{"as_of":"2026-08-10T08:05:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2706cf12fe10cb3cd459206cd8dc53ac8b1f0c40c309272b550d20b068c46a4c","coverage":[{"denominator":66,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":66,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T14:51:03.815504Z","state":"measured"},{"denominator":69,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":69,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T18:13:19.384136Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-21T12:10:06.509534Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"cited_work":{"arxiv_id":"2508.20848","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.20848","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring.CoRR abs/2508.20848","venue":null,"work_id":"c63db2b5-484f-41f4-b5df-90a9a7095cb0","year":2025},"citing_paper":{"arxiv_id":"2603.04459","last_updated":"2026-05-14T18:30:07Z","snapshot_observed_at":"2026-07-06T22:47:50.848191Z","submitted_at":"2026-03-03T09:10:45Z","title":"Benchmark of Benchmarks: Unpacking Influence and Code Repository Quality in LLM Safety Benchmarks","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-21T12:09:55.500940Z"},"links":{"cited_paper":"/paper/2508.20848","citing_paper":"/paper/2603.04459"},"observation_digest":"sha256:3cdcb525c79d8b7adf2533059fcb490cd33e6cc796f223fffe985e9d3f9ee6d8","observation_id":"c1a0178b-f60e-4759-bf4c-87257e0992b9","resolution":{"observed_at":"2026-05-21T12:10:06.512435Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.20848","snapshot_observed_at":"2026-08-01T16:46:16.287825Z","title":"Junjie Chu, Mingjie Li, Ziqing Yang, Ye Leng, Chenhao Lin, Chao Shen, Michael Backes, Yun Shen, and Yang Zhang","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19424","last_updated":"2026-07-20T12:38:49Z","snapshot_observed_at":"2026-08-09T23:10:05.682604Z","submitted_at":"2026-07-20T12:38:49Z","title":"JailMeter: An Evidence-Based Evaluation Framework for Jailbreak Attacks on Large Language Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-01T16:46:16.287825Z"},"links":{"cited_paper":"/paper/2508.20848","citing_paper":"/paper/2607.19424"},"observation_digest":"sha256:ab98b0fb04a5eafd1bd3d0fbe45671bdb0652988be3059f32f519ed80ff6c955","observation_id":"796f7483-e403-446a-95b2-4f8c0b5b8507","resolution":{"observed_at":"2026-08-01T16:46:16.287825Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.20848","snapshot_observed_at":"2026-08-08T18:13:19.384136Z","title":"JADES: A Universal Framework for Jail- break Assessment via Decompositional Scoring.CoRR abs/2508.20848, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05210","last_updated":"2026-08-05T08:56:47Z","snapshot_observed_at":"2026-08-09T23:10:18.264988Z","submitted_at":"2026-08-05T08:56:47Z","title":"Innocent Panels, Hateful Stories: Evaluating and Detecting Hateful Intent in Multi-Turn Visual Story Generation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-08T18:13:19.384136Z"},"links":{"cited_paper":"/paper/2508.20848","citing_paper":"/paper/2608.05210"},"observation_digest":"sha256:7c9b15c0d4fde26c2ff1406088183dde1ea7586438bfb8705cfe92242de190a5","observation_id":"0c4cb8b6-fa16-40d1-8deb-816a7bfbcaa0","resolution":{"observed_at":"2026-08-08T18:13:19.384136Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2508.20848/citation-record","integrity":"/paper/2508.20848/integrity","json":"/paper/2508.20848/citation-record.json","paper":"/paper/2508.20848"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.383969Z","title":"Generated data with fake privacy: Hidden dangers of fine- tuning large language models on generated data","venue":null,"work_id":"6d436306-dd4b-4d40-a080-8becd71d30cc","year":2025},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.611476Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:7a243fe22b6ad143cad545ee786bac5cc34158f6e8e2ba44fd222e9e628375d4","observation_id":"32ebab59-47bb-4818-98c3-26d242edbf90","resolution":{"observed_at":"2026-08-05T14:51:04.387810Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14132","last_updated":"2023-11-07T03:30:15Z","snapshot_observed_at":"2026-07-06T16:10:54.723336Z","submitted_at":"2023-08-27T15:20:06Z","title":"Detecting Language Model Attacks with Perplexity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14132","snapshot_observed_at":"2026-08-05T14:51:03.615051Z","title":"Detecting Language Model Attacks with Perplexity","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.615051Z"},"links":{"cited_paper":"/paper/2308.14132","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:61a89d1cfa1805015c4e232d732a5e95bfd76e52437ca0985b134d1dbf367de6","observation_id":"42b06550-8600-4ab1-b19c-1ceb60b02c2c","resolution":{"observed_at":"2026-08-05T14:51:03.615051Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02151","last_updated":"2025-04-17T18:55:45Z","snapshot_observed_at":"2026-08-08T01:18:53.200448Z","submitted_at":"2024-04-02T17:58:27Z","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02151","snapshot_observed_at":"2026-08-05T14:51:03.619114Z","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.619114Z"},"links":{"cited_paper":"/paper/2404.02151","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:9f25c9568d1ae6a916e1a44899c77d057ff0cb5c8aacca0ef150436e72a146e2","observation_id":"1d857cd3-8e8c-4a28-8dc2-7bf6c511b82b","resolution":{"observed_at":"2026-08-05T14:51:03.619114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.09673","last_updated":"2025-02-21T03:12:17Z","snapshot_observed_at":"2026-08-07T22:55:22.773164Z","submitted_at":"2025-02-13T06:37:28Z","title":"Are Smarter LLMs Safer? Exploring Safety-Reasoning Trade-offs in Prompting and Fine-Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.09673","snapshot_observed_at":"2026-08-05T14:51:03.622906Z","title":"Are smarter llms safer? exploring safety- reasoning trade-offs in prompting and fine-tuning","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.622906Z"},"links":{"cited_paper":"/paper/2502.09673","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:61d04db3121f4cebc197595afaabe400856ad5763e23388f3f41c1a689f35377","observation_id":"f86bbfdc-109e-464b-9a01-fb34afe264e4","resolution":{"observed_at":"2026-08-05T14:51:03.622906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.00861","last_updated":"2021-12-09T21:40:22Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-12-01T22:24:34Z","title":"A General Language Assistant as a Laboratory for Alignment","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.00861","snapshot_observed_at":"2026-08-05T14:51:03.626250Z","title":"A General Language Assistant as a Laboratory for Alignment","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.626250Z"},"links":{"cited_paper":"/paper/2112.00861","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:17bf2318c7ed05c4e346156a96d11ab99b20aa7746b13235dc519f31eeface97","observation_id":"570d32ca-4360-4119-ac7b-4de9a8d71d55","resolution":{"observed_at":"2026-08-05T14:51:03.626250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.374895Z","title":"A Ranking Method for Evaluating Constructed Responses","venue":null,"work_id":"cc4f4be4-c62f-4e78-aa44-fc8f89642153","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.629551Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:3296a0a3bea464f436c4848a0cd3630b1e42c99c8ccf059625d2dc47ff11bde3","observation_id":"defa2534-e48e-418d-b67b-46484af9e479","resolution":{"observed_at":"2026-08-05T14:51:04.378732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.366535Z","title":"Brookhart","venue":null,"work_id":"b0b546e4-1592-44a0-8d02-9d4d81811956","year":2018},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.633142Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:e79d5bd22b6da1c904de8026708f02d4b35980cf926faee83da86642c862a63a","observation_id":"276994cd-d6c1-4f89-b9a5-3d6e6102ca0c","resolution":{"observed_at":"2026-08-05T14:51:04.369450Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.358405Z","title":null,"venue":null,"work_id":"3115c6a5-208e-49e8-b1dd-aaaa24e28f02","year":1993},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.636154Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:e61773d4f731102b1b91807e0de11f2c47661abc7b7f89212f8b44f501f8ec58","observation_id":"069744d8-a374-41c0-a16f-5ff684800782","resolution":{"observed_at":"2026-08-05T14:51:04.361269Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01318","last_updated":"2024-10-31T22:26:40Z","snapshot_observed_at":"2026-08-02T14:59:12.115203Z","submitted_at":"2024-03-28T02:44:02Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01318","snapshot_observed_at":"2026-08-05T14:51:03.638815Z","title":"Pappas, Flo- rian Tramer, Hamed Hassani, and Eric Wong","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.638815Z"},"links":{"cited_paper":"/paper/2404.01318","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:16483b7df3ce31f89c827e0eb70e6637e69e96e6c1a3c977ebe610ecc5ba6f52","observation_id":"432efd07-3769-4701-825b-3683c23c7bc3","resolution":{"observed_at":"2026-08-05T14:51:03.638815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-05T14:51:03.642689Z","title":"Pappas, and Eric Wong","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.642689Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:7f263dbd983c92c9ed88dbd3b80d96edbf4770202a22d9facfecec8fe2b0fc49","observation_id":"bf91c4a7-08fe-49fa-9e7d-f6f5f0812138","resolution":{"observed_at":"2026-08-05T14:51:03.642689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05668","last_updated":"2025-05-26T12:56:04Z","snapshot_observed_at":"2026-08-10T00:58:19.098597Z","submitted_at":"2024-02-08T13:42:50Z","title":"JailbreakRadar: Comprehensive Assessment of Jailbreak Attacks Against LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05668","snapshot_observed_at":"2026-08-05T14:51:03.645921Z","title":"JailbreakRadar: Comprehen- sive Assessment of Jailbreak Attacks Against LLMs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.645921Z"},"links":{"cited_paper":"/paper/2402.05668","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:4fffb2e1926138dd0d68d6d470ac763cad64f18001b2f0da5f30bc2ac3e691e5","observation_id":"914ffc20-a3ee-46f8-9239-f750fb86e931","resolution":{"observed_at":"2026-08-05T14:51:03.645921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.349855Z","title":"Reconstruct Your Previous Conversations! Comprehensively Investigating Privacy Leakage Risks in Conversations with GPT Models","venue":null,"work_id":"0bcac94d-50ea-49a1-86fd-6c39906cba04","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.648939Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:b78a2d8cb45763231ca9e8289109d380920d335b370db95607bf9af97a5e4b96","observation_id":"ed30b360-be18-4fab-aba4-4b45edff134d","resolution":{"observed_at":"2026-08-05T14:51:04.353045Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.341546Z","title":"DeepSeek-V3","venue":null,"work_id":"73db4594-6a36-49e2-beb9-0ae16c1aae45","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.651942Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:ecbd9218fb82da580c9790322ca7e2b354b87297b4dad15feabe5a23c771a1cd","observation_id":"c75e5d42-8785-40e9-87e5-d5f2edb0e818","resolution":{"observed_at":"2026-08-05T14:51:04.344587Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.333033Z","title":null,"venue":null,"work_id":"51f73ed6-733d-4dcf-83dd-21eb247a2d7d","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.655034Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:7dc04753ee40e348f17aa49b01c29e9eff4dc67c5845c1ad1d2b554fe87f7daa","observation_id":"2c916155-82f6-4eff-9e07-294e050bdfbe","resolution":{"observed_at":"2026-08-05T14:51:04.336098Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.315053Z","title":"Sheridan Center for Teaching and Brown University Learning","venue":null,"work_id":"1cadc72d-9282-4f5b-a269-53a89a8a3c80","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.661394Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:e7ea3ae4410e7a4e1999193b170f1b475ac196ca6a54d230a4cbe73f9fca096c","observation_id":"60cdb11d-9ef6-4851-9fc6-6a4387f3f242","resolution":{"observed_at":"2026-08-05T14:51:04.318511Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.306400Z","title":"https://www.perspectiveapi.com","venue":null,"work_id":"da9bd1e9-d1b4-4730-9c23-1f130ec37c3f","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.664418Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:ff9acc2799fe7ab7495adda2f8c39e3bddc5d9c91273f79f84009fd89137a6bb","observation_id":"4e79d65e-b3c8-47d9-bbc6-429cd92901c8","resolution":{"observed_at":"2026-08-05T14:51:04.309398Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08679","last_updated":"2024-06-07T00:13:08Z","snapshot_observed_at":"2026-08-10T03:24:28.404754Z","submitted_at":"2024-02-13T18:58:48Z","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08679","snapshot_observed_at":"2026-08-05T14:51:03.667508Z","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.667508Z"},"links":{"cited_paper":"/paper/2402.08679","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:bcf3706040b57f4f35f8c833d8ad3f144e0dbbc19875298027e4650dadbd5b30","observation_id":"959cbe90-79e5-444a-8150-c924af79b856","resolution":{"observed_at":"2026-08-05T14:51:03.667508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.06972","last_updated":"2023-12-22T18:01:44Z","snapshot_observed_at":"2026-07-06T15:26:06.998516Z","submitted_at":"2023-05-11T16:55:19Z","title":"Spear Phishing With Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.06972","snapshot_observed_at":"2026-08-05T14:51:03.671313Z","title":"Large Language Models Can Be Used To Effectively Scale Spear Phishing Campaigns","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.671313Z"},"links":{"cited_paper":"/paper/2305.06972","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:f7811432768b4c3e011451092c7a79a811e7ec0de6424dec707024ff215f6d3d","observation_id":"92f69221-07f3-48d4-b130-fd0428948258","resolution":{"observed_at":"2026-08-05T14:51:03.671313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06987","last_updated":"2023-10-10T20:15:54Z","snapshot_observed_at":"2026-07-06T16:30:46.321160Z","submitted_at":"2023-10-10T20:15:54Z","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06987","snapshot_observed_at":"2026-08-05T14:51:03.674278Z","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.674278Z"},"links":{"cited_paper":"/paper/2310.06987","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:80200c496fb1fc54bf350e0428aa89c01c478d147522726d04fc21f3c04e968f","observation_id":"543ae494-8b11-42e1-8688-f6e44d17fec7","resolution":{"observed_at":"2026-08-05T14:51:03.674278Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.296990Z","title":"Hunter, Richard M","venue":null,"work_id":"3da1b441-3bf6-4ac0-93bd-3580e801b323","year":1996},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.677966Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:018e6685789b3a4c452a86b29def9669b484d65235799298469204c465364ba6","observation_id":"f2532c17-1cf9-421b-8aa6-0cb1c32ff0b9","resolution":{"observed_at":"2026-08-05T14:51:04.300861Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.288596Z","title":"Adjacent Words, Divergent Intents: Jailbreaking Large Lan- guage Models via Task Concurrency","venue":null,"work_id":"7fac1425-50d9-41d4-929d-db9a2de866c1","year":2025},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.680596Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:81e1dfdd39f5e7d158f49045177c5b9492b5a1d7012ddb19cfcd8a981c9e6a1f","observation_id":"f51ea7c1-eb51-4dc7-9978-a3324a6ef96f","resolution":{"observed_at":"2026-08-05T14:51:04.291722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.280094Z","title":"Boone Jr and Deborah A","venue":null,"work_id":"7e7550cc-db67-4ef4-ab9b-f3105720d71c","year":2012},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.683574Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:acf9b2ca8ea254de4f0a16cc14a36ec8214bc4decebd15eb3953ab5e11d0507a","observation_id":"69f9934b-b5b1-4be8-8bd1-a59ff717b30b","resolution":{"observed_at":"2026-08-05T14:51:04.283045Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.271486Z","title":"Analytic or Holistic: A Study of Agreement Between Different Grading Models","venue":null,"work_id":"5170fc9b-c008-4670-9bd7-c41cb145ee25","year":2018},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.687286Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:dcddccee7916ab6e4a6523e574dc5914991e28c800733e574661c091a32a0df6","observation_id":"809aa72a-269f-44a4-93b4-b4bc209e8fe2","resolution":{"observed_at":"2026-08-05T14:51:04.274508Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.263317Z","title":"Analytic or Holistic? A Study about How to Increase the Agreement in Teachers’ Grading","venue":null,"work_id":"586ef3c4-bd6a-4484-bb4d-f79e767fdbd2","year":2021},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.690077Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:7f8951fcd3c5f426b3e3bc6cccefc5ccfcf452d207a8b90b684dd6e1d1d109f9","observation_id":"6b855f65-370a-4a6e-af8d-0c425d694e42","resolution":{"observed_at":"2026-08-05T14:51:04.266311Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.05733","last_updated":"2023-02-11T15:57:44Z","snapshot_observed_at":"2026-08-10T03:15:15.284134Z","submitted_at":"2023-02-11T15:57:44Z","title":"Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.05733","snapshot_observed_at":"2026-08-05T14:51:03.693056Z","title":"Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security At- tacks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.693056Z"},"links":{"cited_paper":"/paper/2302.05733","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:9102071d8213022ff7beb4ec750ac08418e889eb59072f7db13f646644b35bd4","observation_id":"a6857368-c41a-444e-9b2e-866c399a234a","resolution":{"observed_at":"2026-08-05T14:51:03.693056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.254872Z","title":"Content Analysis: An Introduction to Its Methodology","venue":null,"work_id":"51848d4f-c8e3-4a26-9179-3444ec0375d8","year":2018},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.696362Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:c6643e2727aece00451814414aca046be5dc14064c7563fbe83d7cc032ae1043","observation_id":"a01e0788-4ac4-45e5-b567-ed88d7591702","resolution":{"observed_at":"2026-08-05T14:51:04.258180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.245925Z","title":"Richard Landis and Gary G","venue":null,"work_id":"19561726-bf7a-423d-97b4-2ae7ed4a9081","year":1977},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.699233Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:966018cb5f3d1ba8e0b9dfa4d89ee20e7bc9483a791269951694e5cb4b8fcfc3","observation_id":"7843f4d4-edf4-4335-8045-7ed3a554c2c4","resolution":{"observed_at":"2026-08-05T14:51:04.249629Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.237279Z","title":"LangGraph","venue":null,"work_id":"ba985a76-aef6-4def-847d-7071efca9abf","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.702140Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:44219586b0a32af661098769216cf059a13e12a4affb9ad90f8d7c6ccc76490c","observation_id":"eb9aea90-8afe-4ad8-9ab5-f07676fd8ac5","resolution":{"observed_at":"2026-08-05T14:51:04.240819Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.228342Z","title":"A technique for the measurement of attitudes","venue":null,"work_id":"318a198a-f5ca-4c86-bd43-e8bb72de5fcc","year":1932},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.704941Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:237dadd3a5a2ea8d4b320a26294c4ab1e4e3fd9d7db8b11878daf518e26675a3","observation_id":"ff788327-4c43-463e-831d-603c66ff10d8","resolution":{"observed_at":"2026-08-05T14:51:04.231331Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-05T14:51:03.707918Z","title":"Au- toDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.707918Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:4111b6086dec9071dd728d3730d9c1e6dfc2099a795f406c54e36186dd7270a0","observation_id":"3f1a82dc-90a6-4590-a0fe-d3dc646a1489","resolution":{"observed_at":"2026-08-05T14:51:03.707918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.220130Z","title":"Lipnevich, and Ig- nacio Mañez","venue":null,"work_id":"ca624d49-243d-4112-9da5-d9099e85f8f9","year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.711019Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:d8a21ecb693918443a81526ad99d8309d7fa25ae4dd9594c6a10e58c73e06d86","observation_id":"c86dd371-6e4a-4f4f-b482-40c1f7ec3d11","resolution":{"observed_at":"2026-08-05T14:51:04.223124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.211641Z","title":"Designing Effective Rubrics for Peer As- sessment Methods","venue":null,"work_id":"80b0b367-57d0-48d5-accb-3d1a9da3f82e","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.714600Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:3513587a9270c477f834ee45c25b17a0b30359b5738536db18cc6c1f7eb0d5aa","observation_id":"8905b60c-123b-45f2-925c-30bbb64465ee","resolution":{"observed_at":"2026-08-05T14:51:04.214576Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-08-05T14:51:03.717384Z","title":"Forsyth, and Dan Hendrycks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.717384Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:1a4b18cb7a5e0de67ca4202e419119d7f6acac8e8454d891f5cb1d51da849951","observation_id":"ccd19ec1-c342-4e8a-a7dc-896ea4cc9e2e","resolution":{"observed_at":"2026-08-05T14:51:03.717384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02119","last_updated":"2024-10-31T15:57:42Z","snapshot_observed_at":"2026-07-06T16:56:46.051958Z","submitted_at":"2023-12-04T18:49:23Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.02119","snapshot_observed_at":"2026-08-05T14:51:03.721078Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automati- cally","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.721078Z"},"links":{"cited_paper":"/paper/2312.02119","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:375ee9f850393cd49667de96364de7a6adb22d5a4dfb48dc0d3a723c65793fc2","observation_id":"dddcc0d3-a88e-4da8-9197-baa444be216f","resolution":{"observed_at":"2026-08-05T14:51:03.721078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.202316Z","title":"SaloRA: Safety-alignment preserved low-rank adaptation","venue":null,"work_id":"c1af10b6-6c5e-4142-90b7-e71cc02b03ed","year":2025},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.724119Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:751e246833d929cd9785236c903d17f6d11393490caead3acb07489a0d1246bf","observation_id":"c2f4a60c-f7ec-41ac-a4e1-98609dbc8580","resolution":{"observed_at":"2026-08-05T14:51:04.206176Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.05980","last_updated":"2025-05-30T22:03:36Z","snapshot_observed_at":"2026-08-08T03:32:44.793372Z","submitted_at":"2024-11-08T21:26:57Z","title":"FactLens: Benchmarking Fine-Grained Fact Verification","version":3},"cited_work":{"arxiv_id":"2411.05980","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.05980","snapshot_observed_at":"2026-08-05T14:51:03.955896Z","title":"FactLens: Benchmarking Fine-Grained Fact Verification","venue":"cs.CL","work_id":"1d82c86b-6102-439a-bf3b-5d9579995c9b","year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.727127Z"},"links":{"cited_paper":"/paper/2411.05980","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:db46d9c347c2be506370e32b9b7f1b56a4835c20213079da6af759b97f035d77","observation_id":"65ba034b-cdfe-4dda-b104-91ebfd1172b7","resolution":{"observed_at":"2026-08-05T14:51:03.959404Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.194172Z","title":"Scoring student answers to constructed-response questions and essays","venue":null,"work_id":"52267237-ca21-4041-a7a8-0b2fef1defa3","year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.730236Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:30e422dc70aa1973ccb4545f95937b45f1b06168e921fa2a6b313634b5f71ca1","observation_id":"2ef7296d-036f-4472-9590-6f12b071f888","resolution":{"observed_at":"2026-08-05T14:51:04.197220Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.185482Z","title":"Scoring student answers to constructed-response questions, essays, and open-response questions","venue":null,"work_id":"41eaaf65-b957-4c37-ba87-4749140195af","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.733096Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:5f271c886a8dd8be495348b76d6b21ff14a4a497d049147a36a26f3b4c6e1b90","observation_id":"e5e12121-836a-4965-be8f-c6989b2e0ea8","resolution":{"observed_at":"2026-08-05T14:51:04.188950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.177226Z","title":"https://platform.openai.com/docs/guides/ moderation/overview","venue":null,"work_id":"29fdf16f-ea0c-44d2-bf65-a2a1de7276bb","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.736565Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:e91c8f82d2ea4df3d7027b7b777f4ac41a865e9e77b9ea32c64349e11f1f8189","observation_id":"0205451e-2b92-4338-8bcc-6f89c9b2572f","resolution":{"observed_at":"2026-08-05T14:51:04.180549Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.168294Z","title":null,"venue":null,"work_id":"2b2e2abe-b640-4c80-ab14-42e84715ff85","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.739424Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:940dcb18aea2cd193e9c94f0d94531c12101b7108d3a9b072dc463ae2f6913e0","observation_id":"1ef456b9-07aa-43cf-967a-fccb36043cad","resolution":{"observed_at":"2026-08-05T14:51:04.171996Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.159841Z","title":null,"venue":null,"work_id":"60c98bb4-d9c1-4aaa-ae19-5e05003b99fb","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.742249Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:a593b9d119929ff5b7c614fce0bd9c52f83379f4e1ad82aff6dea08379bdf8da","observation_id":"2ad982ff-fbb7-4a0a-99b1-cf806f0b8629","resolution":{"observed_at":"2026-08-05T14:51:04.162824Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.150732Z","title":"GPT-4o-mini","venue":null,"work_id":"62acc9a5-a78d-4e7a-9068-82bb9205297a","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.745265Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:1040a74d0292b12cbcbc1478e80655ddc8dc5f170d3f4e317ae6ebdd5e86ccd4","observation_id":"e66838e6-bf79-488a-82f3-a1997c354503","resolution":{"observed_at":"2026-08-05T14:51:04.154437Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-05T14:51:03.748795Z","title":"GPT-4 Technical Report","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.748795Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:e743b4765354dd3dfcd08994d36ec3e92650d7ae43674615e1b7cfe91d14dc36","observation_id":"c0a30e69-2fd0-4941-8de3-acfcad50430c","resolution":{"observed_at":"2026-08-05T14:51:03.748795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.142421Z","title":null,"venue":null,"work_id":"6b574846-5e4f-4bca-86f5-5c89337b4eb3","year":2022},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.751677Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:9c6182884098762311c23886e69f663dc7d963476b9cf88612ad31c0cb519c27","observation_id":"cd8fdcd8-e055-4f04-bb01-21fa3a14f5cb","resolution":{"observed_at":"2026-08-05T14:51:04.145468Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03286","last_updated":"2022-02-07T15:22:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-02-07T15:22:17Z","title":"Red Teaming Language Models with Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03286","snapshot_observed_at":"2026-08-05T14:51:03.754420Z","title":"Francis Song, Trevor Cai, Ro- man Ring, John Aslanides, Amelia Glaese, Nat McAleese, and Geoffrey Irving","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.754420Z"},"links":{"cited_paper":"/paper/2202.03286","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:480b99bae054eb7883f3ec09964440a6225106e69d238d4f281fe79951b1144f","observation_id":"49441f07-c0c4-4a7f-b4fa-fafc20670bf2","resolution":{"observed_at":"2026-08-05T14:51:03.754420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.133798Z","title":"What’s Wrong–and What’s Right– with Rubrics","venue":null,"work_id":"9f6b51de-130c-4150-a835-e9674409b155","year":1997},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.757611Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:9dd559a6bbaddfbe209845e653837db54a3e2a636809aae25e4d02af6bb26416","observation_id":"984346ee-a6e2-4f57-ad31-50977142e3ca","resolution":{"observed_at":"2026-08-05T14:51:04.136903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.124950Z","title":"Unsafe Diffusion: On the Gen- eration of Unsafe Images and Hateful Memes From Text-To- Image Models","venue":null,"work_id":"2dc5c85e-acbd-422e-86ed-7746f58476d0","year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.760288Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:92f6e43d9d9daba76123adfbfe53fd6318e65c19caefe79866464f1fe5875838","observation_id":"0cd0e695-da34-4af5-91c4-84dceedbda55","resolution":{"observed_at":"2026-08-05T14:51:04.128292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.116473Z","title":null,"venue":null,"work_id":"5e07c2a2-2d6b-4273-a303-ece8bcd57712","year":2011},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.763150Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:b2fceec5decad80102ab4b92f857a4dabba11bbbb3b3a301c7919a91206ae83a","observation_id":"32171dfa-5f8d-4376-9f7c-fc60394a0869","resolution":{"observed_at":"2026-08-05T14:51:04.119441Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-08-05T14:51:03.766731Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.766731Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:77c9ff36e6d9ba6d965dfd4cb1190ebfbe0e0e5dcc30998f324fbcb582f689f2","observation_id":"0217de0c-6e66-48c9-9d73-5d2d29e35de2","resolution":{"observed_at":"2026-08-05T14:51:03.766731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.107085Z","title":"Shabani and Jaleh Panahi","venue":null,"work_id":"8b1ec7d3-0a81-4517-911c-0163663ee1c7","year":2020},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.769849Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:898f79b088edd940afb45408432c89bc755710d52b5ea61dc71d356f617c236b","observation_id":"4e43e52e-d4ab-46fc-880b-5687e2665f24","resolution":{"observed_at":"2026-08-05T14:51:04.110110Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03825","last_updated":"2024-05-15T12:06:31Z","snapshot_observed_at":"2026-07-06T16:03:34.432602Z","submitted_at":"2023-08-07T16:55:20Z","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03825","snapshot_observed_at":"2026-08-05T14:51:03.772540Z","title":"Do Anything Now: Characterizing and Evaluat- ing In-The-Wild Jailbreak Prompts on Large Language Mod- els","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.772540Z"},"links":{"cited_paper":"/paper/2308.03825","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:9689d8152c24ef8bbb2231dfd75529b7027063f03757678dc6e7e272b846dbd8","observation_id":"cae8d7c0-f6d3-4352-a1d7-6a783abf1da2","resolution":{"observed_at":"2026-08-05T14:51:03.772540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.10260","last_updated":"2024-08-27T03:32:47Z","snapshot_observed_at":"2026-08-04T21:32:35.483431Z","submitted_at":"2024-02-15T18:58:09Z","title":"A StrongREJECT for Empty Jailbreaks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.10260","snapshot_observed_at":"2026-08-05T14:51:03.775476Z","title":"A StrongRE- JECT for Empty Jailbreaks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.775476Z"},"links":{"cited_paper":"/paper/2402.10260","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:683b948d69c6deb191710dc9c446aef2a70f2309aea9a1f27924a9f08ceafd09","observation_id":"06d4c969-eda1-4d86-8101-484350effe8a","resolution":{"observed_at":"2026-08-05T14:51:03.775476Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.097345Z","title":"Analyzing and In- terpreting Data From Likert-Type Scales.Journal of Graduate Medical Education, 2013","venue":null,"work_id":"271118db-4f03-4d7b-9bcc-5dd8c2621627","year":2013},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.778753Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:db7272a7d3f9675452012c30021e2f21a40320ba4f38ad4cc511acda6a48d069","observation_id":"de08ded0-f4ee-4604-a4c1-b827934ad15a","resolution":{"observed_at":"2026-08-05T14:51:04.100375Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.088288Z","title":"TavilySearch","venue":null,"work_id":"cda8b2d5-7ec4-4195-807e-8311b8da981e","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.781458Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:a334726154c238401ecfd5be5edf321543fb1f8b8fc2d19b5c7c10b8ddffbecd","observation_id":"27a27e2a-4d0e-420c-9e35-e7701027fac8","resolution":{"observed_at":"2026-08-05T14:51:04.091307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.079574Z","title":null,"venue":null,"work_id":"d7182b4c-7ace-4f26-ba26-d0882babbd92","year":2018},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.784190Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:7be1b089280fb4c22cc5959f34a8e16edfa95eea8d6b8988f467a8643c758f6b","observation_id":"e0882ab9-16a4-45cc-bbbf-62aa3c85f2ed","resolution":{"observed_at":"2026-08-05T14:51:04.082504Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.14374","last_updated":"2025-06-17T10:16:52Z","snapshot_observed_at":"2026-08-10T05:38:45.336194Z","submitted_at":"2025-06-17T10:16:52Z","title":"Excessive Reasoning Attack on Reasoning LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.14374","snapshot_observed_at":"2026-08-05T14:51:03.787053Z","title":"Excessive reasoning attack on reasoning llms","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.787053Z"},"links":{"cited_paper":"/paper/2506.14374","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:b99f705cb28c32f983d21702e508375a6545543348f53f9f1ecb7860262618ff","observation_id":"e19f20ff-3fd5-4c5c-9952-6277d53d0387","resolution":{"observed_at":"2026-08-05T14:51:03.787053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-08-08T18:11:45.725753Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02483","snapshot_observed_at":"2026-08-05T14:51:03.790055Z","title":"Jail- broken: How Does LLM Safety Training Fail? CoRR abs/2307.02483, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.790055Z"},"links":{"cited_paper":"/paper/2307.02483","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:9a90caacd1d3628ab817555c1d697395e005e62229b470a710fe1e6d024fb39a","observation_id":"d6b0fcd8-cb2a-4750-ada1-0e90c47c201e","resolution":{"observed_at":"2026-08-05T14:51:03.790055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.18802","last_updated":"2024-11-07T03:14:38Z","snapshot_observed_at":"2026-08-09T17:45:00.048095Z","submitted_at":"2024-03-27T17:48:55Z","title":"Long-form factuality in large language models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.18802","snapshot_observed_at":"2026-08-05T14:51:03.793719Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.793719Z"},"links":{"cited_paper":"/paper/2403.18802","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:ae1f3f64176167cd5884863f85bc6332072a3c56d62f015621e3a250b89a88dd","observation_id":"9e1a384a-f6b2-4472-b578-acd638b17247","resolution":{"observed_at":"2026-08-05T14:51:03.793719Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.11082","last_updated":"2024-06-03T12:19:16Z","snapshot_observed_at":"2026-07-06T15:18:26.300068Z","submitted_at":"2023-04-19T17:50:09Z","title":"Fundamental Limitations of Alignment in Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.11082","snapshot_observed_at":"2026-08-05T14:51:03.796947Z","title":"Fundamental Limitations of Alignment in Large Language Models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.796947Z"},"links":{"cited_paper":"/paper/2304.11082","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:a86b81b578afd8920eb0a8053c04628c2425e4b9ae5dc29a0407c8a35535938a","observation_id":"560af3c0-046c-40eb-90de-d44ddc6a6834","resolution":{"observed_at":"2026-08-05T14:51:03.796947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.03160","last_updated":"2024-07-03T14:35:16Z","snapshot_observed_at":"2026-08-05T17:30:34.776829Z","submitted_at":"2024-07-03T14:35:16Z","title":"SOS! Soft Prompt Attack Against Open-Source Large Language Models","version":1},"cited_work":{"arxiv_id":"2407.03160","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.03160","snapshot_observed_at":"2026-08-05T14:51:03.874099Z","title":"SOS! Soft Prompt Attack Against Open-Source Large Language Models","venue":"cs.CR","work_id":"28571f8c-e4c3-40a8-97b8-429ee557c043","year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.799897Z"},"links":{"cited_paper":"/paper/2407.03160","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:c5b4db2afcbed3d6e40d79bdea4cae9e15b0de32610c28e571f192ea51a61382","observation_id":"2fad2d1a-a39a-4725-8aa5-02bb7f3be15b","resolution":{"observed_at":"2026-08-05T14:51:03.879519Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.02446","last_updated":"2024-01-27T22:54:52Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-03T21:30:56Z","title":"Low-Resource Languages Jailbreak GPT-4","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.02446","snapshot_observed_at":"2026-08-05T14:51:03.803021Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.803021Z"},"links":{"cited_paper":"/paper/2310.02446","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:e9733bd8aa58eae6a471a710e5e5d567842b5086490b8c999993870c2f37869e","observation_id":"a0678564-32d8-4534-93d4-5716c60d3a32","resolution":{"observed_at":"2026-08-05T14:51:03.803021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-05T14:51:03.806170Z","title":"GPT- FUZZER: Red Teaming Large Language Models with Auto- Generated Jailbreak Prompts","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.806170Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:1dc0b49ef0650298268c36cd7e8d9914c4ef1faed1598f93caea30998882a80a","observation_id":"2b903e31-4c67-405b-b32e-22ce8c14b424","resolution":{"observed_at":"2026-08-05T14:51:03.806170Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.070892Z","title":"Parker, and Munmun De Choudhury","venue":null,"work_id":"ab24985b-316f-4ba5-87f1-c147a82fec0b","year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.809719Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:1aeef699f72ed24d43141e5f56341c69a9b99f57777bb426db79bb8361a0a783","observation_id":"f5531412-abc6-4cc6-8172-d5c6707a2983","resolution":{"observed_at":"2026-08-05T14:51:04.073967Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16369","last_updated":"2025-07-02T07:27:32Z","snapshot_observed_at":"2026-08-07T21:23:08.873449Z","submitted_at":"2024-04-25T07:15:23Z","title":"Don't Say No: Jailbreaking LLM by Suppressing Refusal","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16369","snapshot_observed_at":"2026-08-05T14:51:03.812481Z","title":"Don’t Say No: Jailbreaking LLM by Sup- pressing Refusal","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.812481Z"},"links":{"cited_paper":"/paper/2404.16369","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:f0eee666e5e7de9af903325552f2e371dc7a30362d4149d73224f7a66cbf09f6","observation_id":"0acbcdc5-64f0-4ef2-937b-b660adecc5c2","resolution":{"observed_at":"2026-08-05T14:51:03.812481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-05T14:51:03.815504Z","title":"gather the necessary materials","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.815504Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:27a2614051fafb2e5e7729cbfbfc8eb9aec027eb5ca1ffaf81cf88e1fa87e836","observation_id":"5e0ea74c-3664-4569-b173-93f2c7ef442e","resolution":{"observed_at":"2026-08-05T14:51:03.815504Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.324025Z","title":null,"venue":null,"work_id":"06b74bc5-7d1e-423a-93c9-9db142943c83","year":2019},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":590,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.658106Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:caa2b99fe37dc8bd0938dcf75e1b0cf12c0d63d3b9485daa8f21e01d5026c040","observation_id":"27fdc326-0ce0-4f47-9b3f-e8ce81cf1cfe","resolution":{"observed_at":"2026-08-05T14:51:04.327673Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T22:07:47.609622Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring"},"reference_resolution":{"displayed":66,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":35,"verified_exact":2,"verified_fuzzy":29},"total_outbound_references":66},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 66 of 66 outbound references and 3 inbound Pith citation observations for arXiv:2508.20848."}