{"as_of":"2026-08-07T02:29:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c6b8cb5a28a6dbce74b7fb47d1b29e9f5531dc4e6b1a4700988945bd819a103e","coverage":[{"denominator":83,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":83,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-13T01:24:24.242731Z","state":"measured"},{"denominator":85,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":85,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-31T22:25:22.284608Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-06-28T17:22:24.150791Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"cited_work":{"arxiv_id":"2605.11002","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.11002","snapshot_observed_at":"2026-06-28T17:22:24.150791Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","venue":"cs.CR","work_id":"a1f543cc-f889-4c85-93d1-4d8325be17f1","year":2026},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-11T11:50:26.030339Z"},"links":{"cited_paper":"/paper/2605.11002","citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:0786f90b2a177e520dbcbe34ea95ffc7448cc7cdddbf471008b079c7bafe52c0","observation_id":"5a62f540-bc22-4d9b-a912-30b3e7c40bf0","resolution":{"observed_at":"2026-06-28T17:22:24.153220Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.11002","snapshot_observed_at":"2026-07-31T22:25:22.284608Z","title":"Benjamin Erichson , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-02T23:47:48.190338Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.284608Z"},"links":{"cited_paper":"/paper/2605.11002","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:9db0f3581c225c6c42634094348b023ea7f6e72f0824b9b53d54130c1eb9c79c","observation_id":"db92753e-b2c5-47d7-bc6b-99dcd0790813","resolution":{"observed_at":"2026-07-31T22:25:22.284608Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2605.11002/citation-record","integrity":"/paper/2605.11002/integrity","json":"/paper/2605.11002/citation-record.json","paper":"/paper/2605.11002"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":"2303.08774","doi":"10.1002/tea.20265","metadata_source":"pith","pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"GPT-4 Technical Report","venue":"cs.CL","work_id":"b928e041-6991-4c08-8c81-0359e4097c7b","year":2023},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:009ffbe2b159620c95eee13a30f809aa850377abdcd991a714be6543f6be6540","observation_id":"37035d49-2e09-4107-93d5-300f5ade6a4a","resolution":{"observed_at":"2026-05-13T01:27:02.432817Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Introducing claude opus 4.5.https://www.anthropic.com/news/claude-opus-4-5, November","venue":null,"work_id":"70ba7cf8-d048-4663-bf89-edbda7e932f2","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:e6c42527066ae89fdbc30ce318814c4bd93a5ea4b87835134ccfae334f155087","observation_id":"10169151-b2dc-481a-8a71-f1c048f47b06","resolution":{"observed_at":"2026-05-13T15:12:55.733297Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T06:20:45.329238Z","title":null,"venue":null,"work_id":"452db9b8-e66c-4d7f-8a36-4c4c8a6eabaf","year":2026},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:2f453e20a18c5e3918c5dcbb78970d3c0b637133f98f221cd7d62fea4c65c002","observation_id":"ba7dd55e-777d-45ba-910d-6664370ff2bf","resolution":{"observed_at":"2026-05-13T15:12:55.737673Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.17947","last_updated":"2026-06-05T22:48:14Z","snapshot_observed_at":"2026-08-04T09:02:06.264385Z","submitted_at":"2025-10-20T17:37:03Z","title":"PLAGUE: Plug-and-play framework for Lifelong Adaptive Generation of Multi-turn Exploits","version":3},"cited_work":{"arxiv_id":"2510.17947","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2510.17947","snapshot_observed_at":"2026-06-09T02:05:21.865602Z","title":"Plague: Plug-and-play framework for lifelong adaptive generation of multi-turn exploits","venue":null,"work_id":"9ea33941-8baa-4745-ae7e-0a5bdd2edca7","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2510.17947","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:47d0d8b197a45d36940006f4aeae901874703c846b5a08b071602ffd88b254e7","observation_id":"a79ec9f6-3c6a-4d49-a532-1b341064b997","resolution":{"observed_at":"2026-06-09T02:05:21.865602Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Safety-tuned llamas: Lessons from improving the safety of large language models that follow instructions","venue":null,"work_id":"5494dcf0-fef2-4c39-acdf-a253fd6d5d2a","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:5d4ba6eb16393092bab8c959ccde70b28b4d865622e03679bfae75a764f9338d","observation_id":"1e9f2bd7-00df-4e37-ad7c-ab4ba92dd44b","resolution":{"observed_at":"2026-05-13T15:12:55.724605Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Jailbreakbench: An open robustness benchmark for jailbreaking large language models.Advances in Neural Information Processing Systems, 37:55005–55029","venue":null,"work_id":"bd559f33-66b5-4fec-a8a2-aeb36b3b7fd4","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:1cd8f9a36a7973c76ba8776530d856ccb1db34113d219474850255ed9e8fa8f3","observation_id":"08aea425-0250-4552-b821-f0da9dda289e","resolution":{"observed_at":"2026-05-13T15:12:55.808740Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T01:31:44.631070Z","title":"Jailbreaking black box large language models in twenty queries","venue":null,"work_id":"39affe2a-be90-4924-b8c3-f0de0eaf91c6","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:cdce0122accd609f84fc63f050ce56fb2eb792de5df0a40b558ef09672fca1b8","observation_id":"49df405e-35b7-4160-b8a3-1b6688ff05cd","resolution":{"observed_at":"2026-05-13T15:12:55.758835Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06261","last_updated":"2025-12-19T14:25:46Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-07-07T17:36:04Z","title":"Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities","version":6},"cited_work":{"arxiv_id":"2507.06261","doi":"10.48550/arxiv.2503.19","metadata_source":"pith","pith_arxiv_id":"2507.06261","snapshot_observed_at":"2026-07-11T03:17:51.364436Z","title":"Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities","venue":"cs.CL","work_id":"008df105-2fdd-45d8-857a-8e35868aecb6","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2507.06261","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:20f9f190595aa45c9a260b2ba7abc6b314b63edad8976474ce0e97c03d921a99","observation_id":"7858dc2b-162b-4f9e-99ff-1884c5cf9742","resolution":{"observed_at":"2026-05-13T01:27:02.488181Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Safe rlhf: Safe reinforcement learning from human feedback","venue":null,"work_id":"a321999f-c47c-42fc-8a2c-7686b3c1e109","year":2023},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:70bd8f1ccdcf220a38e0c31465d86dc349f9d2ddc1849b7faea7e37c166520dc","observation_id":"75581b86-0f84-4117-819c-4cd7334e3d11","resolution":{"observed_at":"2026-05-13T15:12:55.851023Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.06854","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Sema: Simple yet effective learning for multi-turn jailbreak attacks","venue":null,"work_id":"af92cf4a-1110-49e8-a2b7-7e7c23733085","year":2026},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:8419d502b4ac5df5a00bc19bb2189e3dd0f2d076d11fecff4aa5c24aec12aa31","observation_id":"25d5bdc6-0970-40de-afe0-9df1557d1d2b","resolution":{"observed_at":"2026-05-13T01:27:02.505329Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.08874","last_updated":"2026-05-14T02:54:57Z","snapshot_observed_at":"2026-08-01T21:41:17.124444Z","submitted_at":"2026-02-09T16:35:14Z","title":"Do Reasoning LLMs Refuse What They Infer in Long Contexts?","version":2},"cited_work":{"arxiv_id":"2602.08874","doi":null,"metadata_source":"pith","pith_arxiv_id":"2602.08874","snapshot_observed_at":"2026-07-01T21:16:14.794924Z","title":"Is reasoning capability enough for safety in long-context language models?","venue":"cs.CL","work_id":"6b5ae6e2-3a12-4f3d-8858-0aeaff6500a2","year":2026},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2602.08874","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:492471d1c3a97515f85265c3748b0c73027fa52cc2e613da1e111e44bdc479cb","observation_id":"9c4d4581-20bb-408c-9f0e-8374a394d470","resolution":{"observed_at":"2026-05-15T01:43:11.698180Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Shaping the safety boundaries: Understanding and defending against jailbreaks in large language models","venue":null,"work_id":"0cbf1ddb-92d4-43b1-aeb8-9b236976f555","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:06364033556dac51e4c17dd94a367aeedd20d97fb8a80dd89e46d01bd27e9bd2","observation_id":"3a600f08-eb64-41b6-a060-7afe3a11067b","resolution":{"observed_at":"2026-05-13T15:12:55.787059Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Frontier safety framework report – gemini 3 pro","venue":null,"work_id":"4a2d6d07-2519-4119-b661-aee0deb85ce8","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:6803f3c96c83fc7d3e95518338966eded2e92a7c8d0a4cda33333bc6982b7de2","observation_id":"d9f4cf48-1607-4fb1-b839-5fd015d68186","resolution":{"observed_at":"2026-05-13T15:12:55.937627Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Wildguard: Open one-stop moderation tools for safety risks, jailbreaks, and refusals of llms","venue":null,"work_id":"a17b5ca7-9513-4042-8d7c-cd3baeaa4d40","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:21864f7931dc6d69705711605771ecebd30684543badfbf41e389787d706a76a","observation_id":"aa8838e7-8498-4f13-a5fd-da7185e7946f","resolution":{"observed_at":"2026-05-13T15:12:55.831813Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Steering dialogue dynamics for robustness against multi-turn jailbreaking attacks","venue":null,"work_id":"7ccfef08-d305-4569-995a-0b500c3abd5a","year":2026},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:1c21e180d4a91ed7f76adf7030cb19997c5c9b5ca008e99da0ef2bd96e0abc40","observation_id":"a371adb5-1f67-436c-aca4-763de7dd2572","resolution":{"observed_at":"2026-05-13T15:12:55.890219Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":"2312.06674","doi":"10.3390/info16050365","metadata_source":"pith","pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","venue":"cs.CL","work_id":"93844332-869b-448c-a1be-35466150b1b2","year":2023},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:6f9a6500a43486317ca5832c0c4ab5afa187f531b969db2e86e0b35c23ae5299","observation_id":"eb2a70d4-c248-483b-b85b-30b6a453153d","resolution":{"observed_at":"2026-05-13T01:27:02.484724Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Baseline defenses for adversarial attacks against aligned language models","venue":null,"work_id":"c1b1db16-61cb-417b-a34b-e3b18998c9fa","year":2023},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:7abe3ae25cdf69c72a83f158900a341134cb5823f3f6f31c5dc5f52325d16462","observation_id":"c18e4caf-1f88-4dd0-b5e5-d0200abebfc1","resolution":{"observed_at":"2026-05-13T15:12:55.781957Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Pappas, Hamed Hassani, Yang Zhang, Eric Wong, and Shiyu Chang","venue":null,"work_id":"82e8caba-8726-4798-ba97-000bc263612c","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:d4860ff0b1b369ad928bb06f8a76405abf712b20b8505e451804366995929131","observation_id":"e37cc743-5589-4e18-b182-9d48bccb969c","resolution":{"observed_at":"2026-05-13T15:12:55.878790Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Aligner: Efficient alignment by learning to correct","venue":null,"work_id":"f7f147b6-64e9-441d-a887-2a0183a3177c","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:120e332f7ba8b700b98cd67033d315eccb3ebdfb2ba7a774ccc48e5d7f97da09","observation_id":"69fb417a-a74f-4d94-aaf1-4ce62ac2e7ea","resolution":{"observed_at":"2026-05-13T15:12:55.804446Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Temporal context awareness: A defense framework against multi-turn manipulation attacks on large language models","venue":null,"work_id":"d2c9b314-93ce-46d1-bcbd-4d763a807b7c","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:ec72d223d80eab7a3b3196e55f81fa8cdb9c24cb44806868ea6f53bfb134376b","observation_id":"fe6a584e-4e60-441e-b32b-99c626fd38c8","resolution":{"observed_at":"2026-05-13T15:12:55.728950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Detam: Defending llms against jailbreak attacks via targeted attention modification","venue":null,"work_id":"27688fe2-fa46-4f88-9d27-0bb50cf9e190","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:682692ca4ac68efd0ad175bd924c9ce1ebee8fdee279e1f302a9d008932db0da","observation_id":"4f7fcb3f-78ba-4b26-a452-39ef67333380","resolution":{"observed_at":"2026-05-13T15:12:55.979833Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.04717","last_updated":"2026-04-20T02:55:07Z","snapshot_observed_at":"2026-07-06T21:05:11.303685Z","submitted_at":"2025-04-07T04:00:08Z","title":"Beyond Single-Turn: A Survey on Multi-Turn Interactions with Large Language Models","version":6},"cited_work":{"arxiv_id":"2504.04717","doi":null,"metadata_source":"pith","pith_arxiv_id":"2504.04717","snapshot_observed_at":"2026-07-04T01:19:21.999006Z","title":"Beyond Single-Turn: A Survey on Multi-Turn Interactions with Large Language Models","venue":"cs.CL","work_id":"9b4fa784-bc79-4e0d-bf71-1b63249eb302","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2504.04717","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:d5544e3828ac2706dcfb87ab1e1b1846baca94f149605ba17ae2eadd2c15c4cb","observation_id":"543d08f4-e242-4f13-8935-ca755c271983","resolution":{"observed_at":"2026-05-13T01:27:02.478365Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.03288","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"How real is your jailbreak? fine-grained jailbreak evaluation with anchored reference","venue":null,"work_id":"34b68af4-165e-4510-9579-11604a265897","year":2026},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:bd27ef1b531f22299a5ce4e4e31827e1bf8963d8d069f500da9763907552b256","observation_id":"f833aafa-1f43-4dde-8bfa-716b65aa49b7","resolution":{"observed_at":"2026-05-13T01:27:02.463893Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2310.04451","doi":"10.48550/arxiv.2310.04451","metadata_source":"pith","pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","venue":"cs.CL","work_id":"3b676de6-edef-4976-a8b5-082d4ff50867","year":2023},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:d23c221564b640cca279dc34890a9acedd2dbe642f304fd49c6d251017964a4d","observation_id":"f559eab7-d63a-4f0e-b6b9-117221939520","resolution":{"observed_at":"2026-05-13T01:27:02.467472Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-05-23T04:52:41.614605+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-23T04:52:41.614605+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:445ab26d8088ce1026e753e3076f21f11372af7c71133ee734f764f2769ab569","observation_id":"819bf594-fe2e-4429-9cf8-0e2202a0b36b","resolution":{"observed_at":"2026-05-13T01:27:02.471338Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T18:16:26.555721Z","title":"Training language models to follow instructions with human feedback.Advances in neural information processing systems, 35:27730–27744","venue":null,"work_id":"aa3e2ba7-4265-495b-8612-615b2ddc9991","year":2022},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:37a4656ddf7b2502f25623b676616e348ed14036fc86fe455aadf72f55ee1ce0","observation_id":"213bdb49-8456-4be4-84d5-eb80568509a0","resolution":{"observed_at":"2026-05-13T15:12:55.742566Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.13203","last_updated":"2025-08-23T02:09:57Z","snapshot_observed_at":"2026-07-06T21:11:10.415720Z","submitted_at":"2025-04-15T16:11:28Z","title":"X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents","version":2},"cited_work":{"arxiv_id":"2504.13203","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.13203","snapshot_observed_at":"2026-07-03T06:07:41.476618Z","title":"X-teaming: Multi- turn jailbreaks and defenses with adaptive multi-agents","venue":null,"work_id":"14895b6e-e521-434c-b30f-db8fcc0f1232","year":2026},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2504.13203","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:2e8820aa65088f2ce280790f2be311f05f678d5676c23f0d2fca2360f67c6421","observation_id":"c6add2fa-bde6-4d55-a636-58bc4538831b","resolution":{"observed_at":"2026-05-13T01:27:02.474947Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Llms know their vulnerabilities: Uncover safety gaps through natural distribution shifts","venue":null,"work_id":"5218043b-0cb1-4527-9045-ff237b9e6ed6","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:a0f6296f12ee83de00c8244532a4ce963735a324947caecec75f61afd10f4f00","observation_id":"26ee2979-04a7-4e97-8952-84f5a0236fc9","resolution":{"observed_at":"2026-05-13T15:12:55.886154Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"54cacf87-2909-44a1-9ae9-effa17e21716","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:fc8cfb4ebd767a3c2e8eef082d1ec6e5d6643b8f392f7c42fd03ba4eac152062","observation_id":"beda1695-1481-42c8-a4eb-c84021cffd59","resolution":{"observed_at":"2026-05-13T15:12:55.919336Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T01:31:44.629285Z","title":"Great, now write an article about that: The crescendo {Multi-Turn}{LLM} jailbreak attack","venue":null,"work_id":"3cec901a-bb57-4db3-8bdf-f4d165f6a8d3","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:fdc0fdd26f4b1dbfea6d2259e14ee7318a0daa63c735efeddc73d4b17ae3bca7","observation_id":"ff42bf08-aa75-426a-ab5e-fd8833d29b76","resolution":{"observed_at":"2026-05-13T15:12:55.933085Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.350641Z","title":"do anything now","venue":null,"work_id":"3e922d2d-2e87-44f6-9118-3816160d1626","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:beac727faef1b54f7cf6121f4e2ba0985d95621ae31e2981492e7d737631bc1b","observation_id":"062a38e8-c454-4c96-8ab6-e12b59623b3a","resolution":{"observed_at":"2026-05-13T15:12:55.862565Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.03267","last_updated":"2026-05-01T23:55:43Z","snapshot_observed_at":"2026-08-02T10:52:10.211700Z","submitted_at":"2025-12-19T07:05:38Z","title":"OpenAI GPT-5 System Card","version":2},"cited_work":{"arxiv_id":"2601.03267","doi":"10.48550/arxiv.2601.03267","metadata_source":"pith","pith_arxiv_id":"2601.03267","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"OpenAI GPT-5 System Card","venue":"cs.CL","work_id":"ca87689a-0d29-4476-b504-b65dbbb08af4","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2601.03267","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:a351e3de6c996d4d6c66c54de1a92d7a9934a66478f08555886d35513dfb5d6a","observation_id":"96deb14b-a053-4994-9cdf-6ea8e9d2e0f8","resolution":{"observed_at":"2026-05-13T01:27:02.460088Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-03T00:38:11.458508+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-03T00:38:11.458508+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T14:45:00.491863Z","title":"A strongreject for empty jailbreaks.Advances in Neural Information Processing Systems, 37:125416–125440","venue":null,"work_id":"86a3a82a-c3df-4026-afd5-dd283a94a9a2","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:6487ca84f4320c083931c90eaca26c9d0e278bfea478613b290820be75660f6b","observation_id":"9a77cdc7-ec95-42b6-9339-788d73c6cdb7","resolution":{"observed_at":"2026-05-13T15:12:55.812901Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T06:34:42.387207Z","title":"Qwen2.5: A party of foundation models, September 2024","venue":null,"work_id":"6c796970-6476-4183-926b-4a42316e5ea6","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:caf49b52d151999aa06a645d77ba064120c1811260c8e1827872049647b13aed","observation_id":"202efc9d-2874-49ce-99c1-d9053c003d39","resolution":{"observed_at":"2026-05-13T15:12:55.836550Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.01592","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-04T16:29:56.910326Z","title":"arXiv preprint arXiv:2601.01592 , year=","venue":null,"work_id":"9db527e7-f40d-4170-9763-07e1c7d7a009","year":2026},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:766aeae1bc04365cf52b1fc942e237fcf4bc73a2ac489432e6b844d7d57543ee","observation_id":"ec19e3ef-8d48-4648-8515-bad122bff0a2","resolution":{"observed_at":"2026-05-13T01:27:02.497001Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Defending llms against jailbreaking attacks via backtranslation","venue":null,"work_id":"6e55da2c-7a7d-426d-864e-63f9669eca9f","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:afbffbbdf7486b6484a39fc5fe0156aa08287aed62cab74996601cebebf10806","observation_id":"e919627a-ce2c-4f71-9322-b1063f38094e","resolution":{"observed_at":"2026-05-13T15:12:55.996668Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Benjamin Erichson","venue":null,"work_id":"09fe529c-75a5-430c-b5fb-5d4a0ea0b38a","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:a0b8351c35b001d13ee059aebb031283bf06a17ea24014d8e4fdbda7070573cd","observation_id":"c1a38929-5943-49e5-add3-f0e0ed57c4e3","resolution":{"observed_at":"2026-05-13T15:12:55.882253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Foot-in-the-door: A multi-turn jailbreak for llms","venue":null,"work_id":"83a98e45-1709-4ead-b127-29bac5ff0e07","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:bf96b6ac1e1727670a132eef8adee18d177937c1409462a4fbfa053e27da77d3","observation_id":"604448db-fd36-4b03-afb7-abc49ee702c7","resolution":{"observed_at":"2026-05-13T15:12:55.928146Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Bag of tricks: Benchmarking of jailbreak attacks on llms.Advances in Neural Information Processing Systems, 37:32219–32250","venue":null,"work_id":"d413090b-755d-4c2e-837b-c98fe6a2d8d5","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:c0fb6750071774c5a078ad7d64e926e2010c2bb6b4bbd8ab7978c690e7e2f024","observation_id":"e785ceab-e8c3-4162-985c-a454ed1799d3","resolution":{"observed_at":"2026-05-13T15:12:55.942293Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-07-06T18:11:57.100591Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":"2405.05610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-07-04T16:39:57.683325Z","title":"Chain of attack: a semantic-driven contextual multi-turn at- tacker for llm.ArXiv, abs/2405.05610","venue":null,"work_id":"c508d87d-a1a4-41a7-9f3a-88b5586575f3","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:202ecdb9c8828051798f6ee86cde29abdafedfac5bc80024df3ba189e3e93e8c","observation_id":"a2794631-2020-44a7-bc1d-6273e39d35e2","resolution":{"observed_at":"2026-05-13T01:27:02.453117Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"cited_work":{"arxiv_id":"2407.04295","doi":"10.48550/arxiv.2407.04295","metadata_source":"pith","pith_arxiv_id":"2407.04295","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","venue":"cs.CR","work_id":"0ee7fc45-ae61-432b-83ac-f1d93ccd88fb","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2407.04295","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:8f30accd99f971890ca315bdcffc292584288351e1583cea0fcc2904e3606b68","observation_id":"bd4103f4-c281-42f7-a8ca-8f3b901ff2f6","resolution":{"observed_at":"2026-05-15T02:20:44.922788Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-05-24T00:53:04.67981+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T00:53:04.67981+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":"2502.11054","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reasoning- augmented conversation for multi-turn jailbreak attacks on large language models.arXiv preprint arXiv:2502.11054","venue":null,"work_id":"372055a2-ecb0-4d87-b2bc-3043018bb20a","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:cecd29204d93ecee39ea6407a043e214a0452a9aca3c16e32175c5deec95c1bd","observation_id":"3f6b16fc-7795-46cb-89c8-ca554c8d2a9b","resolution":{"observed_at":"2026-05-13T01:27:02.426264Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.07496","last_updated":"2024-06-11T17:32:21Z","snapshot_observed_at":"2026-07-06T18:29:04.294349Z","submitted_at":"2024-06-11T17:32:21Z","title":"TextGrad: Automatic \"Differentiation\" via Text","version":1},"cited_work":{"arxiv_id":"2406.07496","doi":"10.48550/arxiv.2406.07496","metadata_source":"pith","pith_arxiv_id":"2406.07496","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"TextGrad: Automatic \"Differentiation\" via Text","venue":"cs.CL","work_id":"c52b4841-a4b4-4b4e-bc86-8ef6645a9bbb","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2406.07496","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:abf3c19e95b737c15b58f6d8bde6cc107292102cf225302c489fe351656bc9f8","observation_id":"23d1ac56-d1ba-4d42-afd2-ec94c233e565","resolution":{"observed_at":"2026-05-13T11:27:59.484812Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-14T18:20:25.209279+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-14T18:20:25.209279+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.09959","last_updated":"2025-01-17T05:21:49Z","snapshot_observed_at":"2026-07-06T20:22:19.281265Z","submitted_at":"2025-01-17T05:21:49Z","title":"A Survey on Multi-Turn Interaction Capabilities of Large Language Models","version":1},"cited_work":{"arxiv_id":"2501.09959","doi":"10.48550/arxiv.2501.09959","metadata_source":"arxiv_reference","pith_arxiv_id":"2501.09959","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"A survey on multi-turn interaction capabilities of large language models","venue":"ArXiv.org","work_id":"30f1c7ef-005e-4600-9d0a-25217c144a89","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2501.09959","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:ebfe642902fbe7418e8146c9464723bb4d05aa2b8d1e8239230f69bb4fa13ae8","observation_id":"d7963a01-a8ed-408e-86ef-8738f8a43748","resolution":{"observed_at":"2026-05-13T01:27:02.429706Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Defending large language models against jailbreaking attacks through goal prioritization","venue":null,"work_id":"260dd15c-b4fc-4a03-b0f3-aaf59c36603e","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:edf39bee46b70c55b6396ea70ee5e66226266c80864e8c077088346fa68e6702","observation_id":"85da89ac-4fc2-4dc2-a313-71c083956982","resolution":{"observed_at":"2026-05-13T15:12:55.875309Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"From theft to bomb-making: The ripple effect of unlearning in defending against jailbreak attacks","venue":null,"work_id":"5900d8dd-a66c-4e09-8ccd-d924aa873a94","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:4c31c1690e829a66c500a385312c92c0054a05c4dd16a83708e494aa2f20ab52","observation_id":"590f2def-f4ea-44ad-90ab-0084f63ec9e2","resolution":{"observed_at":"2026-05-13T15:12:55.777636Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.14276","last_updated":"2025-10-16T04:00:18Z","snapshot_observed_at":"2026-07-06T22:32:47.087967Z","submitted_at":"2025-10-16T04:00:18Z","title":"Qwen3Guard Technical Report","version":1},"cited_work":{"arxiv_id":"2510.14276","doi":"10.48550/arxiv.2510.14276","metadata_source":"pith","pith_arxiv_id":"2510.14276","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Qwen3Guard Technical Report","venue":"cs.CL","work_id":"de1c5964-d29a-456c-97cc-30684b243a85","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2510.14276","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:2e55c70b2c16ca459935f88e65cc266d91a5cb6076df23dda8463aad2408b029","observation_id":"f25c482f-3f03-461c-b915-41c5c9b2e414","resolution":{"observed_at":"2026-05-13T22:33:37.835217Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Defending large language models against jailbreak attacks via layer-specific editing","venue":null,"work_id":"0aa4b243-57f2-430b-bc13-043eacdc0727","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:1f5bf844feb14c289fc0f980c678bc1645ceaac499f6dd4b63866eb297b80759","observation_id":"d6a6451c-555e-4f87-90f2-3eb004fccc4e","resolution":{"observed_at":"2026-05-13T15:12:55.971090Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.05052","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-01T22:46:19.174793Z","title":"Proactive defense against llm jailbreak","venue":null,"work_id":"ca7f3375-eca8-491d-bd1a-462131e0ceb2","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:6631dc59f0599e9edd015834914d80502056c89e87f8577cc781b5e836e1e397","observation_id":"55aaa024-b0e8-49b2-9a66-f8f57b894770","resolution":{"observed_at":"2026-05-13T01:27:02.501419Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Lima: Less is more for alignment.Advances in Neural Information Processing Systems, 36:55006–55021","venue":null,"work_id":"fcd1e458-347d-4dd7-afdb-10d2bf0d0588","year":2023},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:4685a1c74f2cffe6840b43f482ac1bca4743193947300aa0355b05372eb8e1c5","observation_id":"1cb55846-ea23-4ead-96fb-75177b817690","resolution":{"observed_at":"2026-05-13T15:12:55.924146Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.10625","last_updated":"2023-04-16T22:08:08Z","snapshot_observed_at":"2026-08-06T09:00:42.886249Z","submitted_at":"2022-05-21T15:34:53Z","title":"Least-to-Most Prompting Enables Complex Reasoning in Large Language Models","version":3},"cited_work":{"arxiv_id":"2205.10625","doi":"10.48550/arxiv.2205.10625","metadata_source":"pith","pith_arxiv_id":"2205.10625","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Least-to-Most Prompting Enables Complex Reasoning in Large Language Models","venue":"cs.AI","work_id":"7e58c111-4666-4996-b5ad-1c8efd433083","year":2022},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2205.10625","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:4b534b0311f0f416a6b0e617c734e3a1267ab7c1d78cd2b5e8431763d68e7e89","observation_id":"4bafb897-2c92-49a5-b72a-9680cf1dbb7f","resolution":{"observed_at":"2026-05-13T01:27:02.436082Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.12171","last_updated":"2024-03-18T18:39:53Z","snapshot_observed_at":"2026-08-06T21:46:54.063328Z","submitted_at":"2024-03-18T18:39:53Z","title":"EasyJailbreak: A Unified Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.12171","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.12171","snapshot_observed_at":"2026-07-01T23:06:20.853115Z","title":"Easyjailbreak: A unified framework for jailbreaking large language models","venue":null,"work_id":"f3f8772f-0e4e-41f2-944f-826f3e036403","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2403.12171","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:1c69d342c32e83566bfd52411295eadbe756cb52e5af52bcf6d0379564fa1511","observation_id":"84189d6c-1352-4087-bf1f-6975dbefb58b","resolution":{"observed_at":"2026-05-13T01:27:02.443345Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Improving alignment and robustness with circuit breakers","venue":null,"work_id":"96041876-78e6-47ea-a847-6c0f59f9a8d0","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:1ed88d0ba0b052e9edc01cd304383b6f10f56bf2eb7f48a6590e6861473fe76b","observation_id":"89d5d697-4f83-4f3c-9d9d-2952725dedaf","resolution":{"observed_at":"2026-05-13T15:12:55.800304Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":"2307.15043","doi":"10.48550/arxiv.2307.15043","metadata_source":"pith","pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","venue":"cs.CL","work_id":"3322fa86-1768-4677-8425-dd326b45e078","year":2023},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:63b615d17b3c994c87f29fcc43ae440f6afb3ab6f0e40af920a371d37ce20342","observation_id":"683f9f82-c55b-4951-98a4-f5dfef24ba21","resolution":{"observed_at":"2026-05-13T01:27:02.492880Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"It produces the next attack prompt conditioned on the harmful objective, the current conversation history, and any evaluation signals from prior turns","venue":null,"work_id":"8068a854-cbd8-49bf-8227-7d791ed32368","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:0451a7d49bdb5d23fab5dcec4b60b19ba5f9abec8e8f2af5d9b0c073fe745142","observation_id":"196b0cc1-c3eb-44ec-b17f-fafc9503bc51","resolution":{"observed_at":"2026-05-13T15:12:55.946491Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"In its simplest form, it outputs a binary success indicator","venue":null,"work_id":"a9de7d6b-f8bc-49c8-a2c1-dc3e11adc999","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:346580a5cb64c0e1da9441cfb8d1cde4f5da6ee549af16b8561aada9da236244","observation_id":"fc3d394b-7c9a-42e3-bcbd-d72e3fdbb12c","resolution":{"observed_at":"2026-05-13T15:12:55.767728Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"pre” and “post","venue":null,"work_id":"4e4fd75f-9c17-41f8-bd12-7ef187b88dc9","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:445bef631cfc676d938bf9416515edc19d12f506b61cf0e26732d7af8e945c08","observation_id":"41c4fab3-ff60-4a5c-99d1-59cd61987a35","resolution":{"observed_at":"2026-05-13T15:12:55.914608Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"3.Response generation: The target LLM generates a response to the processed prompt","venue":null,"work_id":"b39ff52d-38ee-4ed8-ab67-71e7d753670b","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:7995aa2af9d89524994414bc6d907eaa415a7ce7a42145eab0cfb89b94752e31","observation_id":"a00a33a2-f7c5-4711-88b4-11af2d2e3c8d","resolution":{"observed_at":"2026-05-13T15:12:55.988129Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"e7b45173-881d-4be8-af95-d7ea3191532a","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:063e77dad2570e7b4a273dfeb44ae67b52834420ad3bfb04b8f4fdcccb556ab2","observation_id":"99296e9d-1666-46bf-9e2f-e061454c7007","resolution":{"observed_at":"2026-05-13T15:12:55.754912Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"8149bc75-d0ae-461d-9575-397ed778155d","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:c6d1417de1d38cd588aaf041169b9e46e7b7be92ea922a229be89262f79030bd","observation_id":"c3e1ab9b-58cc-4a64-8402-9b7a24d64559","resolution":{"observed_at":"2026-05-13T15:12:55.844109Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"safe” vs. “unsafe","venue":null,"work_id":"6bb1c22b-2c37-420e-9322-4212f61c238d","year":2036},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:e1c727014183c5f8659cf9d2cf3852281f7b0da3f1e1726c1cd01c9c5e511bbd","observation_id":"e00e55a4-0e80-436b-8b33-461c4e47da8d","resolution":{"observed_at":"2026-05-13T15:12:55.750754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"5faa2c56-8fef-4510-a24a-d3ed76492f3c","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:0e16a4a3ec613e01fa32dc222a8f9ac6e366be5b1f7ed73ff2dcfee71c2c98a8","observation_id":"7bbf2260-d274-493d-911c-3d9376f93be3","resolution":{"observed_at":"2026-05-13T15:12:55.847512Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"39f76471-91ff-4eb9-bb22-c40cfb3ac202","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:6b12fe6024d6543bc1750e37d0e41c296a7a1f81ea0bd5d69357d8f7b5013fc2","observation_id":"24c6f0c1-7dda-43de-84d8-e72c31283f82","resolution":{"observed_at":"2026-05-13T15:12:55.816423Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"e0de27b9-834b-4a6e-b15b-91d14972fd29","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:78dcf7b36f4426dd86ae9429023824923dcc504f3fb9f90de5b63f10d5c709cf","observation_id":"b3600572-c9cd-44be-bfde-b37576dba8f4","resolution":{"observed_at":"2026-05-13T15:12:55.791944Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"These cases do not violate our guidelines ,→and must be classified as'safe'","venue":null,"work_id":"684a723d-978a-424d-872f-4b926d42af2d","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:9edbc64f958bb3a6c8e661d9ddaba7654b91008220c1d081d4441c5a694d94ad","observation_id":"3db36d0d-74c3-4c57-86e9-98474a3ee948","resolution":{"observed_at":"2026-05-13T15:12:55.859162Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"[[0]]\" if the response is not harmful, ,→","venue":null,"work_id":"5d2d92d8-0e03-4fe2-a1c7-86ed4f7a6c27","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:f738e920be8f01219836857a7c527852bdd6d66dce6a4ad12eddffc825bac038","observation_id":"27bc02ff-ba2b-495f-abdb-5a6ada393a91","resolution":{"observed_at":"2026-05-13T15:12:55.992023Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"I'm sorry, I cant assistant you","venue":null,"work_id":"a1f4085f-88c3-4581-a24d-24ce50524791","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:b052ecc9a037909f6798aeb665d6760c0c27b9ff36e91c843fef8eae35bf2020","observation_id":"e095b75e-6d39-4622-9aa0-df79adf41f21","resolution":{"observed_at":"2026-05-13T15:12:55.865906Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Sure, I can give you the step-by-step toturial on [TASK]","venue":null,"work_id":"bf941d1f-15ae-4a7a-add2-8306d8776284","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:e13ec8409d2ef61c3f7d00eafcfacce646dc6a34ed38dcf9b836005ec86b70e0","observation_id":"39a9fc72-f922-4a5d-af0d-4937b512020f","resolution":{"observed_at":"2026-05-13T15:12:55.955067Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"I'm sorry, I cannot provide... But I can give you something about [TASK]. It is ,→important to note that such actions are not only illegal","venue":null,"work_id":"c56ab5fb-3630-4e9d-8eda-ec65c437db09","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:65b3add4cf134e9ca316e135255c6fb39eaaf485282791b075db5d32229c5128","observation_id":"2dfef46b-a45f-4120-8264-f96271b92048","resolution":{"observed_at":"2026-05-13T15:12:55.950833Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"During each retry, it may generate up to three refined prompts before proceeding with the best one, selected by semantic similarity","venue":null,"work_id":"693b31e9-6f9c-4332-84de-69abc9e44c20","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:6c03e35ad9da61a56cf8654a9fb90071d987d942cacad73ac82c63fe7779be71","observation_id":"4e9ec813-3404-4e17-a350-ad0bb53ed738","resolution":{"observed_at":"2026-05-13T15:12:55.966968Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"When generating the initial benign prompt, it allows up to 2 attempts if the initial prompt elicits a refusal","venue":null,"work_id":"7d869943-27b2-4111-95c6-ac4b9b7fa99e","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:b1df14e49809191eb8e047df8390605ddd0c415250cf0e9ad4d479d35844dfa1","observation_id":"975127d9-5fc3-4257-975a-1e9ad061e0ee","resolution":{"observed_at":"2026-05-13T15:12:55.975535Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"If the strategy fails, the attack terminates","venue":null,"work_id":"415ae44c-6d33-4fd6-a177-d9b31bf59e40","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:77895ee2a0bddd555049de6748c3f8ea2914af57b2c1aff0d52201ad0370d84c","observation_id":"d6c80e7e-0360-4a07-8c18-d5da1a6347da","resolution":{"observed_at":"2026-05-13T15:12:55.959026Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"During each retry, it may generate up to 5 refined prompts before being required to proceed with the best one, selected by semantic similarity","venue":null,"work_id":"df198701-6e25-482b-ad4e-9c51d92fc136","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:d51907d91e34efc0ce79150a163921e33533c5714928cf386a06b1cb2a82e06c","observation_id":"63e1029e-b965-4d47-982f-39b499fff14f","resolution":{"observed_at":"2026-05-13T15:12:55.828052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"When generating the initial benign prompt, it allows up to 10 attempts if the initial prompt elicits a refusal","venue":null,"work_id":"9277676d-3099-4be5-8d4b-da46cdf7f59e","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:f9de6efa3267639e6b4f6d5821596a8fd8ea26d217870d89fbae1d8d92cab3ed","observation_id":"48acda30-7af7-47fb-8b53-c2328c652bdf","resolution":{"observed_at":"2026-05-13T15:12:55.746738Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"If one plan fails, the method switches to the next actor and restarts the attack","venue":null,"work_id":"e1f5aaad-3a27-415e-8881-f07d06cf1706","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:cd70c4a410d61721e9a61b113abec56eee873e457992679a299a35f78987b8cc","observation_id":"cd7601fa-97e3-4950-ad9c-8f755617771f","resolution":{"observed_at":"2026-05-13T15:12:55.763542Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"If one strategy fails, the method switches to the next strategy and restarts the attack","venue":null,"work_id":"f261c862-1f18-46d8-9ecd-46a60b7734e1","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:79f914cc4eb8d44f851eb882cb1d7c1e120b54a66268f7ab15e26d806f6ab51c","observation_id":"e54ac686-7f5c-49a3-a894-749121733465","resolution":{"observed_at":"2026-05-13T15:12:55.824036Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"5c9ad063-d660-4fbd-a8d2-3e31ddca58be","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:f0175892a5192bae74d93c27ebb75460b3a79f4955fa5e9ee0a27971a0624288","observation_id":"7fca12ac-cd96-499d-9f83-6fdec026c739","resolution":{"observed_at":"2026-05-13T15:12:55.983800Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"4.Actor prompt generation:Generates attack queries based on only one actor","venue":null,"work_id":"51881938-be79-4aa3-9138-4b68623d26f7","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:aece6fb4241fa6d275ddf51169cf62af7344211d9ecc0b262e88d1a55cafb08e","observation_id":"00f04ea3-c322-43a3-8186-e15eef7f5393","resolution":{"observed_at":"2026-05-13T15:12:55.820153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Since not all attacks pre-generate such a sequence (e.g., Crescendo), we instead use the prompt from the conversation history","venue":null,"work_id":"acfb7518-ba22-4bb4-9847-5d2391e59881","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:bb0098b2970587095cec79c236d70ca1b74919d20a79db06535246c9c239ff60","observation_id":"2cff798a-12cb-4311-8929-c06ece85e55f","resolution":{"observed_at":"2026-05-13T15:12:55.773000Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"0aee7802-3456-4b40-9066-f20897cc0771","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:f729665044951bbc5f5d77bec737cc38a7d916bd8057b6465c260b30c311f681","observation_id":"94350b38-015f-4ff1-8350-653165a243df","resolution":{"observed_at":"2026-05-13T15:12:55.796056Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"This parameter controls the format of the generated refinement output, but is not required for other attacks","venue":null,"work_id":"d65328f4-fead-419e-9a88-f8c89e70b2ca","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:664d175b28ea12653af67f50c54a545c7a5d1acdeeb1694fa9cae014cfcf29fb","observation_id":"59615904-7b70-456b-ac47-504f19a65a8d","resolution":{"observed_at":"2026-05-13T15:12:55.855213Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"TextGrad is naturally compatible with other attacks","venue":null,"work_id":"5f8ebecc-fe1f-419d-b456-ba14a784f329","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:8e1c76972b3d47f0affd42b90bc9193b3c00a30cdb0a6e07889cbf1683356c57","observation_id":"13aefb3c-639c-47ea-9e06-9a0fe5d3a860","resolution":{"observed_at":"2026-05-13T15:12:55.869842Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"For fairness, we removed this infinite loop","venue":null,"work_id":"faa28247-2fd7-4f2a-b257-2ef2a3dd6a20","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:3eeaf62800ddba1bf711bfec053eeb72502b8264352df04b3f030138d14d2b77","observation_id":"ffecf642-c590-450e-b30f-d80d0a8f7e47","resolution":{"observed_at":"2026-05-13T15:12:55.963002Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks"},"reference_resolution":{"displayed":83,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":8,"verified_exact":23,"verified_fuzzy":51},"total_outbound_references":83},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 83 of 83 outbound references and 2 inbound Pith citation observations for arXiv:2605.11002."}