{"as_of":"2026-08-10T14:42:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:15199223fc50ecb09f4febfb9bb070a9d9d6814b2b2541fa47d1f22f344194c7","coverage":[{"denominator":60,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":60,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:41:25.552737Z","state":"measured"},{"denominator":61,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":61,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-28T15:05:08.411286Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T22:46:19.226413Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"cited_work":{"arxiv_id":"2506.07330","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.07330","snapshot_observed_at":"2026-07-01T22:46:19.226413Z","title":"Datta, S","venue":null,"work_id":"f3c9f786-5d02-44e3-b4fd-a8c0d8af738a","year":2025},"citing_paper":{"arxiv_id":"2606.02959","last_updated":"2026-06-01T23:29:58Z","snapshot_observed_at":"2026-08-05T09:07:58.107278Z","submitted_at":"2026-06-01T23:29:58Z","title":"Gate AI: LLM Security Benchmark Evaluation Methodology and Results","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-28T15:05:08.411286Z"},"links":{"cited_paper":"/paper/2506.07330","citing_paper":"/paper/2606.02959"},"observation_digest":"sha256:325f9c6bcc87cf3081f750f93136e99e267193e0f215b9edcf640f1a2c362155","observation_id":"63c3cfb0-b070-4509-9a78-eda74b8e5795","resolution":{"observed_at":"2026-07-01T22:46:19.228179Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.07330/citation-record","integrity":"/paper/2506.07330/integrity","json":"/paper/2506.07330/citation-record.json","paper":"/paper/2506.07330"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-08T01:50:42.192362Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-07T05:41:25.315260Z","title":"Are you still on track!? catching llm task drift with activations, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.315260Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:05641ef3e21bc547b1d19a4ca4da6d134f2b4611fa6487d39f6402fa483985b2","observation_id":"7100632c-ff3f-474d-990f-65599ab8012a","resolution":{"observed_at":"2026-08-07T05:41:25.315260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02151","last_updated":"2025-04-17T18:55:45Z","snapshot_observed_at":"2026-08-10T11:04:18.421023Z","submitted_at":"2024-04-02T17:58:27Z","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02151","snapshot_observed_at":"2026-08-07T05:41:25.319900Z","title":"Jailbreaking leading safety-aligned llms with simple adaptive attacks, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.319900Z"},"links":{"cited_paper":"/paper/2404.02151","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:310dd21e1a949915acce652b311dc4a646aed14a7b85832efdf319ac02dfb6d1","observation_id":"96ebaf00-672b-4d55-be47-85964245d851","resolution":{"observed_at":"2026-08-07T05:41:25.319900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2004.05150","last_updated":"2020-12-02T17:52:35Z","snapshot_observed_at":"2026-07-31T17:17:17.205582Z","submitted_at":"2020-04-10T17:54:09Z","title":"Longformer: The Long-Document Transformer","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.05150","snapshot_observed_at":"2026-08-07T05:41:25.323891Z","title":"Peters, and Arman Cohan","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.323891Z"},"links":{"cited_paper":"/paper/2004.05150","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:9570a9d80fb0fd95ae0315dddd5af19f47ab03b9733171d80f12841bc24d34ed","observation_id":"ca91e754-c95b-4559-a478-edc26ac4d113","resolution":{"observed_at":"2026-08-07T05:41:25.323891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.05500","last_updated":"2026-06-01T09:22:31Z","snapshot_observed_at":"2026-08-07T17:21:54.080497Z","submitted_at":"2025-03-07T15:13:58Z","title":"EuroBERT: Scaling Multilingual Encoders for European Languages","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.05500","snapshot_observed_at":"2026-08-07T05:41:25.328485Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.328485Z"},"links":{"cited_paper":"/paper/2503.05500","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:534ace3950e87180c1328fbee41c1f6adc683921915ffca6d6e0e0dd451ed83c","observation_id":"9567dc39-c0be-4ab2-a78f-14ba55a4a456","resolution":{"observed_at":"2026-08-07T05:41:25.328485Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.19587","last_updated":"2025-06-06T20:57:10Z","snapshot_observed_at":"2026-08-08T11:26:41.465766Z","submitted_at":"2025-02-26T22:00:22Z","title":"NeoBERT: A Next-Generation BERT","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.19587","snapshot_observed_at":"2026-08-07T05:41:25.332545Z","title":"Neobert: A next-generation bert, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.332545Z"},"links":{"cited_paper":"/paper/2502.19587","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:87686c0a5227e5ecc0db08b4781384c1dd1da09819a5f1f3e4f29ca4aefc387e","observation_id":"91b0a6d3-d12f-4175-8ce8-cf477bd835c9","resolution":{"observed_at":"2026-08-07T05:41:25.332545Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:25.336740Z","title":"Pappas, and Eric Wong","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.336740Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:625089ce3bb4b7bfe4935efe9d950d86ed7854eadcff35639a6e6f8e9ea1991f","observation_id":"678082c1-45cf-4324-a007-99bccd950c09","resolution":{"observed_at":"2026-08-07T05:41:25.336740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.00459","last_updated":"2025-08-02T13:44:03Z","snapshot_observed_at":"2026-08-04T09:37:10.818143Z","submitted_at":"2024-11-01T09:14:21Z","title":"Defense Against Prompt Injection Attack by Leveraging Attack Techniques","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.00459","snapshot_observed_at":"2026-08-07T05:41:25.340870Z","title":"Defense against prompt injection attack by leveraging attack techniques, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.340870Z"},"links":{"cited_paper":"/paper/2411.00459","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:6de636dba54ca03288fa256fbc28d2973ae98b5d6ade4129866d5f7902688d42","observation_id":"6277d0de-5d2c-4458-bb27-da4173afcf3d","resolution":{"observed_at":"2026-08-07T05:41:25.340870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2009.14794","last_updated":"2022-11-19T12:45:21Z","snapshot_observed_at":"2026-08-08T20:36:21.234658Z","submitted_at":"2020-09-30T17:09:09Z","title":"Rethinking Attention with Performers","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2009.14794","snapshot_observed_at":"2026-08-07T05:41:25.345503Z","title":"Rethinking attention with performers, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.345503Z"},"links":{"cited_paper":"/paper/2009.14794","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:d478096b87bb4301f7bd33c2e4d8a68a75fd88737d0a4b2b775f46ce22d580d4","observation_id":"a960944a-cdbe-4137-8087-c0fdfa07eae6","resolution":{"observed_at":"2026-08-07T05:41:25.345503Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:26.302739Z","title":"Deepset prompt injection guardrail, 2024","venue":null,"work_id":"94134458-a831-45a6-9ff8-c113ca852cb8","year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.349610Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:54f28fc050dd23e2bca3fa97e2b520c3ace7c313ab89683e1088683986258e1f","observation_id":"cace89d0-a430-42c3-b66f-0ebdada37f3f","resolution":{"observed_at":"2026-08-07T05:41:26.306114Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:25.353875Z","title":"Duoguard: A two-player rl-driven framework for multilingual llm guardrails, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.353875Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:16533768e63a997a37425152d1c6a3c7bd70da99d7d9cd36f20477458e624e7a","observation_id":"918f6875-290b-45de-aa05-f5e0aacc7e4e","resolution":{"observed_at":"2026-08-07T05:41:25.353875Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.11036","last_updated":"2024-06-16T18:18:43Z","snapshot_observed_at":"2026-08-10T13:52:45.584139Z","submitted_at":"2024-06-16T18:18:43Z","title":"garak: A Framework for Security Probing Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.11036","snapshot_observed_at":"2026-08-07T05:41:25.356935Z","title":"garak: A framework for security probing large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.356935Z"},"links":{"cited_paper":"/paper/2406.11036","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:10267b6e0900ac3ce66da9edd248ca78949fc8db22749db5e67216c1cfde2c47","observation_id":"5996d375-da0b-47e3-a050-ed7eec657248","resolution":{"observed_at":"2026-08-07T05:41:25.356935Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.04805","last_updated":"2019-05-24T20:37:26Z","snapshot_observed_at":"2026-07-30T09:12:38.100527Z","submitted_at":"2018-10-11T00:50:01Z","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.04805","snapshot_observed_at":"2026-08-07T05:41:25.361264Z","title":"Bert: Pre-training of deep bidirectional transformers for language understanding, 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.361264Z"},"links":{"cited_paper":"/paper/1810.04805","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:dd62414fe9b35495b936d192be11c465cfc69134fa9c8376c6d183940099e64f","observation_id":"e17ad33d-2543-4776-a32d-89b0a4ddd171","resolution":{"observed_at":"2026-08-07T05:41:25.361264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:25.365277Z","title":"A wolf in sheep's clothing: Generalized nested jailbreak prompts can fool large language models easily, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.365277Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:19f5197ef4db4c05ef937fe252a40a2ea2f488d1774869b0d6d05ad1b830c9db","observation_id":"a876e8a2-bd42-41ed-8c37-11b70302d15c","resolution":{"observed_at":"2026-08-07T05:41:25.365277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04811","last_updated":"2025-03-25T01:51:22Z","snapshot_observed_at":"2026-07-06T18:58:39.334273Z","submitted_at":"2024-08-09T01:45:39Z","title":"h4rm3l: A language for Composable Jailbreak Attack Synthesis","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.04811","snapshot_observed_at":"2026-08-07T05:41:25.368455Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.368455Z"},"links":{"cited_paper":"/paper/2408.04811","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:fac8e3f3bb0c7c12d276cea69b65b5f7089cea8c1e18d23034d21a5be6443ece","observation_id":"2d70c8ca-0dca-434a-a684-49d64b523cee","resolution":{"observed_at":"2026-08-07T05:41:25.368455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:26.286326Z","title":"Fmops prompt injection guardrail, 2024","venue":null,"work_id":"6921308c-268d-4c9d-a1f6-2a0df93f1466","year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.372778Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:c309f6d2679c23ba167480aa4dd33301f293e8f57601c9a2f50a4fb47e6df4e6","observation_id":"0008caae-1c81-43a3-b732-85fcafad3a51","resolution":{"observed_at":"2026-08-07T05:41:26.289650Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.01547","last_updated":"2024-12-02T14:35:43Z","snapshot_observed_at":"2026-08-08T16:21:41.989891Z","submitted_at":"2024-12-02T14:35:43Z","title":"Improved Large Language Model Jailbreak Detection via Pretrained Embeddings","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.01547","snapshot_observed_at":"2026-08-07T05:41:25.376227Z","title":"Improved large language model jailbreak detection via pretrained embeddings, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.376227Z"},"links":{"cited_paper":"/paper/2412.01547","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:0aac6ef92b5cd3884dbd288cc1577dca13c814cd404a540140d7033e98709588","observation_id":"65c83966-1ce6-4228-bb4b-5cfabc2683bf","resolution":{"observed_at":"2026-08-07T05:41:25.376227Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.05993","last_updated":"2024-09-11T14:42:29Z","snapshot_observed_at":"2026-08-09T05:46:29.961103Z","submitted_at":"2024-04-09T03:54:28Z","title":"AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Experts","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.05993","snapshot_observed_at":"2026-08-07T05:41:25.380511Z","title":"Aegis: Online adaptive ai content safety moderation with ensemble of llm experts, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.380511Z"},"links":{"cited_paper":"/paper/2404.05993","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:380a01df53a37808f228cf024d30d9087323f13b2bb2090de61923d9a0f86d9b","observation_id":"9a02c637-236b-48bc-9429-84998efa3c15","resolution":{"observed_at":"2026-08-07T05:41:25.380511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-07T05:41:25.384612Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.384612Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:dee498edc28cb3b10e36e3e49afc9456fa5d1648c67e59e4d2c00f6e15522001","observation_id":"79cd9546-390d-4c6a-87c8-04a900acd5fb","resolution":{"observed_at":"2026-08-07T05:41:25.384612Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.00752","last_updated":"2024-05-31T17:55:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-01T18:01:34Z","title":"Mamba: Linear-Time Sequence Modeling with Selective State Spaces","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.00752","snapshot_observed_at":"2026-08-07T05:41:25.389280Z","title":"Mamba: Linear-time sequence modeling with selective state spaces, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.389280Z"},"links":{"cited_paper":"/paper/2312.00752","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:0eaf8a30fad5b0e8bf5c4aa25ac586b3bf07cac2a3506f33e9d6398d867fe2ae","observation_id":"380c2f49-cae7-41c3-8a19-2e3546abfedc","resolution":{"observed_at":"2026-08-07T05:41:25.389280Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18495","last_updated":"2024-12-09T20:21:56Z","snapshot_observed_at":"2026-08-06T04:32:59.039501Z","submitted_at":"2024-06-26T16:58:20Z","title":"WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18495","snapshot_observed_at":"2026-08-07T05:41:25.392879Z","title":"Wildguard: Open one-stop moderation tools for safety risks, jailbreaks, and refusals of llms, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.392879Z"},"links":{"cited_paper":"/paper/2406.18495","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:e796b9e0d18acd988482fb1e98b1f75bb93e7079c946c7a1e16031a3e2d66ddb","observation_id":"139aa9e9-ccfe-4153-a64b-c272d21b0447","resolution":{"observed_at":"2026-08-07T05:41:25.392879Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2111.09543","last_updated":"2023-03-24T09:17:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-11-18T06:48:00Z","title":"DeBERTaV3: Improving DeBERTa using ELECTRA-Style Pre-Training with Gradient-Disentangled Embedding Sharing","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.09543","snapshot_observed_at":"2026-08-07T05:41:25.397072Z","title":"Debertav3: Improving deberta using electra-style pre-training with gradient-disentangled embedding sharing, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.397072Z"},"links":{"cited_paper":"/paper/2111.09543","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:138d0695145fc40a9b99b984e881201b69b07d7353af5a5b61acdc30812f97e5","observation_id":"3bfc8f48-a756-45a1-9d77-45534fa3abc8","resolution":{"observed_at":"2026-08-07T05:41:25.397072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06987","last_updated":"2023-10-10T20:15:54Z","snapshot_observed_at":"2026-07-06T16:30:46.321160Z","submitted_at":"2023-10-10T20:15:54Z","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06987","snapshot_observed_at":"2026-08-07T05:41:25.400701Z","title":"Catastrophic jailbreak of open-source llms via exploiting generation, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.400701Z"},"links":{"cited_paper":"/paper/2310.06987","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:cdbe3459109e677093fa13274e05df01e86dde5c0912a204efe2afafca693006","observation_id":"ad7c973f-bb55-4516-a42c-b4caed499c07","resolution":{"observed_at":"2026-08-07T05:41:25.400701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14189","last_updated":"2025-05-30T14:12:54Z","snapshot_observed_at":"2026-07-06T18:18:21.334080Z","submitted_at":"2024-05-23T05:31:41Z","title":"Efficient Universal Goal Hijacking with Semantics-guided Prompt Organization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.14189","snapshot_observed_at":"2026-08-07T05:41:25.404633Z","title":"Semantic-guided prompt organization for universal goal hijacking against llms, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.404633Z"},"links":{"cited_paper":"/paper/2405.14189","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:0b99bccf1b79d4c4c3f22da10a24ace8d07c071e15aa0244e2bbc2004033dc88","observation_id":"51fc5fdb-b481-4602-85ef-d9687a80ef8b","resolution":{"observed_at":"2026-08-07T05:41:25.404633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-07T05:41:25.408036Z","title":"Best-of-n jailbreaking, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.408036Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:7a8c6ed1ff1e0e9709ee0106c5b95e27242a28e22277d5dfa293fd629256f9c7","observation_id":"2cb4d93b-ad9b-4a88-a555-149af2568ed9","resolution":{"observed_at":"2026-08-07T05:41:25.408036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-07T05:41:25.411365Z","title":"Llama guard: Llm-based input-output safeguard for human-ai conversations, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.411365Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:7baf8e1175c7ed8537c9207bc035ae277d06660cf1c78b4b896e6ed926e1fe22","observation_id":"9bb5367b-8781-4928-bfc9-7a99b2465ab7","resolution":{"observed_at":"2026-08-07T05:41:25.411365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.00172","last_updated":"2023-10-31T22:22:10Z","snapshot_observed_at":"2026-08-10T03:18:35.768063Z","submitted_at":"2023-10-31T22:22:10Z","title":"Robust Safety Classifier for Large Language Models: Adversarial Prompt Shield","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.00172","snapshot_observed_at":"2026-08-07T05:41:25.415816Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.415816Z"},"links":{"cited_paper":"/paper/2311.00172","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:fe0ebda93cbcb2d6925a4340a5c9d8bc47d345e5eb824726b0b6753c286a01f5","observation_id":"b9e816b9-6a8f-421f-a1db-9f3116b1adee","resolution":{"observed_at":"2026-08-07T05:41:25.415816Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:26.275486Z","title":"Lakera-guard, 2024","venue":null,"work_id":"dfea060b-ab6c-41e4-ba62-af5aa68de582","year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.419706Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:c76486b4e358b2cc49ff1a8d1ebb7d68be86ea4e5f4097bc670dc7f508ecac7d","observation_id":"410026cd-3f9f-4d39-9f22-e2c59ed3f11c","resolution":{"observed_at":"2026-08-07T05:41:26.279215Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22770","last_updated":"2025-03-30T16:39:15Z","snapshot_observed_at":"2026-08-08T06:17:50.732965Z","submitted_at":"2024-10-30T07:39:42Z","title":"InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22770","snapshot_observed_at":"2026-08-07T05:41:25.422926Z","title":"Injecguard: Benchmarking and mitigating over-defense in prompt injection guardrail models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.422926Z"},"links":{"cited_paper":"/paper/2410.22770","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:83686ece296f01233b713fa95bb5d4bff5e1ab2879c4a6ff3e0f59ed97246dab","observation_id":"2b4a2a08-6a1f-44f4-8243-56230774416b","resolution":{"observed_at":"2026-08-07T05:41:25.422926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05044","last_updated":"2024-06-07T12:05:46Z","snapshot_observed_at":"2026-08-03T21:40:53.683032Z","submitted_at":"2024-02-07T17:33:54Z","title":"SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05044","snapshot_observed_at":"2026-08-07T05:41:25.431089Z","title":"Salad-bench: A hierarchical and comprehensive safety benchmark for large language models, 2024 b","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.431089Z"},"links":{"cited_paper":"/paper/2402.05044","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:30f560e9c0a2798e217e5defa5ac4a4fd1ed33fb9dd5cf0d1de5e92bf44af51d","observation_id":"afdd77a0-996b-4739-bb66-7546694a0b4e","resolution":{"observed_at":"2026-08-07T05:41:25.431089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:26.264919Z","title":"Toxicchat: Unveiling hidden challenges of toxicity detection in real-world user-ai conversation, 2023","venue":null,"work_id":"94946755-63c3-421e-8bb2-f5cd4fc0f622","year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.435516Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:30a9de1f01d1895fd6948dfa85572aa0756f45c7f60919b68dfd947067cc4fdc","observation_id":"330eef9b-b172-4600-80f0-212d3ba113d2","resolution":{"observed_at":"2026-08-07T05:41:26.268900Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.03172","last_updated":"2023-11-20T23:09:34Z","snapshot_observed_at":"2026-07-06T15:51:12.179086Z","submitted_at":"2023-07-06T17:54:11Z","title":"Lost in the Middle: How Language Models Use Long Contexts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.03172","snapshot_observed_at":"2026-08-07T05:41:25.439015Z","title":"Liu, Kevin Lin, John Hewitt, Ashwin Paranjape, Michele Bevilacqua, Fabio Petroni, and Percy Liang","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.439015Z"},"links":{"cited_paper":"/paper/2307.03172","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:8eb70801482435fc255f09b820275b1c9a432dca39a948264fb24b90414e9627","observation_id":"ac873b87-a630-4489-9957-ac37cca69be5","resolution":{"observed_at":"2026-08-07T05:41:25.439015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-07T05:41:25.442964Z","title":"Automatic and universal prompt injection attacks against large language models, 2024 a","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.442964Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:dfa62a4df6787690c4df5fdb1135cef1013a8cb2acd67481016b002560338df8","observation_id":"3afdebdd-3f5e-4b72-9cbc-eccb2bbb06a5","resolution":{"observed_at":"2026-08-07T05:41:25.442964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:25.446488Z","title":"Formalizing and benchmarking prompt injection attacks and defenses, 2024 b","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.446488Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:97cf98b36febab1a9d99437985494853a05606b16c64621892890c2ebb613459","observation_id":"f7345811-4137-43a4-b338-a49484f5d123","resolution":{"observed_at":"2026-08-07T05:41:25.446488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:26.253393Z","title":"Promptguard prompt injection guardrail, 2024","venue":null,"work_id":"18974fdc-032c-4be4-a556-4d65a65e0764","year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.450555Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:662b586a995b1274da2adc1010c0224e9023e0c00f0c18511eee10e025468ea8","observation_id":"2b375a34-9b3e-4932-a5e8-e17de067a432","resolution":{"observed_at":"2026-08-07T05:41:26.256759Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.07724","last_updated":"2024-12-16T20:27:36Z","snapshot_observed_at":"2026-08-10T13:16:49.175498Z","submitted_at":"2024-12-10T18:17:02Z","title":"Granite Guardian","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.07724","snapshot_observed_at":"2026-08-07T05:41:25.455039Z","title":"Daly, Michael Hind, Werner Geyer, Ambrish Rawat, Kush R","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.455039Z"},"links":{"cited_paper":"/paper/2412.07724","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:f6ef957ca17d81ad4a8990261f41723bd924a92f6da7750c81ad57d38d71bc59","observation_id":"e45241f8-8ebd-45f5-b39e-5051199e0250","resolution":{"observed_at":"2026-08-07T05:41:25.455039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-07T05:41:25.458988Z","title":"Ignore previous prompt: Attack techniques for language models, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.458988Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:376b40f35fa16b82cd310dcb1bb80166588b06bca332456d453ea060e82edbf6","observation_id":"3b212c15-719f-48a6-b0fc-ead3d45c34d3","resolution":{"observed_at":"2026-08-07T05:41:25.458988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:26.240285Z","title":"Fine-tuned deberta-v3-base for prompt injection detection, 2024 a","venue":null,"work_id":"29f48dc9-6553-4394-b04a-b71e7c08300b","year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.462947Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:46e3becbb246e5f0bee6addbd87f135d15e6bb084bced09e2589a357bd8d1866","observation_id":"31b87016-bfe2-4f07-b9ae-fa4a118254d0","resolution":{"observed_at":"2026-08-07T05:41:26.244784Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:26.228925Z","title":"Fine-tuned deberta-v3-base for prompt injection detection, 2024 b","venue":null,"work_id":"891dbfbc-c90d-47df-a620-ca7ed4221782","year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.466333Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:d19a869f895665cc7539c35cb4a43e4b1e5be7743cd85f688d4fab72675e314a","observation_id":"2e629842-48bc-48f9-8fe6-206a3523b2d6","resolution":{"observed_at":"2026-08-07T05:41:26.232332Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03693","last_updated":"2023-10-05T17:12:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-05T17:12:17Z","title":"Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03693","snapshot_observed_at":"2026-08-07T05:41:25.469886Z","title":"Fine-tuning aligned language models compromises safety, even when users do not intend to!, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.469886Z"},"links":{"cited_paper":"/paper/2310.03693","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:83bc392d45ea6ef5b25ee0b56d83368092390f6e6a0c5c415a2b0972582af0ab","observation_id":"529f57a7-1efa-43c9-9fa3-97c2cedc1141","resolution":{"observed_at":"2026-08-07T05:41:25.469886Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-07T08:20:45.612923Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-07T05:41:25.473951Z","title":"Nemo guardrails: A toolkit for controllable and safe llm applications with programmable rails, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.473951Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:540ff7dc9271a2fd83db9e58ac23bc6bb5887160978f99140038b7e84776cb48","observation_id":"aaef1318-e025-4719-b3e6-875569d1de59","resolution":{"observed_at":"2026-08-07T05:41:25.473951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16822","last_updated":"2024-12-11T18:07:25Z","snapshot_observed_at":"2026-08-08T15:50:09.401813Z","submitted_at":"2024-02-26T18:47:27Z","title":"Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Prompts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16822","snapshot_observed_at":"2026-08-07T05:41:25.478376Z","title":"Markosyan, Manish Bhatt, Yuning Mao, Minqi Jiang, Jack Parker-Holder, Jakob Foerster, Tim Rocktäschel, and Roberta Raileanu","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.478376Z"},"links":{"cited_paper":"/paper/2402.16822","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:6029539dd6232b21fbd3233569f367f41d4e920e5740ef6410341a4a112aa180","observation_id":"35009d95-66aa-4b6f-83aa-3f26744e32df","resolution":{"observed_at":"2026-08-07T05:41:25.478376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1910.01108","last_updated":"2020-03-01T02:57:50Z","snapshot_observed_at":"2026-08-07T19:07:36.327251Z","submitted_at":"2019-10-02T17:56:28Z","title":"DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lighter","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.01108","snapshot_observed_at":"2026-08-07T05:41:25.482732Z","title":"Distilbert, a distilled version of bert: smaller, faster, cheaper and lighter, 2020","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.482732Z"},"links":{"cited_paper":"/paper/1910.01108","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:379e9c43c1a773a24bb4f37c1f324bea0178ef6366259a5388f909afcbf43cb8","observation_id":"041865a1-7169-4108-9207-5d1b3a5aee40","resolution":{"observed_at":"2026-08-07T05:41:25.482732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:26.218972Z","title":"``Do Anything Now'': Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","venue":null,"work_id":"42decdf2-35f9-4b79-806f-669a7275378a","year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.486154Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:46e466953f947e9f5690f7302d3bc2d4e236ae607f325d11100e71fab03ae236","observation_id":"d8030e0e-bc31-409a-b35c-b78a0376e43a","resolution":{"observed_at":"2026-08-07T05:41:26.222484Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17710","last_updated":"2025-08-24T03:35:16Z","snapshot_observed_at":"2026-08-08T17:38:17.519859Z","submitted_at":"2024-03-26T13:58:00Z","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.17710","snapshot_observed_at":"2026-08-07T05:41:25.489612Z","title":"Optimization-based prompt injection attack to llm-as-a-judge, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.489612Z"},"links":{"cited_paper":"/paper/2403.17710","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:51e9c14622e6df122382a2edeca8c0073b1176601724dc13a5e2f95459bff5a3","observation_id":"f2c8128a-0674-4de9-b909-8351da0a6d26","resolution":{"observed_at":"2026-08-07T05:41:25.489612Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:26.207377Z","title":"A party of foundation models, 2024","venue":null,"work_id":"3ca824bb-7aa9-4183-8d18-1b2f99a03931","year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.493704Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:152917d7ee3c8ea7147f6ab1f867dd9d2c13e72cba3500cd8a161c421e432ee3","observation_id":"dbedd655-a9e4-41ac-ac32-99b06d2f84fb","resolution":{"observed_at":"2026-08-07T05:41:26.211891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:25.497130Z","title":"Alert: A comprehensive benchmark for assessing large language models' safety through red teaming, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.497130Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:93b62918e022ef55f552ed343c138413e3d3869343a6a2fba86d7091a755bc89","observation_id":"e6ce1a9c-425f-482a-945f-f58f49547b5d","resolution":{"observed_at":"2026-08-07T05:41:25.497130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-07T05:41:25.500880Z","title":"Tensor trust: Interpretable prompt injection attacks from an online game, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.500880Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:4e85b000b15deb4c949099a5d8605936563c8a8ffcc3f19f60913cb798f8ead1","observation_id":"b71b49a1-7392-4df8-80af-f4a4e28d0588","resolution":{"observed_at":"2026-08-07T05:41:25.500880Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.08833","last_updated":"2023-06-15T03:30:13Z","snapshot_observed_at":"2026-08-10T13:23:53.667433Z","submitted_at":"2023-06-15T03:30:13Z","title":"Safeguarding Crowdsourcing Surveys from ChatGPT with Prompt Injection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.08833","snapshot_observed_at":"2026-08-07T05:41:25.504822Z","title":"Safeguarding crowdsourcing surveys from chatgpt with prompt injection, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.504822Z"},"links":{"cited_paper":"/paper/2306.08833","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:7474fa98fa723ace0f2f49f815a8293838f421f264cadf2ba86c705428f7d48b","observation_id":"f53a5bc6-f00d-4a81-87a5-1bc33515624c","resolution":{"observed_at":"2026-08-07T05:41:25.504822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16459","last_updated":"2024-06-06T19:21:44Z","snapshot_observed_at":"2026-08-10T12:05:39.090680Z","submitted_at":"2024-02-26T10:03:33Z","title":"Defending LLMs against Jailbreaking Attacks via Backtranslation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16459","snapshot_observed_at":"2026-08-07T05:41:25.509264Z","title":"Defending llms against jailbreaking attacks via backtranslation, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.509264Z"},"links":{"cited_paper":"/paper/2402.16459","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:ad44a0f6b2e0ffa8878423a2b0e8a6b480fe8291457593dc8224a94b261754a3","observation_id":"d4713d05-f5a1-4f04-ac63-5a6e06c47832","resolution":{"observed_at":"2026-08-07T05:41:25.509264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.13663","last_updated":"2024-12-19T06:32:26Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-18T09:39:44Z","title":"Smarter, Better, Faster, Longer: A Modern Bidirectional Encoder for Fast, Memory Efficient, and Long Context Finetuning and Inference","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.13663","snapshot_observed_at":"2026-08-07T05:41:25.514146Z","title":"Smarter, better, faster, longer: A modern bidirectional encoder for fast, memory efficient, and long context finetuning and inference, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.514146Z"},"links":{"cited_paper":"/paper/2412.13663","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:79420f427cc0c2ff39545973f7916ebf67de1096baad4ee7a0e42bde561ad58d","observation_id":"31fee075-afa3-4a8a-b3e1-2d7eeb518f39","resolution":{"observed_at":"2026-08-07T05:41:25.514146Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-08-08T18:11:45.725753Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02483","snapshot_observed_at":"2026-08-07T05:41:25.517829Z","title":"Jailbroken: How does llm safety training fail?, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.517829Z"},"links":{"cited_paper":"/paper/2307.02483","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:729f680d7446654825b7050e7767401e826bb08aaa3e91cff5e98eda6908e4c3","observation_id":"3e864e9e-421f-4698-a545-2841e7642b3f","resolution":{"observed_at":"2026-08-07T05:41:25.517829Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:25.522448Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.522448Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:29d5861ef1cf12d0ed0560dc4d1eef5fc2c5874fe22c7d56b3f4c209ba2bce57","observation_id":"45aae516-53f2-4d72-86fc-0dc9f1494bd5","resolution":{"observed_at":"2026-08-07T05:41:25.522448Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.11082","last_updated":"2024-06-03T12:19:16Z","snapshot_observed_at":"2026-07-06T15:18:26.300068Z","submitted_at":"2023-04-19T17:50:09Z","title":"Fundamental Limitations of Alignment in Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.11082","snapshot_observed_at":"2026-08-07T05:41:25.526186Z","title":"Fundamental limitations of alignment in large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.526186Z"},"links":{"cited_paper":"/paper/2304.11082","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:11ff71492a40c3685c86e38622e679f72de227e6b6c2421e76f8e5edaedb40af","observation_id":"1885a77b-acf8-4ed0-bd2d-6a19a4d708c2","resolution":{"observed_at":"2026-08-07T05:41:25.526186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-07-06T17:06:45.522731Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-07T05:41:25.529733Z","title":"Benchmarking and defending against indirect prompt injection attacks on large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.529733Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:cf568ecdc06361a1225d3e3601382441f4f37de78870910dfbdc73ec4fd7a105","observation_id":"b0693264-866e-4e60-9f8e-589c4dda26a7","resolution":{"observed_at":"2026-08-07T05:41:25.529733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:26.182281Z","title":"LLM-Fuzzer : Scaling assessment of large language model jailbreaks","venue":null,"work_id":"850e45f2-d145-408e-9509-7cece752288a","year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.533385Z"},"links":{"citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:19b2696c53ba1c592fca01f2f11a785e389bbf78d6db5171b2d02d0559c08ab6","observation_id":"45cea3df-5075-46fc-a1fc-386817c55935","resolution":{"observed_at":"2026-08-07T05:41:26.187261Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21772","last_updated":"2024-08-04T22:13:39Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-31T17:48:14Z","title":"ShieldGemma: Generative AI Content Moderation Based on Gemma","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21772","snapshot_observed_at":"2026-08-07T05:41:25.536496Z","title":"Shieldgemma: Generative ai content moderation based on gemma, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.536496Z"},"links":{"cited_paper":"/paper/2407.21772","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:15d8327e8546dc81b77c87cb99e3008775dd8c4db1d3e7f67113864d09b31bd3","observation_id":"b22dcf5c-983d-4bf2-a0dd-31adf20acd47","resolution":{"observed_at":"2026-08-07T05:41:25.536496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-07T05:41:25.540312Z","title":"Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.540312Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:50941eca8a08687945f945dfbc6fedaa6f84c52d391804cc69e602fa159d3168","observation_id":"e9bf3071-677e-4ee8-b44e-00b3661b94b0","resolution":{"observed_at":"2026-08-07T05:41:25.540312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13148","last_updated":"2025-02-21T20:53:08Z","snapshot_observed_at":"2026-08-05T03:04:44.966583Z","submitted_at":"2024-02-20T17:04:06Z","title":"Defending Jailbreak Prompts via In-Context Adversarial Game","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13148","snapshot_observed_at":"2026-08-07T05:41:25.544626Z","title":"Defending jailbreak prompts via in-context adversarial game, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.544626Z"},"links":{"cited_paper":"/paper/2402.13148","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:dba5b10579e7da44977c1301fbbcb952cc8f5fb153ef1643251c81d68857ff9c","observation_id":"cf5e83f1-5c39-4c93-8e80-7d2b2bd3d55f","resolution":{"observed_at":"2026-08-07T05:41:25.544626Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T05:41:25.548660Z","title":"Zico Kolter, and Matt Fredrikson","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.548660Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:65f68eed00c25f83b83a3379c4dcc6f9d693ee9280aeacdad5fc516c919436a6","observation_id":"492e0e5a-2a9e-403c-ad88-6b7f8e6e2492","resolution":{"observed_at":"2026-08-07T05:41:25.548660Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.04313","last_updated":"2024-07-12T16:51:07Z","snapshot_observed_at":"2026-08-10T13:31:39.611752Z","submitted_at":"2024-06-06T17:57:04Z","title":"Improving Alignment and Robustness with Circuit Breakers","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.04313","snapshot_observed_at":"2026-08-07T05:41:25.552737Z","title":"Improving alignment and robustness with circuit breakers, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.552737Z"},"links":{"cited_paper":"/paper/2406.04313","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:17a21e34ba2005acb3dde3041769cd42125c91dfe345176a4e45134eaf6855d1","observation_id":"09c7b8f0-600e-4068-9bc2-b468114b3fc6","resolution":{"observed_at":"2026-08-07T05:41:25.552737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security"},"reference_resolution":{"displayed":60,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":50,"verified_exact":0,"verified_fuzzy":10},"total_outbound_references":60},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 60 of 60 outbound references and 1 inbound Pith citation observation for arXiv:2506.07330."}