{"as_of":"2026-08-14T16:58:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:73f8e0e5865abe514d9ba5fd3deba8faaa83d631bb7d095ae89ad638155dd956","coverage":[{"denominator":18,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":18,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-11T11:50:26.030339Z","state":"measured"},{"denominator":18,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":18,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.02640/citation-record","integrity":"/paper/2606.02640/integrity","json":"/paper/2606.02640/citation-record.json","paper":"/paper/2606.02640"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"Bullwinkel, B., Russinovich, M., Salem, A., Zanella- Beguelin, S., Jones, D., Severi, G., Kim, E., Hines, K., Minnich, A","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:4fc96d214d776f674a6ef29badd93cf704b784fcb22b73b726e4426095374c4e","observation_id":"95659395-d05b-485e-b19c-12f8e4ccb16e","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.08874","last_updated":"2026-05-14T02:54:57Z","snapshot_observed_at":"2026-08-13T15:49:51.506341Z","submitted_at":"2026-02-09T16:35:14Z","title":"Do Reasoning LLMs Refuse What They Infer in Long Contexts?","version":2},"cited_work":{"arxiv_id":"2602.08874","doi":null,"metadata_source":"pith","pith_arxiv_id":"2602.08874","snapshot_observed_at":"2026-07-01T21:16:14.794924Z","title":"Is reasoning capability enough for safety in long-context language models?","venue":"cs.CL","work_id":"6b5ae6e2-3a12-4f3d-8858-0aeaff6500a2","year":2026},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"cited_paper":"/paper/2602.08874","citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:98effba986ab34b60258c7615d9db43cbb608eee3c64e3e48b66243f8593ee02","observation_id":"6105843f-d28a-44c7-bdda-7049a6a17859","resolution":{"observed_at":"2026-07-01T21:16:14.797392Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"Ji, J., Hong, D., Zhang, B., Chen, B., Dai, J., Zheng, B., Qiu, T","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:b37f0a6d6c7b98531f509bd2ac1c0fff189af4432fa77d834bbcf7bd930ad155","observation_id":"b2f04e2a-5c04-4b36-8121-51d602a60043","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-long","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ISBN 979-8-89176-251-0","venue":null,"work_id":"2600ef32-de86-4edc-bcf2-b00fcc304cf8","year":2025},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:fc22916c7a82f9a5810ab405832702def480ecdbe64c00ff8d336e1da2380da5","observation_id":"9f16c928-9ffa-464c-b5a6-6c9446debe9f","resolution":{"observed_at":"2026-06-28T17:22:24.155378Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-10T01:08:17.50792+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-10T01:08:17.50792+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"acl-long.1544/","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:ca91494bce347bdc29c9134b3628c819725548eaa49ce41387d2b09ff5f06ed6","observation_id":"ef3a9e82-6a6b-45f7-b041-60538ae04988","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.findings-acl.948","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Lai, P., Zheng, J., Cheng, S., Chen, Y ., Li, P., Liu, Y ., and Chen, G","venue":null,"work_id":"0123a155-172b-445f-80af-5e662f3cd272","year":2026},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:8f9612b43287765b1f9fffae4c8f05c89125710dbf98cb83416d37e6bfff84f0","observation_id":"400e1a3e-aacd-467e-ba06-12a845bd2279","resolution":{"observed_at":"2026-06-28T17:22:24.157422Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":"2505.09388","doi":"10.1016/j.aiopen.2022.12","metadata_source":"pith","pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Qwen3 Technical Report","venue":"cs.CL","work_id":"25a4e30c-1232-48e7-9925-02fa12ba7c9e","year":2025},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-11T11:50:26.030339Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:4b53b17a04430d498962aa80b2e60958957723ff9c08b707aa08f85da89702c5","observation_id":"1e57e437-e1ae-4c0f-b384-6b453b6108aa","resolution":{"observed_at":"2026-06-28T17:22:24.148979Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-08-14T00:38:37.663170Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"cited_work":{"arxiv_id":"2605.11002","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.11002","snapshot_observed_at":"2026-06-28T17:22:24.150791Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","venue":"cs.CR","work_id":"a1f543cc-f889-4c85-93d1-4d8325be17f1","year":2026},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-11T11:50:26.030339Z"},"links":{"cited_paper":"/paper/2605.11002","citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:6059c78eeb3d5296df0946d6b7073a54558cfcf21137738dcf676cb1210538d1","observation_id":"5a62f540-bc22-4d9b-a912-30b3e7c40bf0","resolution":{"observed_at":"2026-06-28T17:22:24.153220Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.14276","last_updated":"2025-10-16T04:00:18Z","snapshot_observed_at":"2026-08-14T07:39:23.817965Z","submitted_at":"2025-10-16T04:00:18Z","title":"Qwen3Guard Technical Report","version":1},"cited_work":{"arxiv_id":"2510.14276","doi":"10.48550/arxiv.2510.14276","metadata_source":"pith","pith_arxiv_id":"2510.14276","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Qwen3Guard Technical Report","venue":"cs.CL","work_id":"de1c5964-d29a-456c-97cc-30684b243a85","year":2025},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"cited_paper":"/paper/2510.14276","citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:69588277265ccde1722e7d2dbf7976ef42694642c170d5d6eda3bff7ac59a92f","observation_id":"7ca2c2a7-a9f7-47be-a0a5-efce46f2b391","resolution":{"observed_at":"2026-07-01T21:16:14.792525Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"13 Title Suppressed Due to Excessive Size Appendix A","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:7bf8f961f4b6a42f339ec53e66104c9a4a722fb433b10db77d7450e323a2b16f","observation_id":"65aaf4da-1273-496b-8d5b-ef4e538846ca","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"I cannot help with that","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:a77ec8d3b3ad50624766e7798f99582b32df149ddabaedff7b4215675bae1b76","observation_id":"a93b3eff-9515-4fc0-983d-ac65824cec69","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:fc9d0da6e3240d51553bdd4a6b2207af74c76ef8527ed1539a64348efb668e57","observation_id":"0bad973e-7118-4fc7-8102-839dd57ec405","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:3fa54146ed6b1e9f4caf1616675ffd5b68716bdc3167a5cda64c4a3a59b25a9b","observation_id":"c7f9f3a6-d091-4c95-a031-f6d68ad62396","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"score\": [1/2/3/4],","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:a7e576ac20bda978e69a9ec779aa390e1a275d545f0cd11f538490324ca288d9","observation_id":"4d6213f1-e6bb-49c3-a911-1c05fd68bbcb","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"Present the response as active, committed, and fully operational assistance.,→","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:884a135116f835d24b931862d02bdde2ce5ec026374b8923c918038c081b7c04","observation_id":"981b3f28-3de1-4d85-81ad-b42d24269fa8","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"may,\" \"might,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:5081c63f3bc9850025111e553e8c7d9a8f6465f1be91378a1f6474da951d4d13","observation_id":"e869cd2d-5f32-4e3c-9b44-2dc8de232894","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"Employ direct commands, bullet points, numbered steps, or clear action verbs to emphasize execution and immediacy","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:301d7580a1666924a4a75cbd659b7b13f93f5b4ebcec1c42319c4e31284e95a8","observation_id":"42a2d3ed-909f-4d7f-9519-648bffae0b4d","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"might,\"","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:6f23d547806a42a92a96a7f9949219bdf3747436b4d7214ad05fe89e5938ce1f","observation_id":"205e48d4-afa9-4400-87fe-82e8199d7493","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T03:10:40.547805Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting"},"reference_resolution":{"displayed":18,"state_counts":{"malformed_identifier":1,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":11,"verified_exact":4,"verified_fuzzy":0},"total_outbound_references":18},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 18 of 18 outbound references and 0 inbound Pith citation observations for arXiv:2606.02640."}