Paper Citation Record · LEDGER

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models

As of 20 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 3 inbound Pith citation observations for arXiv:2509.05471.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2509.05471 v1

Coverage vector

measured 37 of 37 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-05T05:29:20.783870Z

measured 40 of 40 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-20T06:33:59.587034+00:00

measured 3 of 3 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-02T15:04:28.416667Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-05-12T10:51:31.097429Z

Reference resolution

37 of 37 outbound references displayed

verified exact2
verified fuzzy3
unresolved32
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 130deab5-a78f-40d6-928a-0e8c004405fd · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 1

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.307502Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 3c8a8024-d983-41e2-883a-0d523f9de39a · outbound

This paper cites S.; Yang, Q.; and Xie, X.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models S.; Yang, Q.; and Xie, X

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:29:21.296284Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 1642cf1a-1665-4871-8fdb-755ec7eacd8a · outbound

This paper cites JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.652851Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 44f343f4-5a40-4245-93f6-d4668b222b39 · outbound

This paper cites How Susceptible are Large Language Models to Ideological Manipulation?.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models How Susceptible are Large Language Models to Ideological Manipulation?

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.658074Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9d8b6d3e-03b0-4e93-8600-f1e3108e3f72 · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 5

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.283408Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 47b889e6-82b5-4795-b995-50c27817a612 · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 6

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.272555Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 0a7a77b7-b6f4-4bfd-8c9b-a4a24ef48725 · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 7

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.262296Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 5e1d22db-9e76-42b7-8693-b57d01846dbb · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 8

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.251815Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation c9187f3a-3f91-4b80-a5ad-1ee823d3bf56 · outbound

This paper cites WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Models.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Models

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.677393Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 539eaedf-4c7a-4d9e-8e6f-ead6daf69190 · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 10

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.241442Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 5f322c81-9800-4cbf-9fac-f1240a07326a · outbound

This paper cites Temporal Context Awareness: A Defense Framework Against Multi-turn Manipulation Attacks on Large Language Models.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Temporal Context Awareness: A Defense Framework Against Multi-turn Manipulation Attacks on Large Language Models

Reference 11

Resolution: verified exact; local_arxiv, observed 2026-08-05T05:29:21.045977Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation d608efb8-6a80-4e69-ae1c-29b57915d45f · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 12

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.229746Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 8e75ad7c-3329-45b5-8f49-e1b95d3c5110 · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 13

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.219489Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 85e85fed-f946-4490-8a21-e8e5b09fb212 · outbound

This paper cites Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.697468Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8b2df224-79f0-43d1-aef9-4000cbda4743 · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 15

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.209018Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 1f09b1cb-13ba-4b5a-b917-19aceddd02bd · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 16

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.197592Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation e61eed51-1411-46a1-9a3a-a658b707ab34 · outbound

This paper cites JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.709402Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 36e2fad6-b00c-4529-8422-91cdf642ca30 · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 18

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.186560Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 678b87e6-edec-41d0-9ce4-a28c0bdc9577 · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 19

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.176214Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 21ce1f20-0477-42a6-94a4-27421899a287 · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 20

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.165848Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation d5a9b824-cead-4ec8-aab8-6a8358a9c49b · outbound

This paper cites Jailbreaking and Mitigation of Vulnerabilities in Large Language Models.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Jailbreaking and Mitigation of Vulnerabilities in Large Language Models

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.724735Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 70ed739b-b90b-4e10-a7a2-84bf08457161 · outbound

This paper cites Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.728932Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation eb8d1311-e254-44a8-a46b-39a4a490125b · outbound

This paper cites A.; Shanto, M.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models A.; Shanto, M

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:29:21.154903Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 41763b19-d78b-4809-ae25-d8bd9bd69ed0 · outbound

This paper cites Do Anything Now.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Do Anything Now

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:29:21.143025Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 39cb55dc-b955-4a99-bf30-db6c239e26a9 · outbound

This paper cites AttackEval: How to Evaluate the Effectiveness of Jailbreak Attacking on Large Language Models.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models AttackEval: How to Evaluate the Effectiveness of Jailbreak Attacking on Large Language Models

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.739903Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6e2e2f9b-6f7b-4aaf-a6c8-d3a89be5cfff · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 26

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.131650Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation a057bd8f-f2a4-46b6-87ea-7906f5cff3b0 · outbound

This paper cites Jailbreak Large Vision-Language Models Through Multi-Modal Linkage.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Jailbreak Large Vision-Language Models Through Multi-Modal Linkage

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.746385Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f12dafa9-4b73-4da9-b2ba-a81607a4ecd4 · outbound

This paper cites Foot-In-The-Door: A Multi-turn Jailbreak for LLMs.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Foot-In-The-Door: A Multi-turn Jailbreak for LLMs

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.750136Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 812d8591-fe6e-46fa-8ed6-88db238755a0 · outbound

This paper cites You Know What I'm Saying: Jailbreak Attack via Implicit Reference.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models You Know What I'm Saying: Jailbreak Attack via Implicit Reference

Reference 29

Resolution: verified exact; local_arxiv, observed 2026-08-05T05:29:20.853861Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 3f7cf1d5-1351-4e8c-ba9f-7d556ad04f2e · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 30

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.121132Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 034db21d-7496-4fda-98e1-179007492669 · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 31

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.109988Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation e3744395-287a-4ddc-9401-cb4a808358bb · outbound

This paper cites Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.764183Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 13039f77-573b-488c-935f-c28a25313167 · outbound

This paper cites SafetyBench: Evaluating the Safety of Large Language Models.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models SafetyBench: Evaluating the Safety of Large Language Models

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.767922Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 405cbcf2-60b8-49da-be36-3ca03783cf2c · outbound

This paper cites an unresolved cited work.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Unresolved cited work

Reference 34

Resolution: unresolved; raw_fallback, observed 2026-08-05T05:29:21.098809Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 4a4107dd-bafe-40dd-a6c4-efcbd9677e44 · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.775065Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4fe2a0e5-2231-4d50-a3d5-b810cf330f92 · outbound

This paper cites , " * write output.state after.block = add.period write newline.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models , " * write output.state after.block = add.period write newline

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.779911Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a8521700-1f05-4024-b5e2-5e2c867c959b · outbound

This paper cites write newline.

Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models write newline

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-05T05:29:20.783870Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation 5466a475-5077-4378-8c26-90a6bacd12be · inbound

Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents cites this paper.

Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models

Reference 86

Resolution: verified exact; arxiv_id, observed 2026-05-09T06:15:38.406755Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 4129f329-b740-4b0d-a0ee-7f6e9887212d · inbound

Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents cites this paper.

Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models

Reference 86

Resolution: unresolved; no resolver link, observed 2026-08-02T15:04:28.416667Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1967fa15-bd0c-4925-bb0e-3a21056b2f87 · inbound

Exposing LLM Safety Gaps Through Mathematical Encoding:New Attacks and Systematic Analysis cites this paper.

Exposing LLM Safety Gaps Through Mathematical Encoding:New Attacks and Systematic Analysis Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models

Reference 15

Resolution: verified exact; arxiv_id, observed 2026-05-12T10:51:31.100886Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.