8fba4d06a9","resolution":{"observed_at":"2026-08-07T14:12:26.650846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:33.767132Z","title":"InProceedings of the 62nd Annual Meeting of the Association for Compu- tational Linguistics (Volume 1: Long Papers), pages 10542–10560, Bangkok, Thailand","venue":null,"work_id":"1d83c70f-35a3-48ec-bf7a-d6f1a3ca0c67","year":2024},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:26.585687Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:4f19a4565e6f813699cf2bd289b157a9ed6c78ee4232ac026171ba374a3d90f8","observation_id":"b6cb532b-54aa-40a2-911a-afb5656e6b28","resolution":{"observed_at":"2026-08-07T14:12:33.884477Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-13T20:12:25.585413Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs"},"reference_resolution":{"displayed":31,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":2,"unresolved":19,"verified_exact":0,"verified_fuzzy":10},"total_outbound_references":31},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 31 of 31 outbound references and 1 inbound Pith citation observation for arXiv:2505.19773."}