{"as_of":"2026-08-14T11:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:dddacf77d939a93b21361840fd4c6ec9fb78dfc493e15c826f5cde1d58d03a92","coverage":[{"denominator":81,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":81,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:15:06.220568Z","state":"measured"},{"denominator":92,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":92,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T10:39:06.502014Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-08T23:05:44.214387Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.14922","snapshot_observed_at":"2026-08-05T10:39:06.502014Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.03871","last_updated":"2025-09-04T04:12:31Z","snapshot_observed_at":"2026-08-08T03:54:26.940042Z","submitted_at":"2025-09-04T04:12:31Z","title":"A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models","version":1},"reference_index":105,"source":"pdf_text","source_observed_at":"2026-08-05T10:39:06.502014Z"},"links":{"cited_paper":"/paper/2506.14922","citing_paper":"/paper/2509.03871"},"observation_digest":"sha256:999e7a69f8eeb5c6c5b891291d50814907a7040a1c621d998c7b8faf0ee527bb","observation_id":"24f69f50-bfc9-44df-8516-6c3272eea82a","resolution":{"observed_at":"2026-08-05T10:39:06.502014Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"cited_work":{"arxiv_id":"2506.14922","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.14922","snapshot_observed_at":"2026-07-08T23:05:44.214387Z","title":"Fortress: Frontier risk evaluation for national security and public safety","venue":"cs.CY","work_id":"39bb7c74-054b-44c0-b487-099a9edaaeb4","year":2025},"citing_paper":{"arxiv_id":"2604.03121","last_updated":"2026-04-03T15:45:35Z","snapshot_observed_at":"2026-07-06T22:52:20.577677Z","submitted_at":"2026-04-03T15:45:35Z","title":"An Independent Safety Evaluation of Kimi K2.5","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-13T19:38:18.674355Z"},"links":{"cited_paper":"/paper/2506.14922","citing_paper":"/paper/2604.03121"},"observation_digest":"sha256:874445ac6ceb41d756a812b6a05395a1906efffd5a8b6ecb13048643020db971","observation_id":"251e10a9-9deb-4e1a-9041-68da3e360333","resolution":{"observed_at":"2026-05-13T19:43:11.569388Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"cited_work":{"arxiv_id":"2506.14922","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.14922","snapshot_observed_at":"2026-07-08T23:05:44.214387Z","title":"Fortress: Frontier risk evaluation for national security and public safety","venue":"cs.CY","work_id":"39bb7c74-054b-44c0-b487-099a9edaaeb4","year":2025},"citing_paper":{"arxiv_id":"2605.08930","last_updated":"2026-05-09T13:05:00Z","snapshot_observed_at":"2026-08-11T17:20:44.184841Z","submitted_at":"2026-05-09T13:05:00Z","title":"Internalizing Safety Understanding in Large Reasoning Models via Verification","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-12T01:50:59.283409Z"},"links":{"cited_paper":"/paper/2506.14922","citing_paper":"/paper/2605.08930"},"observation_digest":"sha256:85eab43f20d9adf2357ba06e3c5ae2746aea00ec4c2df848ea10aca081be0c25","observation_id":"ac08b6da-3142-4838-b91b-ee3f5dfbde71","resolution":{"observed_at":"2026-05-12T01:51:14.310382Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"cited_work":{"arxiv_id":"2506.14922","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.14922","snapshot_observed_at":"2026-07-08T23:05:44.214387Z","title":"Fortress: Frontier risk evaluation for national security and public safety","venue":"cs.CY","work_id":"39bb7c74-054b-44c0-b487-099a9edaaeb4","year":2025},"citing_paper":{"arxiv_id":"2605.08936","last_updated":"2026-05-09T13:14:31Z","snapshot_observed_at":"2026-08-11T05:52:24.157557Z","submitted_at":"2026-05-09T13:14:31Z","title":"Self-ReSET: Learning to Self-Recover from Unsafe Reasoning Trajectories","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-12T02:07:04.364417Z"},"links":{"cited_paper":"/paper/2506.14922","citing_paper":"/paper/2605.08936"},"observation_digest":"sha256:80bb04171886944c77322cf2319ef4a825c187fefe09cb666a4d46aa5f7baf25","observation_id":"a7634203-361a-4ea7-8710-06fdff2ede0c","resolution":{"observed_at":"2026-05-12T02:11:16.170019Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"cited_work":{"arxiv_id":"2506.14922","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.14922","snapshot_observed_at":"2026-07-08T23:05:44.214387Z","title":"Fortress: Frontier risk evaluation for national security and public safety","venue":"cs.CY","work_id":"39bb7c74-054b-44c0-b487-099a9edaaeb4","year":2025},"citing_paper":{"arxiv_id":"2605.14152","last_updated":"2026-07-07T01:59:55Z","snapshot_observed_at":"2026-08-14T11:24:26.258013Z","submitted_at":"2026-05-13T22:07:22Z","title":"ROK-FORTRESS: Measuring the Effect of Geopolitical Transcreation for National Security and Public Safety","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-15T04:55:36.069767Z"},"links":{"cited_paper":"/paper/2506.14922","citing_paper":"/paper/2605.14152"},"observation_digest":"sha256:f85de8783d0a4e6a1e528d4f6dfd282cffbca56824fc18f681f2fa6fd9966eaa","observation_id":"cc8dc33c-9c26-4379-a142-b56cf0af9a8e","resolution":{"observed_at":"2026-05-15T04:59:45.798554Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.14922","snapshot_observed_at":"2026-07-12T16:49:32.395383Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.14152","last_updated":"2026-07-07T01:59:55Z","snapshot_observed_at":"2026-08-14T11:24:26.258013Z","submitted_at":"2026-05-13T22:07:22Z","title":"ROK-FORTRESS: Measuring the Effect of Geopolitical Transcreation for National Security and Public Safety","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-12T16:49:32.395383Z"},"links":{"cited_paper":"/paper/2506.14922","citing_paper":"/paper/2605.14152"},"observation_digest":"sha256:c47f4a05aa0a3ac0613457af859a8f0549b043f5938b0a06b9fd4f4ed6971f69","observation_id":"cf8b4ad0-b360-4b89-a91a-8396df7c65c1","resolution":{"observed_at":"2026-07-12T16:49:32.395383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"cited_work":{"arxiv_id":"2506.14922","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.14922","snapshot_observed_at":"2026-07-08T23:05:44.214387Z","title":"Fortress: Frontier risk evaluation for national security and public safety","venue":"cs.CY","work_id":"39bb7c74-054b-44c0-b487-099a9edaaeb4","year":2025},"citing_paper":{"arxiv_id":"2606.31748","last_updated":"2026-06-30T14:38:49Z","snapshot_observed_at":"2026-07-07T00:05:27.130060Z","submitted_at":"2026-06-30T14:38:49Z","title":"Addressing Over-Refusal in LLMs with Competing Rewards","version":1},"reference_index":114,"source":"arxiv_source","source_observed_at":"2026-07-01T06:59:12.695984Z"},"links":{"cited_paper":"/paper/2506.14922","citing_paper":"/paper/2606.31748"},"observation_digest":"sha256:b4ba61d01923989b7866efeb16bbd5b9f19b7e86ce5ae05a7287689f2ecf039e","observation_id":"5813e946-6882-4202-ad32-6b8f165e7506","resolution":{"observed_at":"2026-07-01T08:55:35.497689Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"cited_work":{"arxiv_id":"2506.14922","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.14922","snapshot_observed_at":"2026-07-08T23:05:44.214387Z","title":"Fortress: Frontier risk evaluation for national security and public safety","venue":"cs.CY","work_id":"39bb7c74-054b-44c0-b487-099a9edaaeb4","year":2025},"citing_paper":{"arxiv_id":"2607.05842","last_updated":"2026-07-07T05:04:48Z","snapshot_observed_at":"2026-08-14T02:14:11.936730Z","submitted_at":"2026-07-07T05:04:48Z","title":"Beyond Refusal: A Same-Lineage Study of Aligned and Abliterated LLMs for Vulnerability Analysis","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-07-08T23:00:45.841744Z"},"links":{"cited_paper":"/paper/2506.14922","citing_paper":"/paper/2607.05842"},"observation_digest":"sha256:5d4c85fd9f8e91ae1a9cbc26f142c0c52c7bc43445a4cbb362221dc85645d3de","observation_id":"202b5c30-3ed4-4254-a3a0-ee2e283d49eb","resolution":{"observed_at":"2026-07-08T23:05:44.217434Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.14922","snapshot_observed_at":"2026-08-02T02:00:45.283794Z","title":"Knight, Kaustubh Deshpande, Ved Sirdeshmukh, Meher Mankikar, Scale Red Team, SEAL Research Team, and Julian Michael","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14479","last_updated":"2026-07-16T01:52:54Z","snapshot_observed_at":"2026-08-14T07:22:13.572237Z","submitted_at":"2026-07-16T01:52:54Z","title":"BioTIER: A Refusal Benchmark for Targeted Biological Risk Mitigation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-02T02:00:45.283794Z"},"links":{"cited_paper":"/paper/2506.14922","citing_paper":"/paper/2607.14479"},"observation_digest":"sha256:6adfd3b88417579a9a947952fa96e0844ddc50a67871a1df0e87c5df904dcdf4","observation_id":"7683b5cc-d8ad-4b94-94b0-2576b0b052a0","resolution":{"observed_at":"2026-08-02T02:00:45.283794Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.14922","snapshot_observed_at":"2026-08-01T14:45:41.861777Z","title":"Fortress: Frontier risk evaluation for national security and public safety.arXiv preprint arXiv:2506.14922, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18665","last_updated":"2026-07-21T03:25:01Z","snapshot_observed_at":"2026-08-01T15:13:30.638692Z","submitted_at":"2026-07-21T03:25:01Z","title":"SciHazard: A Benchmark for Measuring Scientific Safety Risks with Decomposed Harm Scoring","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T14:45:41.861777Z"},"links":{"cited_paper":"/paper/2506.14922","citing_paper":"/paper/2607.18665"},"observation_digest":"sha256:7738ed809a563261c34af719b4ddfaad8c378a767629f0562cb7200dee9a3f45","observation_id":"1de85d8d-ba53-4ed9-982b-70a435b049ae","resolution":{"observed_at":"2026-08-01T14:45:41.861777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.14922","snapshot_observed_at":"2026-08-01T04:12:58.717397Z","title":"Knight, Kaustubh Deshpande, Ved Sirdeshmukh, Meher Mankikar, Scale Red Team, SEAL Research Team, and Julian Michael","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.22926","last_updated":"2026-07-24T21:36:28Z","snapshot_observed_at":"2026-08-07T00:07:52.859572Z","submitted_at":"2026-07-24T21:36:28Z","title":"SAGE: Safety-First Defense-in-Depth Guardrails for Verified Lifecycle Control of High-Impact Generative AI","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-01T04:12:58.717397Z"},"links":{"cited_paper":"/paper/2506.14922","citing_paper":"/paper/2607.22926"},"observation_digest":"sha256:957fe08d3a23dd2667507645936b0ca073169d2424f8ac3bb4e2de50ed4e9a21","observation_id":"df0c230d-5c14-4555-a6b6-4dc5eb2ba4e8","resolution":{"observed_at":"2026-08-01T04:12:58.717397Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2506.14922/citation-record","integrity":"/paper/2506.14922/integrity","json":"/paper/2506.14922/citation-record.json","paper":"/paper/2506.14922"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:59.134066Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T00:14:59.134066Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:255cba32671d523592e0110b06faad62afaabfc2851949f9a6d3d3e5e8d2f6c2","observation_id":"902005c0-a4bb-49ec-863e-b22bac3f366a","resolution":{"observed_at":"2026-08-07T00:14:59.134066Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:12.190147Z","title":null,"venue":null,"work_id":"a6c09ca9-b64b-4129-8b58-854bc978211d","year":null},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T00:14:59.174886Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:f2f7c09a6fb1d7b8d3a45ea5e117561c2e84f7fc00e107ee1e9710bfa77d28ed","observation_id":"2ba14837-6435-4ee1-9a74-74a1cc5252fe","resolution":{"observed_at":"2026-08-07T00:15:12.321056Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.03718","last_updated":"2023-11-07T19:01:53Z","snapshot_observed_at":"2026-08-13T11:00:46.598382Z","submitted_at":"2023-07-06T17:03:25Z","title":"Frontier AI Regulation: Managing Emerging Risks to Public Safety","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.03718","snapshot_observed_at":"2026-08-07T00:14:59.360822Z","title":"Anderljung, J","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T00:14:59.360822Z"},"links":{"cited_paper":"/paper/2307.03718","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:b5f5f721ed30de613e4b2d1412d0334da1895a03d359f9df9a847fcac2893c36","observation_id":"8e59b1c9-3d35-4c85-85fd-6b86619fbecd","resolution":{"observed_at":"2026-08-07T00:14:59.360822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:11.626121Z","title":"Andriushchenko, A","venue":null,"work_id":"7dd1a6da-9973-4b83-9107-c47c2e8e0aa3","year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T00:14:59.471390Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:4c7cf677fb4bc56d47a31d51a0f17d68e6d9eac11d90d6892aabe6875d1f6f87","observation_id":"c9f4db15-2b9f-4e52-b617-968d27336c8c","resolution":{"observed_at":"2026-08-07T00:15:11.738324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:11.394108Z","title":null,"venue":null,"work_id":"55fd119d-c75a-4a74-b3af-7cb3c734fea3","year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T00:14:59.562721Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:7668aa4a9037d9070a288e0598cddc5dba922d939cc53ad16b201c97483073e1","observation_id":"a2c3b620-94b7-41e8-868b-7dd4fbfb1790","resolution":{"observed_at":"2026-08-07T00:15:11.528965Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2204.05862","last_updated":"2022-04-12T15:02:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-12T15:02:38Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.05862","snapshot_observed_at":"2026-08-07T00:14:59.613791Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T00:14:59.613791Z"},"links":{"cited_paper":"/paper/2204.05862","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:55b38d89ad20ef5185a5beeca8e84bf67c1ed8ff54f7f948b307bcfc7d38925a","observation_id":"96a0fdd6-e0aa-40e1-ba3e-9dba35615d03","resolution":{"observed_at":"2026-08-07T00:14:59.613791Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-07T00:14:59.695821Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T00:14:59.695821Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:1e00307f5a78a24c80a55fd2d14fbc6d3cc4dcb6fc407f33ba3735fec53e8b67","observation_id":"cc749e79-e13d-451d-a72f-9e72f0d65552","resolution":{"observed_at":"2026-08-07T00:14:59.695821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21514","last_updated":"2024-10-28T20:34:51Z","snapshot_observed_at":"2026-08-12T22:13:23.865052Z","submitted_at":"2024-10-28T20:34:51Z","title":"Sabotage Evaluations for Frontier Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21514","snapshot_observed_at":"2026-08-07T00:14:59.781525Z","title":"Benton, M","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T00:14:59.781525Z"},"links":{"cited_paper":"/paper/2410.21514","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:e410605c49b0ff14cb6143db5fb9426cb7c80d897526e0d1fe606b1781c39263","observation_id":"a92ebef6-c1eb-404c-a7c3-8e94b9495b8c","resolution":{"observed_at":"2026-08-07T00:14:59.781525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:11.174766Z","title":null,"venue":null,"work_id":"f047c522-40a3-4877-844e-56e72c4fe9c4","year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T00:14:59.873481Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:dc3b666aa58da92e4a0ac01b2e6341ed601fd49f74eccba4109c636b85f7e074","observation_id":"58871a79-1bcb-4d20-b6d9-c0c14da603d6","resolution":{"observed_at":"2026-08-07T00:15:11.276627Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.09442","last_updated":"2023-10-11T00:37:33Z","snapshot_observed_at":"2026-08-13T11:15:43.333784Z","submitted_at":"2023-06-15T18:49:50Z","title":"Explore, Establish, Exploit: Red Teaming Language Models from Scratch","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.09442","snapshot_observed_at":"2026-08-07T00:14:59.966022Z","title":"Casper, J","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T00:14:59.966022Z"},"links":{"cited_paper":"/paper/2306.09442","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:1767875901f914a25638a1a90aec4f55f2b88576ee269f4802c8bb6c1f1b424f","observation_id":"cfba1cf5-35fd-49e4-81d5-182a7d296090","resolution":{"observed_at":"2026-08-07T00:14:59.966022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-08-12T12:29:45.113982Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-07T00:15:00.068299Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:00.068299Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:d4c6509220b707b100fd7d23e50c2682df098c2b256a0180939e15fa7667b61a","observation_id":"431efbee-a0bf-4b5a-afeb-9201798372a1","resolution":{"observed_at":"2026-08-07T00:15:00.068299Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:10.993573Z","title":"Cui, W.-L","venue":null,"work_id":"dc59d79d-40de-4a43-9225-ee58e4095153","year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:00.101345Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:6dadea52942c607e49389ed9d079ebe72403db669b943cf43428feb11ce3c012","observation_id":"c1435b38-2ac7-4d75-82b9-7cb771fcbf99","resolution":{"observed_at":"2026-08-07T00:15:11.089615Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:10.882922Z","title":null,"venue":null,"work_id":"b707fc0d-cc32-418d-9281-03ae742ebb36","year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:00.185931Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:6192c5e36511232d77b1698fcefdaeb5ce907d55aec4b27ecf46f136bb6dd845","observation_id":"1dc6ab61-8f0d-45ba-9099-4393c1c7f81a","resolution":{"observed_at":"2026-08-07T00:15:10.926992Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-08-13T05:25:30.661845Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-08-07T00:15:00.293871Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:00.293871Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:987ba477563693efdb5f7962e9cb984540a658dc83f636f8fcd1c82626e9e088","observation_id":"f3f5d76a-8548-44c7-a635-c4a614e5d972","resolution":{"observed_at":"2026-08-07T00:15:00.293871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-08-13T10:17:00.791443Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-08-07T00:15:00.379355Z","title":"Ganguli, L","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:00.379355Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:78d2f6655fb497bca04c6799d4f13f46ccabcc2682844f8e7f7bfdbbc31faab0","observation_id":"bf375f27-bace-47e8-920b-b61d9565dc55","resolution":{"observed_at":"2026-08-07T00:15:00.379355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.07689","last_updated":"2023-11-13T19:13:29Z","snapshot_observed_at":"2026-08-13T05:26:46.458352Z","submitted_at":"2023-11-13T19:13:29Z","title":"MART: Improving LLM Safety with Multi-round Automatic Red-Teaming","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.07689","snapshot_observed_at":"2026-08-07T00:15:00.457694Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:00.457694Z"},"links":{"cited_paper":"/paper/2311.07689","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:724a7278dd8b455b102362ef0b46b773da9a633f96757f6e294c13f6bd4c2166","observation_id":"1d795c97-49bb-4593-8c82-ed9875ae1870","resolution":{"observed_at":"2026-08-07T00:15:00.457694Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09154","last_updated":"2025-03-03T09:37:27Z","snapshot_observed_at":"2026-08-13T04:19:08.545815Z","submitted_at":"2024-02-14T13:13:26Z","title":"Attacking Large Language Models with Projected Gradient Descent","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09154","snapshot_observed_at":"2026-08-07T00:15:00.545572Z","title":"Geisler, T","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:00.545572Z"},"links":{"cited_paper":"/paper/2402.09154","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:d4de2725ec5af6cbd4e1b7b02c069de5554dc89e50a92456f41ccb71ea2a676e","observation_id":"6bb50952-d1d9-413d-be5e-82a3066116a6","resolution":{"observed_at":"2026-08-07T00:15:00.545572Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16339","last_updated":"2025-01-08T20:11:59Z","snapshot_observed_at":"2026-08-14T04:22:20.981738Z","submitted_at":"2024-12-20T21:00:11Z","title":"Deliberative Alignment: Reasoning Enables Safer Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16339","snapshot_observed_at":"2026-08-07T00:15:00.611082Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:00.611082Z"},"links":{"cited_paper":"/paper/2412.16339","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:f35148494512e85c6b6bff935dd61850bb88fb0c5bc4ef8e307b734cc65cebe7","observation_id":"f2513c89-8d5f-42a1-a973-4811b3530d72","resolution":{"observed_at":"2026-08-07T00:15:00.611082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.16137","last_updated":"2025-04-29T15:14:35Z","snapshot_observed_at":"2026-08-12T20:55:32.847549Z","submitted_at":"2025-04-21T21:04:01Z","title":"Virology Capabilities Test (VCT): A Multimodal Virology Q&A Benchmark","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.16137","snapshot_observed_at":"2026-08-07T00:15:00.695930Z","title":"Götting, P","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:00.695930Z"},"links":{"cited_paper":"/paper/2504.16137","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:b2ea2d1f4c250ebc6639a05e636d5c7cf535c5ce234f7d519635a6dffb3c0c87","observation_id":"1bafb0ea-20f1-4ed1-a1d2-10feb98f3ada","resolution":{"observed_at":"2026-08-07T00:15:00.695930Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:10.649216Z","title":"Claude 2.1 refuses to kill a python process: Hacker news","venue":null,"work_id":"99723771-7eab-4869-83a6-67d557f19f13","year":null},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:00.782673Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:1741c2b82ba12f9f15ee12e0e20c6359fd8d7fd78ad6dbea225e8944e18c10a8","observation_id":"5e068781-6fc4-41cc-92c9-b1fae0262414","resolution":{"observed_at":"2026-08-07T00:15:10.774412Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.12001","last_updated":"2023-10-09T22:57:01Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-06-21T03:35:06Z","title":"An Overview of Catastrophic AI Risks","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.12001","snapshot_observed_at":"2026-08-07T00:15:00.870782Z","title":"Hendrycks, M","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:00.870782Z"},"links":{"cited_paper":"/paper/2306.12001","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:085502d9f807c32373cb029caa44c07f56f12f1af940b1f038e75329e4fb0d0f","observation_id":"558a4be8-c1f9-4951-9438-ffd6610a802b","resolution":{"observed_at":"2026-08-07T00:15:00.870782Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.19540","last_updated":"2025-03-25T10:48:33Z","snapshot_observed_at":"2026-08-09T17:42:05.682756Z","submitted_at":"2025-03-25T10:48:33Z","title":"FLEX: A Benchmark for Evaluating Robustness of Fairness in Large Language Models","version":1},"cited_work":{"arxiv_id":"2503.19540","doi":null,"metadata_source":"pith","pith_arxiv_id":"2503.19540","snapshot_observed_at":"2026-08-07T00:15:07.365085Z","title":"FLEX: A Benchmark for Evaluating Robustness of Fairness in Large Language Models","venue":"cs.CL","work_id":"cab918cc-a091-4fe0-834b-c516bbe18cde","year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:00.940135Z"},"links":{"cited_paper":"/paper/2503.19540","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:2f11cfd803a5957b92500badab18044d27bc085c799d54525fd969f6170c0fa9","observation_id":"e97587ca-13d7-4ce3-b7da-214a50e6e914","resolution":{"observed_at":"2026-08-07T00:15:07.454159Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-09T01:40:08.338849Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.09638","snapshot_observed_at":"2026-08-07T00:15:01.031229Z","title":"Kritz, V","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:01.031229Z"},"links":{"cited_paper":"/paper/2502.09638","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:6c4c8a2343a64348d90c7a9de066163f0fd6386760fde65342db3afa8b444aeb","observation_id":"8ff9d318-5134-4de2-a3cc-14e3bb31ba07","resolution":{"observed_at":"2026-08-07T00:15:01.031229Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-08-13T01:01:10.084468Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-08-07T00:15:01.139782Z","title":"Kumar, E","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:01.139782Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:bd0cade7d0f179d961f947c2bf6342283dfb3d8b304fd8ee3a351c21f6f87ccd","observation_id":"8790198c-cfc5-4bb9-84bc-f284d8110a6b","resolution":{"observed_at":"2026-08-07T00:15:01.139782Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.04757","last_updated":"2025-07-24T04:42:59Z","snapshot_observed_at":"2026-08-13T08:58:46.538704Z","submitted_at":"2025-02-07T08:43:15Z","title":"ELITE: Enhanced Language-Image Toxicity Evaluation for Safety","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.04757","snapshot_observed_at":"2026-08-07T00:15:01.258162Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:01.258162Z"},"links":{"cited_paper":"/paper/2502.04757","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:b4e4a413e4fdc64c83b7eacabc1c9a9cb8071188a55505bf40457bbf7daea886","observation_id":"39f06acd-dc2b-4476-b7be-6502b5015fce","resolution":{"observed_at":"2026-08-07T00:15:01.258162Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:10.482353Z","title":null,"venue":null,"work_id":"b851adc9-53b5-4790-9ca3-0791c858c198","year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:01.378228Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:f3dd92229f63403f53194dfaffb3fd5748619062717259407f60f1b96c5e6cd1","observation_id":"92ede0a1-db21-4176-b312-ae2c7494631a","resolution":{"observed_at":"2026-08-07T00:15:10.561222Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.15221","last_updated":"2024-09-04T00:58:59Z","snapshot_observed_at":"2026-08-12T22:56:25.482748Z","submitted_at":"2024-08-27T17:33:30Z","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.15221","snapshot_observed_at":"2026-08-07T00:15:01.464128Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:01.464128Z"},"links":{"cited_paper":"/paper/2408.15221","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:2ef97a7a164463fcae6a672c451de97f16250932adea0f64b7ab9ae97870a189","observation_id":"d5622b38-d1cb-47b7-9f96-0a23a7be94db","resolution":{"observed_at":"2026-08-07T00:15:01.464128Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:10.301642Z","title":null,"venue":null,"work_id":"8460e284-472e-4caf-8e5a-f7f35f841faf","year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:01.545531Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:d12821b4516525c49d30376e6af8e07355c901cf77d7788aefd37a140b8c576d","observation_id":"19295399-2234-487e-94eb-73a7fedfedbe","resolution":{"observed_at":"2026-08-07T00:15:10.382498Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:01.602812Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:01.602812Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:4a8b5d5fede44a2de8870cee01bef4ac1b7eea8ec0f91abb384405541f05af6e","observation_id":"55c53a0f-8d3b-4116-9f03-0f915f2a3bf7","resolution":{"observed_at":"2026-08-07T00:15:01.602812Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.07933","last_updated":"2024-10-31T07:36:39Z","snapshot_observed_at":"2026-08-12T23:44:53.015578Z","submitted_at":"2024-06-12T06:56:20Z","title":"Large Language Model Unlearning via Embedding-Corrupted Prompts","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.07933","snapshot_observed_at":"2026-08-07T00:15:01.670528Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:01.670528Z"},"links":{"cited_paper":"/paper/2406.07933","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:40fa4c872738d192241cdceb4fbe9003167575ea3526a4c2b02942e0ab9fecab","observation_id":"199c33c7-2d7b-4d29-bce2-ebe622b4ac5f","resolution":{"observed_at":"2026-08-07T00:15:01.670528Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.12855","last_updated":"2024-10-18T02:35:22Z","snapshot_observed_at":"2026-08-12T22:25:22.044244Z","submitted_at":"2024-10-11T14:56:28Z","title":"JAILJUDGE: A Comprehensive Jailbreak Judge Benchmark with Multi-Agent Enhanced Explanation Evaluation Framework","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.12855","snapshot_observed_at":"2026-08-07T00:15:01.751718Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:01.751718Z"},"links":{"cited_paper":"/paper/2410.12855","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:5474258c972228b96a09557dda9a1414864ef8e4c81d1d82b58d4c2d21189f54","observation_id":"6223093a-3c22-47d2-82ef-f45af762f462","resolution":{"observed_at":"2026-08-07T00:15:01.751718Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.16971","last_updated":"2025-02-24T08:54:39Z","snapshot_observed_at":"2026-08-14T03:09:17.603579Z","submitted_at":"2025-02-24T08:54:39Z","title":"LongSafety: Evaluating Long-Context Safety of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.16971","snapshot_observed_at":"2026-08-07T00:15:01.810686Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:01.810686Z"},"links":{"cited_paper":"/paper/2502.16971","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:1b3aa6e4dd5a7fc58e90c5683d839b8ee74d713c1707394363668122885b4d15","observation_id":"39220523-c287-4ec3-af35-b8ea997ac126","resolution":{"observed_at":"2026-08-07T00:15:01.810686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:01.891368Z","title":"Maini, S","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:01.891368Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:1c16ec4c1189a96262bcb8fd9f6918f789fcbcecc1848581f65f435b680f2bf8","observation_id":"a40b2ff7-1ead-491d-974a-bc216dda5ecb","resolution":{"observed_at":"2026-08-07T00:15:01.891368Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.15911","last_updated":"2024-02-24T21:27:13Z","snapshot_observed_at":"2026-08-13T04:10:49.814777Z","submitted_at":"2024-02-24T21:27:13Z","title":"PRP: Propagating Universal Perturbations to Attack Large Language Model Guard-Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.15911","snapshot_observed_at":"2026-08-07T00:15:01.975098Z","title":"Mangaokar, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:01.975098Z"},"links":{"cited_paper":"/paper/2402.15911","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:28123a812ce927e2d751bd40f3f0f8636002879c7adfc341392853640e28a13f","observation_id":"10498fd5-ae2b-48cf-9c57-cbc237cc3147","resolution":{"observed_at":"2026-08-07T00:15:01.975098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13843","last_updated":"2024-06-21T10:27:11Z","snapshot_observed_at":"2026-08-12T23:38:53.395372Z","submitted_at":"2024-06-19T21:11:17Z","title":"Generative AI Misuse: A Taxonomy of Tactics and Insights from Real-World Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13843","snapshot_observed_at":"2026-08-07T00:15:02.056142Z","title":"Marchal, R","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:02.056142Z"},"links":{"cited_paper":"/paper/2406.13843","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:dd70abe6faad63e5129aee9d674aaaf287e0a576955c6439a5d9a116d2c106f4","observation_id":"2633b22d-f2d7-488a-a871-d96e0880e6af","resolution":{"observed_at":"2026-08-07T00:15:02.056142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:10.113823Z","title":"Mazeika, A","venue":null,"work_id":"fd8e0869-d0cd-4fbc-b6fc-518341549801","year":2023},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:02.101905Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:f587e1a223251281a5c1ddbf3f8214d11311c06c3864dbb00433ab1e479ceaaa","observation_id":"db69e234-0acf-4c5e-b8ff-95a91ea67b15","resolution":{"observed_at":"2026-08-07T00:15:10.217342Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:02.159578Z","title":"Mazeika, L","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:02.159578Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:00ce6e07d9dddbf75a0e57cd1cbff939858aab0506ba0fadeee1b36d2e3a8a1c","observation_id":"5f328571-72eb-4cf1-a071-846ce815c334","resolution":{"observed_at":"2026-08-07T00:15:02.159578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02119","last_updated":"2024-10-31T15:57:42Z","snapshot_observed_at":"2026-08-14T06:54:18.196537Z","submitted_at":"2023-12-04T18:49:23Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.02119","snapshot_observed_at":"2026-08-07T00:15:02.273880Z","title":"Mehrotra, M","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:02.273880Z"},"links":{"cited_paper":"/paper/2312.02119","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:3e75369c04122aff5b5db130b3cdf1a489105ff0d4a22e2ffb54d2544f7ea142","observation_id":"4b534323-c059-406b-8c99-c41e3394168f","resolution":{"observed_at":"2026-08-07T00:15:02.273880Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:09.948224Z","title":null,"venue":null,"work_id":"daa5fe6a-1628-4942-88fd-c51c59506343","year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:02.347758Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:fc2c1cb0d5c897a29ed97de75962f2a795fdcb1725983b304b13104cf3299e73","observation_id":"4401b9eb-5aae-44ac-8b0e-81b114e01318","resolution":{"observed_at":"2026-08-07T00:15:10.007223Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04146","last_updated":"2025-05-07T05:54:04Z","snapshot_observed_at":"2026-08-07T15:49:18.799957Z","submitted_at":"2025-05-07T05:54:04Z","title":"Unmasking the Canvas: A Dynamic Benchmark for Image Generation Jailbreaking and LLM Content Safety","version":1},"cited_work":{"arxiv_id":"2505.04146","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.04146","snapshot_observed_at":"2026-08-07T00:15:06.908380Z","title":"Unmasking the Canvas: A Dynamic Benchmark for Image Generation Jailbreaking and LLM Content Safety","venue":"cs.CL","work_id":"bd38d637-59cf-4757-8bb7-6887458d2a70","year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:02.401281Z"},"links":{"cited_paper":"/paper/2505.04146","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:589cce770e282c0b2e4c511d9a16d8a11e21ee55c2780c4f9bffff9333249771","observation_id":"faab82b1-70ff-48c5-844f-faed07f25740","resolution":{"observed_at":"2026-08-07T00:15:07.029969Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:09.754800Z","title":"Ai risk management framework, May 2025","venue":null,"work_id":"e9a67a68-a7c9-472c-a992-c9ae82de227c","year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:02.495715Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:879b18aeb0edb2fdf91e674572125a6bda708ba6a2b6950dbdb4739caf75368b","observation_id":"eabf7516-1574-4ef7-a289-69224a8f4020","resolution":{"observed_at":"2026-08-07T00:15:09.836461Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.02155","last_updated":"2022-03-04T07:04:42Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-03-04T07:04:42Z","title":"Training language models to follow instructions with human feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.02155","snapshot_observed_at":"2026-08-07T00:15:02.565572Z","title":"Ouyang, J","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:02.565572Z"},"links":{"cited_paper":"/paper/2203.02155","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:ad1c3a88cb058d3fbd37dbe94848565812237adfa09dc5fad22932afce1ca460","observation_id":"7a192034-1d69-451e-b82c-1abddea95343","resolution":{"observed_at":"2026-08-07T00:15:02.565572Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.08193","last_updated":"2022-03-16T01:35:45Z","snapshot_observed_at":"2026-07-06T11:58:21.596920Z","submitted_at":"2021-10-15T16:43:46Z","title":"BBQ: A Hand-Built Bias Benchmark for Question Answering","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.08193","snapshot_observed_at":"2026-08-07T00:15:02.600768Z","title":"Parrish, A","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:02.600768Z"},"links":{"cited_paper":"/paper/2110.08193","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:c59356f6b7591be9b0b156421eb808887e4cfdf19071b71d8bd562836884c1a8","observation_id":"9f01772e-4044-4553-9783-09caad90b039","resolution":{"observed_at":"2026-08-07T00:15:02.600768Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:02.670676Z","title":"Perez, S","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:02.670676Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:c5cd19e1d1438e1a85f3c39d8f93f6312d158b2d238e8150da915fd0e361a4a4","observation_id":"8d9b23e0-ef5f-4e81-9738-c8deef8f89dd","resolution":{"observed_at":"2026-08-07T00:15:02.670676Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2111.08181","last_updated":"2021-11-16T01:45:26Z","snapshot_observed_at":"2026-08-13T17:33:31.765944Z","submitted_at":"2021-11-16T01:45:26Z","title":"Adversarially Constructed Evaluation Sets Are More Challenging, but May Not Be Fair","version":1},"cited_work":{"arxiv_id":"2111.08181","doi":null,"metadata_source":"pith","pith_arxiv_id":"2111.08181","snapshot_observed_at":"2026-08-07T00:15:06.707039Z","title":"Adversarially Constructed Evaluation Sets Are More Challenging, but May Not Be Fair","venue":"cs.CL","work_id":"3f2a94c7-e081-4c7b-9ea7-de55eeebd182","year":2021},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:02.734925Z"},"links":{"cited_paper":"/paper/2111.08181","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:704df32dfcae529bf952ed1894d709947ae7e31d48f27807b16295d8cfaa5586","observation_id":"b0bf45fc-6d2a-4a3f-ae5e-fa2d2487a1b5","resolution":{"observed_at":"2026-08-07T00:15:06.783709Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:09.560339Z","title":null,"venue":null,"work_id":"4c1d3bba-2218-461f-8d5d-bccfb0e51f5c","year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:02.823039Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:7f5489ef80820c843dc6931a94581470cc4bc8679b45a591e2e01386e8a3581d","observation_id":"b8ec373d-df04-4667-9324-e12fa0240a54","resolution":{"observed_at":"2026-08-07T00:15:09.654930Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12552","last_updated":"2025-02-18T05:26:27Z","snapshot_observed_at":"2026-08-07T18:10:09.741342Z","submitted_at":"2025-02-18T05:26:27Z","title":"LLM Safety for Children","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12552","snapshot_observed_at":"2026-08-07T00:15:02.902460Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:02.902460Z"},"links":{"cited_paper":"/paper/2502.12552","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:def4e198a512aafc30d20a285d31018144bb4cfee77d6ab50243ec0fe45154bf","observation_id":"47b59021-9a82-4245-a4bc-616a63c0094f","resolution":{"observed_at":"2026-08-07T00:15:02.902460Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:03.011329Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.011329Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:d9dd5e7ee4b814e44f2d82876df53ed996d245111dc9df735e722d796f86f3a4","observation_id":"48d6022c-0ec4-46d1-b49e-3abf3280731d","resolution":{"observed_at":"2026-08-07T00:15:03.011329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14577","last_updated":"2024-10-30T22:58:40Z","snapshot_observed_at":"2026-08-12T23:59:50.265846Z","submitted_at":"2024-05-23T13:51:55Z","title":"Representation Noising: A Defence Mechanism Against Harmful Finetuning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.14577","snapshot_observed_at":"2026-08-07T00:15:03.070633Z","title":"Rosati, J","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.070633Z"},"links":{"cited_paper":"/paper/2405.14577","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:c56c80a593b3b103ea9c5f643d4613502c89bd43dcb5d07b347157dcc32a6b82","observation_id":"f4a944b9-7dd5-4bb7-9f03-2070e7a327f3","resolution":{"observed_at":"2026-08-07T00:15:03.070633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:03.137214Z","title":"Röttger, H","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.137214Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:f6fec9cedd619ca1eb197d74ca59d98dac53ebd632a3e6824e293bce0be1e178","observation_id":"722bac10-5e12-4d5b-8a26-f6d7c5d45045","resolution":{"observed_at":"2026-08-07T00:15:03.137214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01833","last_updated":"2025-02-26T13:41:41Z","snapshot_observed_at":"2026-08-13T05:33:18.631487Z","submitted_at":"2024-04-02T10:45:49Z","title":"Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01833","snapshot_observed_at":"2026-08-07T00:15:03.205891Z","title":"Russinovich, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.205891Z"},"links":{"cited_paper":"/paper/2404.01833","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:ff59c2312a39c99ebbafb1ebe65427fad869bb3286e990ee86110fc5032635e0","observation_id":"92fff33d-915e-4c8d-85e5-1d1ba5e4463d","resolution":{"observed_at":"2026-08-07T00:15:03.205891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.15902","last_updated":"2024-08-02T12:02:47Z","snapshot_observed_at":"2026-08-14T06:20:11.290155Z","submitted_at":"2024-07-22T11:53:48Z","title":"Revisiting the Robust Alignment of Circuit Breakers","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.15902","snapshot_observed_at":"2026-08-07T00:15:03.295166Z","title":"Schwinn and S","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.295166Z"},"links":{"cited_paper":"/paper/2407.15902","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:2319b1b0e468e7e0256730b8881b1b6252c76d8d83f5809b4ffd5f5b290059c0","observation_id":"ba1f431e-15c9-449b-9476-2a49f39b882d","resolution":{"observed_at":"2026-08-07T00:15:03.295166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18837","last_updated":"2025-01-31T01:09:32Z","snapshot_observed_at":"2026-08-08T23:58:18.293467Z","submitted_at":"2025-01-31T01:09:32Z","title":"Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teaming","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18837","snapshot_observed_at":"2026-08-07T00:15:03.395315Z","title":"Sharma, M","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.395315Z"},"links":{"cited_paper":"/paper/2501.18837","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:df91c71f811d112a1eb36b8a224649d4d33a526a95f0508384ba7262d398a0c5","observation_id":"cc4e0304-630b-4fb6-b532-bed6d3638f3c","resolution":{"observed_at":"2026-08-07T00:15:03.395315Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03825","last_updated":"2024-05-15T12:06:31Z","snapshot_observed_at":"2026-07-06T16:03:34.432602Z","submitted_at":"2023-08-07T16:55:20Z","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03825","snapshot_observed_at":"2026-08-07T00:15:03.455500Z","title":"do anything now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.455500Z"},"links":{"cited_paper":"/paper/2308.03825","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:0193661db5671bcd68fa885b5eb4be9d206d564368c5d967af42ed0a695fd4ab","observation_id":"b239cc3b-6c8c-4e70-aa49-99e105369efd","resolution":{"observed_at":"2026-08-07T00:15:03.455500Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.15549","last_updated":"2025-07-29T09:37:22Z","snapshot_observed_at":"2026-08-13T08:22:02.023626Z","submitted_at":"2024-07-22T11:19:14Z","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.15549","snapshot_observed_at":"2026-08-07T00:15:03.520030Z","title":"Sheshadri, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.520030Z"},"links":{"cited_paper":"/paper/2407.15549","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:2102c88167b151dbbbd1019754848ce9aca743967a7665751315efdffe526a6b","observation_id":"42f77eac-3b4b-4899-beee-a46cbdabb3fd","resolution":{"observed_at":"2026-08-07T00:15:03.520030Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:03.558005Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.558005Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:a1d59d0138d5f03f2887f1afb3001ed8dc25d08702603cefb20852116af69d9d","observation_id":"01c141fa-d078-4021-bb6f-e7db47f87ed8","resolution":{"observed_at":"2026-08-07T00:15:03.558005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:03.649439Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.649439Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:589b8a368dd6d35cf17c881c593d6b7a2ba3904d80846d366532215b3d1bada3","observation_id":"e5b34a33-ea5f-4996-8a38-e51418526272","resolution":{"observed_at":"2026-08-07T00:15:03.649439Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-13T06:05:29.340504Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-07T00:15:03.747220Z","title":"Sitawarin, N","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.747220Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:2e5fb355e8cb0474c7f54032ebdccd9aef2c6e644d914858355d92eb4cadfc70","observation_id":"5ac81ce7-660f-4fef-bd24-e4a98aaac07d","resolution":{"observed_at":"2026-08-07T00:15:03.747220Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:09.401176Z","title":"Souly, Q","venue":null,"work_id":"8aece0a3-c3bf-454a-85f3-bae589760420","year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.797979Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:78166a8f459e85f036b2d6dc627b00e1c12313384717342feadc10022210fd2c","observation_id":"c1070809-e116-432a-89a3-b27e81dd683c","resolution":{"observed_at":"2026-08-07T00:15:09.487659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:09.238152Z","title":"Sumers, R","venue":null,"work_id":"18c7f0ff-ea72-41d2-9810-58acc5b39583","year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.894946Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:c4e3ca708c8405799c138bcdd0b805e5cd308646040af7b0121d4bc2cb4580f9","observation_id":"7b510da0-9c43-47a4-af2c-75ed784a0f26","resolution":{"observed_at":"2026-08-07T00:15:09.317837Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04686","last_updated":"2024-08-08T09:18:47Z","snapshot_observed_at":"2026-08-12T23:06:42.112788Z","submitted_at":"2024-08-08T09:18:47Z","title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.04686","snapshot_observed_at":"2026-08-07T00:15:03.998647Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.998647Z"},"links":{"cited_paper":"/paper/2408.04686","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:7b43d0bb5919fc06ae183e00b66978f84cd69010c648edc315e9820cda99c807","observation_id":"6f8ebd5a-0613-40c3-8f95-8a4b6f968bfe","resolution":{"observed_at":"2026-08-07T00:15:03.998647Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00761","last_updated":"2025-02-10T18:26:14Z","snapshot_observed_at":"2026-08-12T23:10:02.039675Z","submitted_at":"2024-08-01T17:59:12Z","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00761","snapshot_observed_at":"2026-08-07T00:15:04.114372Z","title":"Tamirisa, B","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:04.114372Z"},"links":{"cited_paper":"/paper/2408.00761","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:3f83a722c044e7e89233ed09ce0941c6180743625698e7975a8c12503a495b58","observation_id":"cb9ce222-09c4-4978-ae18-8bf30d6a1af2","resolution":{"observed_at":"2026-08-07T00:15:04.114372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:09.112187Z","title":null,"venue":null,"work_id":"6db1fada-91b8-4d1b-8acf-46f94a0409b7","year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:04.252170Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:a5f55ea666fe9905ff0da840376fd62795f16ed47a3d6e05bf029e5c3f26afa3","observation_id":"2f82c4a2-7c84-4c39-9382-51bcb4931565","resolution":{"observed_at":"2026-08-07T00:15:09.171491Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:04.365232Z","title":"Wallace, S","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:04.365232Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:b4867928e76beac3556e041461fee27762a3a12b241e44485f61edd9577d8443","observation_id":"7b45152b-caa2-40d5-8b4d-867f2d01e7cf","resolution":{"observed_at":"2026-08-07T00:15:04.365232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:08.944744Z","title":null,"venue":null,"work_id":"e24a0373-ec3f-4289-a3b2-5281b882a000","year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:04.498082Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:db1217e0e7084a51b5d0f877226539f0f30d1f0bc15d8d17c46504c2ef0f231e","observation_id":"bbccea66-9500-4a79-bfc0-d71c28179083","resolution":{"observed_at":"2026-08-07T00:15:09.014031Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:08.776276Z","title":null,"venue":null,"work_id":"0a379d68-2548-41bf-9565-87528ff70252","year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:04.589951Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:f788457276f3a710429fffe30cb09f1f8e180fb994caaeb00ad62c7525ba3429","observation_id":"197b4fa9-1f1f-48f0-9ef3-5e0544fe79f1","resolution":{"observed_at":"2026-08-07T00:15:08.878002Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.15589","last_updated":"2024-11-01T16:39:36Z","snapshot_observed_at":"2026-08-12T23:58:44.382152Z","submitted_at":"2024-05-24T14:20:09Z","title":"Efficient Adversarial Training in LLMs with Continuous Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.15589","snapshot_observed_at":"2026-08-07T00:15:04.775172Z","title":"Xhonneux, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:04.775172Z"},"links":{"cited_paper":"/paper/2405.15589","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:3778615e65b7c71d15fb2a50cf1d915929550a420b2644369ace58f7fa0c6182","observation_id":"d2467726-156b-4060-ab54-637a8a6d5571","resolution":{"observed_at":"2026-08-07T00:15:04.775172Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:08.591533Z","title":null,"venue":null,"work_id":"e8b1b996-5fe5-4c1b-82ad-8f88a7b0cc4c","year":2025},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:04.941706Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:c11aa0009a865b015e9f7a790bbc188a0fb487e5674be6e286344b3bc7d68819","observation_id":"c14be7e0-44a6-42c8-8e95-f3aca1f1525e","resolution":{"observed_at":"2026-08-07T00:15:08.649852Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-07T00:15:05.208506Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:05.208506Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:48a489163ae3e1c6249a6d2b614b3c687740038c7520502c70e01fbfab217415","observation_id":"87a2151e-3ff0-40c6-b09d-f1e8c17833a4","resolution":{"observed_at":"2026-08-07T00:15:05.208506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.09121","last_updated":"2025-05-23T04:31:00Z","snapshot_observed_at":"2026-08-12T23:23:36.820652Z","submitted_at":"2024-07-12T09:36:33Z","title":"Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.09121","snapshot_observed_at":"2026-08-07T00:15:05.291677Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:05.291677Z"},"links":{"cited_paper":"/paper/2407.09121","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:033e3f24aa8a23c389b8a30a1086df8658f3d11cb2f8ac0f266a225e3d4ec4ca","observation_id":"168523f8-e758-40be-8b91-fce8b89932d7","resolution":{"observed_at":"2026-08-07T00:15:05.291677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21772","last_updated":"2024-08-04T22:13:39Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-31T17:48:14Z","title":"ShieldGemma: Generative AI Content Moderation Based on Gemma","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21772","snapshot_observed_at":"2026-08-07T00:15:05.382521Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:05.382521Z"},"links":{"cited_paper":"/paper/2407.21772","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:2247db26b1402f73580d8e6351d8faf4263c4aff6baa8c53723ec7ebe163af67","observation_id":"f9d31d2f-a9c6-4a64-93e6-40021af1d938","resolution":{"observed_at":"2026-08-07T00:15:05.382521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.17864","last_updated":"2024-06-25T18:13:05Z","snapshot_observed_at":"2026-08-12T23:35:01.616012Z","submitted_at":"2024-06-25T18:13:05Z","title":"AI Risk Categorization Decoded (AIR 2024): From Government Regulations to Corporate Policies","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.17864","snapshot_observed_at":"2026-08-07T00:15:05.511733Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:05.511733Z"},"links":{"cited_paper":"/paper/2406.17864","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:d8b88dcdae98f63919c7d45d16d3900e21c91b868bbf155605f75bc17b0c84eb","observation_id":"4701b7cc-5139-43fd-9aa7-c132474875a2","resolution":{"observed_at":"2026-08-07T00:15:05.511733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:08.464788Z","title":null,"venue":null,"work_id":"3cc419d2-618f-4007-81ab-c0394838d3b1","year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:05.633452Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:6bb95aca82f613827806ba268ea01f9d83a9fce50f6f618a023cece37a7e3ea4","observation_id":"20473144-08ef-46b8-bc11-45bcf5138bdf","resolution":{"observed_at":"2026-08-07T00:15:08.537701Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:08.277297Z","title":null,"venue":null,"work_id":"eafe6a51-dc1c-4304-b9bd-d234f7301eed","year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:05.726727Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:39886b302f2ca500347303f6d6ec1d971594af6b6566378332ab422cb22e2923","observation_id":"dda30a46-69a7-4e4f-804d-e37cd1491b95","resolution":{"observed_at":"2026-08-07T00:15:08.388463Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01405","last_updated":"2025-03-03T06:14:14Z","snapshot_observed_at":"2026-07-06T16:26:38.284922Z","submitted_at":"2023-10-02T17:59:07Z","title":"Representation Engineering: A Top-Down Approach to AI Transparency","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.01405","snapshot_observed_at":"2026-08-07T00:15:05.768551Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:05.768551Z"},"links":{"cited_paper":"/paper/2310.01405","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:4287073e782ad3a0d24a2811bb0fab1c04548c64f6a895d35c876d03b85e8d73","observation_id":"4f9812da-709a-428a-b2dc-ab5081476cb9","resolution":{"observed_at":"2026-08-07T00:15:05.768551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T00:15:05.824023Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:05.824023Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:082303fc80a50d8ef167d70e7b84a2d0832cc69293ae9ae0e6b4c3f2c43b9551","observation_id":"c05a9a9f-8a45-462d-a913-5bb9f3655a7a","resolution":{"observed_at":"2026-08-07T00:15:05.824023Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.04313","last_updated":"2024-07-12T16:51:07Z","snapshot_observed_at":"2026-08-12T23:48:30.125202Z","submitted_at":"2024-06-06T17:57:04Z","title":"Improving Alignment and Robustness with Circuit Breakers","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.04313","snapshot_observed_at":"2026-08-07T00:15:05.900970Z","title":"jailbreaks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:05.900970Z"},"links":{"cited_paper":"/paper/2406.04313","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:0df7e6587bf81c8ef3bf1b7c8f3a5677bb666393c5909d0f2054b6ee5c30fa5b","observation_id":"74b0f1e0-4028-45f5-9593-e7454f3d1157","resolution":{"observed_at":"2026-08-07T00:15:05.900970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:08.081752Z","title":null,"venue":null,"work_id":"bc8677c2-1bea-40cb-80b7-cc5d054b6757","year":null},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:06.005285Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:7bfd9a941e76e20aae33fcbd80abed0da9031b491053204e74d1670d5a36864f","observation_id":"b0f6cb36-6e2a-48af-a038-7c0b50ea055e","resolution":{"observed_at":"2026-08-07T00:15:08.186512Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:07.912688Z","title":null,"venue":null,"work_id":"0ece2777-64c5-4ed9-a7cf-2a7a7286fac8","year":null},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:06.092878Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:37e7d1edae95a2b73166d86e5dfc3b9f72ef988dadff922e48b59aa4d601a305","observation_id":"3ce0c0ca-9dc4-4c96-bab8-1513e52b79ad","resolution":{"observed_at":"2026-08-07T00:15:08.005408Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:07.704449Z","title":"Explicit advocacy for inciting violence or riots with the direct and provable intention of causing physical harm or societal disruption","venue":null,"work_id":"3007aa90-7357-4e78-b41e-5997f3d58e98","year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:06.220568Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:c52c24ccd5f49f3b8d45e5ff54203fa3acbdf7641cbf9d2cae987201b058bf8b","observation_id":"a7c0ee2e-4538-4a63-a185-6a6a5fd32dea","resolution":{"observed_at":"2026-08-07T00:15:07.813972Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:11.919608Z","title":null,"venue":null,"work_id":"331ad475-dd52-4980-9ad6-dc3e7014399b","year":null},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T00:14:59.279105Z"},"links":{"citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:79e10cb0d6c0048d3cfdde2fb2d43f527018a2816fb967bf3346d53bd05de16c","observation_id":"e22f2dd6-9f6e-43f1-80bc-a82d3e553150","resolution":{"observed_at":"2026-08-07T00:15:12.041890Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","latest_version":2,"primary_category":"cs.CY","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety"},"reference_resolution":{"displayed":81,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":70,"verified_exact":3,"verified_fuzzy":7},"total_outbound_references":81},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 81 of 81 outbound references and 11 inbound Pith citation observations for arXiv:2506.14922."}