{"as_of":"2026-08-23T07:33:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7d2ced8ab6f6bc986dc7486cad5f9504174f1cb91d92f455ae7f3783be35a8af","coverage":[{"denominator":42,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":42,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T17:18:24.547758Z","state":"measured"},{"denominator":43,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":43,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-23T06:30:58.430688+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-28T15:05:31.392966Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T22:46:19.137548Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"cited_work":{"arxiv_id":"2508.14128","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.14128","snapshot_observed_at":"2026-07-01T22:46:19.137548Z","title":"arXiv preprint arXiv:2508.14128 , year=","venue":null,"work_id":"a9ea5f40-76af-42d5-b33f-110c939b36d8","year":null},"citing_paper":{"arxiv_id":"2606.01738","last_updated":"2026-06-01T06:02:15Z","snapshot_observed_at":"2026-08-13T03:16:25.213548Z","submitted_at":"2026-06-01T06:02:15Z","title":"THRD: A Training-Free Multi-Turn Defense Framework for Jailbreak Attacks on Large Language Models","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-06-28T15:05:31.392966Z"},"links":{"cited_paper":"/paper/2508.14128","citing_paper":"/paper/2606.01738"},"observation_digest":"sha256:87edbe598fa05b5b7d685b45cb1a1c2df9a3ecf008ef967c7a088f3491b627d7","observation_id":"7a4c9139-d73f-4215-9c51-04edcccb1edd","resolution":{"observed_at":"2026-07-01T22:46:19.140570Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2508.14128/citation-record","integrity":"/paper/2508.14128/integrity","json":"/paper/2508.14128/citation-record.json","paper":"/paper/2508.14128"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:23.836284Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.836284Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:d8a90a55bc1a5731927eeecd39b6972f6a661d4d30a3448e75e30b3175884bed","observation_id":"b21dbddc-8897-432f-8b33-072bffa3fb3d","resolution":{"observed_at":"2026-08-15T17:18:23.836284Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:23.841243Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.841243Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:253df74e691be4fe16786e2f92d75a6f3fffa97c2a83b9d414f33c6cc9ab9057","observation_id":"6a625aa6-8eb1-4b4a-8094-dfd709ceed2c","resolution":{"observed_at":"2026-08-15T17:18:23.841243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.00580","last_updated":"2025-02-01T22:26:30Z","snapshot_observed_at":"2026-08-11T14:52:49.480062Z","submitted_at":"2025-02-01T22:26:30Z","title":"Defense Against the Dark Prompts: Mitigating Best-of-N Jailbreaking with Prompt Evaluation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.00580","snapshot_observed_at":"2026-08-15T17:18:23.845618Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.845618Z"},"links":{"cited_paper":"/paper/2502.00580","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:27d23d724d2fb4de049868c09bdb7403bfac432bbc83d82fad94909a89d1344a","observation_id":"25b35c97-8634-4097-b9db-4af25988495b","resolution":{"observed_at":"2026-08-15T17:18:23.845618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.05862","last_updated":"2022-04-12T15:02:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-12T15:02:38Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.05862","snapshot_observed_at":"2026-08-15T17:18:23.854082Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.854082Z"},"links":{"cited_paper":"/paper/2204.05862","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:ddbc6f46efaef5836a004857f566826936911d7d4237ba9e7258f622134ed272","observation_id":"ba2bd0da-7b4d-4330-b484-009b4357471d","resolution":{"observed_at":"2026-08-15T17:18:23.854082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:23.858171Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.858171Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:76fff43c8a610e01a73d089e723def19d267772503b532266f90938d387bb178","observation_id":"f6369855-e149-4e79-8301-f637c305044e","resolution":{"observed_at":"2026-08-15T17:18:23.858171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:25.134914Z","title":null,"venue":null,"work_id":"aca3a405-e67c-40d3-afc0-8f24afa59100","year":2025},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.862164Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:bd775a167e65a7d9c58f62da8cfde83b9274689892f250b3675675b470e03e05","observation_id":"cb9ae506-3747-4db2-936a-a7134a12bd19","resolution":{"observed_at":"2026-08-15T17:18:25.198207Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:23.911006Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.911006Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:6e08147c5c8a3e93203b6c0b07bb771e0d621a38324e1490c42bc0470cbc0895","observation_id":"8718ca29-3d61-4d47-b009-343b673bb111","resolution":{"observed_at":"2026-08-15T17:18:23.911006Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.08715","last_updated":"2023-10-25T07:30:51Z","snapshot_observed_at":"2026-08-19T11:42:57.272541Z","submitted_at":"2023-07-16T01:07:15Z","title":"MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbots","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.08715","snapshot_observed_at":"2026-08-15T17:18:23.991367Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.991367Z"},"links":{"cited_paper":"/paper/2307.08715","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:06dc0f614940a938ef09c2867900f9dbfd18333c2ab453fe1ec9ebeb87437083","observation_id":"72e0a2ac-d86b-4f7b-ad99-c0df552fc49a","resolution":{"observed_at":"2026-08-15T17:18:23.991367Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.043440Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.043440Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:749bc4d0c42762e1218d2f7c79aa16f0cf0bfd4d3725191d388f004695aa3b18","observation_id":"808e25c4-ef67-42e7-88c7-804fa487d624","resolution":{"observed_at":"2026-08-15T17:18:24.043440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.972375Z","title":null,"venue":null,"work_id":"f96edb50-4533-4926-8ef7-23c080bf570a","year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.047933Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:f0eb159285f8cd38c9cd46d46cd9b916e04d580e6c0cccd0690de2d7bfce528f","observation_id":"63bb63b2-31b1-46ae-abe5-4b9fff638b27","resolution":{"observed_at":"2026-08-15T17:18:24.977870Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.959524Z","title":null,"venue":null,"work_id":"9dd0b1bc-b1c3-4462-9586-56a15f33944b","year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.052082Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:a485b006b1d557f24eb79bbc1e4f6d1e8164a106128cda474bfd48f6aff78b26","observation_id":"dc5ea72d-d1c4-4eb0-9349-d6689d6f1041","resolution":{"observed_at":"2026-08-15T17:18:24.963534Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-08-14T15:42:19.849118Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-15T17:18:24.056670Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.056670Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:353e1bd2be967297bd5777618233287881323d49fa61412f0422d2699b3e0553","observation_id":"38315330-2b91-4dba-9a8a-d1e18a95aba8","resolution":{"observed_at":"2026-08-15T17:18:24.056670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00515","last_updated":"2024-11-10T22:02:27Z","snapshot_observed_at":"2026-08-14T16:40:35.729198Z","submitted_at":"2024-06-01T17:48:15Z","title":"A Survey on Large Language Models for Code Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00515","snapshot_observed_at":"2026-08-15T17:18:24.062636Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.062636Z"},"links":{"cited_paper":"/paper/2406.00515","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:b4854e36e5fa6abc6dbd9459c62d74a1a63cdab023ddc4613fe60aef22cb95a1","observation_id":"5359bfd0-3ab2-4b16-8d33-d3e824638c2b","resolution":{"observed_at":"2026-08-15T17:18:24.062636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.02705","last_updated":"2025-02-04T19:47:09Z","snapshot_observed_at":"2026-08-19T18:59:35.297879Z","submitted_at":"2023-09-06T04:37:20Z","title":"Certifying LLM Safety against Adversarial Prompting","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.02705","snapshot_observed_at":"2026-08-15T17:18:24.068355Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.068355Z"},"links":{"cited_paper":"/paper/2309.02705","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:d3a7ee3f6f7a5f37a0166531a285a2d93e9e2a8c9d29302a075355c697fedcbe","observation_id":"b89c6b03-55ef-4ed4-9aa2-6f69f0c2266d","resolution":{"observed_at":"2026-08-15T17:18:24.068355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.03191","last_updated":"2024-11-28T13:43:50Z","snapshot_observed_at":"2026-08-18T06:50:23.685098Z","submitted_at":"2023-11-06T15:29:30Z","title":"DeepInception: Hypnotize Large Language Model to Be Jailbreaker","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.03191","snapshot_observed_at":"2026-08-15T17:18:24.073098Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.073098Z"},"links":{"cited_paper":"/paper/2311.03191","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:5cb79ef110d4a83ee881e71df6ab5bf331399d88572a178faf8379fdb18f58bc","observation_id":"45ffd897-6a5c-46b9-8210-5d3e010fa631","resolution":{"observed_at":"2026-08-15T17:18:24.073098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2109.07958","last_updated":"2022-05-08T02:43:02Z","snapshot_observed_at":"2026-08-03T16:26:48.747700Z","submitted_at":"2021-09-08T17:15:27Z","title":"TruthfulQA: Measuring How Models Mimic Human Falsehoods","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2109.07958","snapshot_observed_at":"2026-08-15T17:18:24.077783Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.077783Z"},"links":{"cited_paper":"/paper/2109.07958","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:eb0e716ab1e4194b27aed28f68d094c383df828682369a05d3eab0783bcca3d3","observation_id":"b440d42a-a7bc-4b86-b98f-e93716c188b9","resolution":{"observed_at":"2026-08-15T17:18:24.077783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.159749Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.159749Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:632e3d6cb4d7f098d0e6e67b9d12a64fa033907194f1d03c3f00a8c9046ea19b","observation_id":"fa3022d8-2eff-4367-812b-ede65b2f2795","resolution":{"observed_at":"2026-08-15T17:18:24.159749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2004.08994","last_updated":"2020-04-29T21:16:31Z","snapshot_observed_at":"2026-07-06T09:13:32.098523Z","submitted_at":"2020-04-20T00:07:18Z","title":"Adversarial Training for Large Neural Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.08994","snapshot_observed_at":"2026-08-15T17:18:24.255509Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.255509Z"},"links":{"cited_paper":"/paper/2004.08994","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:dcbf977540c2737d722fd8b630baebcd56b124a7617c0530990154e3d684c88b","observation_id":"29f875ac-d076-47de-a075-4792c3dc2f59","resolution":{"observed_at":"2026-08-15T17:18:24.255509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-16T14:36:14.029419Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-15T17:18:24.297455Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.297455Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:3a61684e96da4ff701380ec9513b96dfa0e5777703728ba8a1b219e035e0eaf8","observation_id":"bb85aea9-8412-42e2-ac1f-80be3b4e27e8","resolution":{"observed_at":"2026-08-15T17:18:24.297455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.13860","last_updated":"2024-03-10T13:58:08Z","snapshot_observed_at":"2026-08-19T22:25:04.062400Z","submitted_at":"2023-05-23T09:33:38Z","title":"Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.13860","snapshot_observed_at":"2026-08-15T17:18:24.345011Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.345011Z"},"links":{"cited_paper":"/paper/2305.13860","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:c7be3c1dda07c0a161fe23028bdf2c8a5314c6fcb5f08f3ced928b6fe81d8f70","observation_id":"53b64bda-378b-4c3d-9278-6949c0d320c2","resolution":{"observed_at":"2026-08-15T17:18:24.345011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.348738Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.348738Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:8ed74999d22f572391c35ca8f9dd1aea4706e6ff659c9803b992a2f3aad128ff","observation_id":"9ad29245-ac97-41b5-b163-07b78dcc6e0b","resolution":{"observed_at":"2026-08-15T17:18:24.348738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07725","last_updated":"2021-11-16T07:16:21Z","snapshot_observed_at":"2026-08-14T21:55:51.503935Z","submitted_at":"2016-05-25T04:25:45Z","title":"Adversarial Training Methods for Semi-Supervised Text Classification","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1605.07725","snapshot_observed_at":"2026-08-15T17:18:24.352429Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.352429Z"},"links":{"cited_paper":"/paper/1605.07725","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:7be9883ba94683f3b4957e23553de17251182e68d691f6d1ca2a126f33eeaff1","observation_id":"33169a3d-b5dd-48c2-862e-4992e3f0e42a","resolution":{"observed_at":"2026-08-15T17:18:24.352429Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.928736Z","title":null,"venue":null,"work_id":"ce675762-52e7-4426-92e8-3a80d7117296","year":2022},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.357127Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:dd718c72ea70b478fe6e39d3f93c2247e296838b5dadb3836f55b10e2b61273d","observation_id":"9f48f048-04f5-46d7-ba4e-59406b395105","resolution":{"observed_at":"2026-08-15T17:18:24.936588Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.915241Z","title":null,"venue":null,"work_id":"332ec938-07d9-4695-90dd-8b51e546dad5","year":2022},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.360788Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:758f731760ea775c231380b385d468687824ef514f33f3932e66e712df6dcd5b","observation_id":"e00ae17a-30ec-426c-88ad-c9b022a0f5c4","resolution":{"observed_at":"2026-08-15T17:18:24.919225Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.07308","last_updated":"2024-05-02T14:28:39Z","snapshot_observed_at":"2026-08-20T05:22:16.665208Z","submitted_at":"2023-08-14T17:54:10Z","title":"LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.07308","snapshot_observed_at":"2026-08-15T17:18:24.364382Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.364382Z"},"links":{"cited_paper":"/paper/2308.07308","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:3c81d2e936e282a0d927491f51128cb25b421fbe05e03320f9440477fb5bec9c","observation_id":"40517f2b-f079-4556-b67e-060f20315da9","resolution":{"observed_at":"2026-08-15T17:18:24.364382Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.368280Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.368280Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:288a103d1dbb2b052a720f880c49e18d501fe04889125988b221d82b10ea77ee","observation_id":"2e3bd67b-b70e-47ca-87a3-22ed91554e04","resolution":{"observed_at":"2026-08-15T17:18:24.368280Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.371770Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.371770Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:19ba3b91044e4ae76153305ff1a587fde5716265ec271dfe5ad83b94c2bf9b87","observation_id":"adc47f9c-1f8f-44ff-9ebd-9a908546e502","resolution":{"observed_at":"2026-08-15T17:18:24.371770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03684","last_updated":"2024-06-11T19:02:52Z","snapshot_observed_at":"2026-08-17T15:25:03.596568Z","submitted_at":"2023-10-05T17:01:53Z","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03684","snapshot_observed_at":"2026-08-15T17:18:24.375047Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.375047Z"},"links":{"cited_paper":"/paper/2310.03684","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:5eebd5ef7169dc704922ce9026df7cd5a8eebdcfb7855f57089b385af0befc1b","observation_id":"a99a2c4e-ca2c-45d6-a9cf-a752f9ad4129","resolution":{"observed_at":"2026-08-15T17:18:24.375047Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1910.01108","last_updated":"2020-03-01T02:57:50Z","snapshot_observed_at":"2026-08-07T19:07:36.327251Z","submitted_at":"2019-10-02T17:56:28Z","title":"DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lighter","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.01108","snapshot_observed_at":"2026-08-15T17:18:24.378544Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.378544Z"},"links":{"cited_paper":"/paper/1910.01108","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:d6c49fb23ee3da2e5e57e8e1148175c0118cb26e30defab035623485e2c9fc4d","observation_id":"2c956736-36ef-4ce6-9c90-a70debe2a595","resolution":{"observed_at":"2026-08-15T17:18:24.378544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.383213Z","title":"do anything now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.383213Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:74464ccdd8c91d75cc1891f0c64fa3c0ad145a9acb1f3f6928eb1d0f0278052e","observation_id":"c35cc092-4f23-4e03-b447-f48aaa674b12","resolution":{"observed_at":"2026-08-15T17:18:24.383213Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.11805","last_updated":"2025-05-09T21:04:06Z","snapshot_observed_at":"2026-08-20T18:27:04.837880Z","submitted_at":"2023-12-19T02:39:27Z","title":"Gemini: A Family of Highly Capable Multimodal Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.11805","snapshot_observed_at":"2026-08-15T17:18:24.386818Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.386818Z"},"links":{"cited_paper":"/paper/2312.11805","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:c7ba5e517c75eacea4e148abb5352b08ec6cfdeb931631d37b8d537c10edba77","observation_id":"03674a41-4441-42b2-a585-f7eb820f9798","resolution":{"observed_at":"2026-08-15T17:18:24.386818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-15T17:18:24.406179Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.406179Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:49d0e0dc09c78e83bd13b42370507f4e8a381294b9fd3c0bc6892fc6305f5f9f","observation_id":"c502a9d0-3caf-4443-add6-5d4d105dfc2c","resolution":{"observed_at":"2026-08-15T17:18:24.406179Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.451652Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.451652Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:fce3eadb4d115d593644fa114828817a5a88511567f92af6c9a839086af671a6","observation_id":"aeac5cf0-572b-443f-ba15-6d3c33c5bea2","resolution":{"observed_at":"2026-08-15T17:18:24.451652Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06387","last_updated":"2024-05-25T07:01:15Z","snapshot_observed_at":"2026-08-16T14:53:33.115609Z","submitted_at":"2023-10-10T07:50:29Z","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06387","snapshot_observed_at":"2026-08-15T17:18:24.500459Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.500459Z"},"links":{"cited_paper":"/paper/2310.06387","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:0d3a88d403438ac20ca62e73cd04796f7b41545b53a7d2a74ac5b2343518cde5","observation_id":"2380904f-c806-4730-9838-7803ec4e6629","resolution":{"observed_at":"2026-08-15T17:18:24.500459Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.04359","last_updated":"2021-12-08T16:09:48Z","snapshot_observed_at":"2026-08-09T15:17:43.394064Z","submitted_at":"2021-12-08T16:09:48Z","title":"Ethical and social risks of harm from Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.04359","snapshot_observed_at":"2026-08-15T17:18:24.517800Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.517800Z"},"links":{"cited_paper":"/paper/2112.04359","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:5a4d6c01c67fa3f999c0ecd848fd33dc9685139450ccc4addf953eb8d4093b9a","observation_id":"e55aa009-5a75-49c1-bd11-7fe66dcbd69f","resolution":{"observed_at":"2026-08-15T17:18:24.517800Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13494","last_updated":"2024-05-29T21:45:35Z","snapshot_observed_at":"2026-08-16T14:16:45.543749Z","submitted_at":"2024-02-21T03:09:21Z","title":"GradSafe: Detecting Jailbreak Prompts for LLMs via Safety-Critical Gradient Analysis","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13494","snapshot_observed_at":"2026-08-15T17:18:24.522585Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.522585Z"},"links":{"cited_paper":"/paper/2402.13494","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:2983c288d1f5aaa70b92cc875381af697103831d920f8bfac7a46cf2131888a9","observation_id":"f5211b63-741e-489f-85ed-1ad0003c27f5","resolution":{"observed_at":"2026-08-15T17:18:24.522585Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.526892Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.526892Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:f9cbb9af1a6e1fdcfb2a8798c407af24f02ba767dcbdb68439865289a6ef139e","observation_id":"6a4ff412-6e43-4353-a38e-e4cbc92b6678","resolution":{"observed_at":"2026-08-15T17:18:24.526892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08983","last_updated":"2024-07-25T22:59:44Z","snapshot_observed_at":"2026-08-22T04:21:58.895224Z","submitted_at":"2024-02-14T06:54:31Z","title":"SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08983","snapshot_observed_at":"2026-08-15T17:18:24.530751Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.530751Z"},"links":{"cited_paper":"/paper/2402.08983","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:208b7a5e1378ce01b75a1ef8df3cf5ae2b9bd3d0d0f43f961691b34e816013cf","observation_id":"96de0cf0-6bb9-40b9-aedd-464a115827b4","resolution":{"observed_at":"2026-08-15T17:18:24.530751Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.17256","last_updated":"2025-07-23T18:43:18Z","snapshot_observed_at":"2026-08-20T09:22:08.869784Z","submitted_at":"2024-01-30T18:48:37Z","title":"Weak-to-Strong Jailbreaking on Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.17256","snapshot_observed_at":"2026-08-15T17:18:24.534370Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.534370Z"},"links":{"cited_paper":"/paper/2401.17256","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:673e09e2d9c8165c451a0c6dcff8013631b9264af7ab65c254fd544f99067468","observation_id":"f2f4d9b8-4bd6-4321-bdbd-65f60f741f7e","resolution":{"observed_at":"2026-08-15T17:18:24.534370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.538665Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.538665Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:8f622d874e20c9edfed9cd0513f50745144aa1cce4fb5baeee8b6ee1726f8a3c","observation_id":"79aea991-97db-4f3a-8208-520229993454","resolution":{"observed_at":"2026-08-15T17:18:24.538665Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.854726Z","title":null,"venue":null,"work_id":"449b9e03-788f-425d-bf21-a18c9756c3af","year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.542555Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:8a8a54613d3aa7562bf4deca7742b113083eaeae0bba02af631c40b12ff09677","observation_id":"4f9e2b1a-2160-4955-9704-1024b5f612d1","resolution":{"observed_at":"2026-08-15T17:18:24.860253Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-15T17:18:24.547758Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.547758Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:874f42e82fb2294bc20d51eae324b2f58ddc0eb32073242f68e545be490fb088","observation_id":"8641fe62-af2c-4775-bb6d-e7f08dfb417e","resolution":{"observed_at":"2026-08-15T17:18:24.547758Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-20T17:12:48.328495Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection"},"reference_resolution":{"displayed":42,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":42,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":42},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"thesis":"As of 23 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 1 inbound Pith citation observation for arXiv:2508.14128."}