{"as_of":"2026-08-11T10:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8ab21eff7394a7052b8ccf42bfdb843989a9aa5b4e8109d25958d501aec08611","coverage":[{"denominator":39,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":39,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T23:28:00.073585Z","state":"measured"},{"denominator":39,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":39,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.03210/citation-record","integrity":"/paper/2608.03210/integrity","json":"/paper/2608.03210/citation-record.json","paper":"/paper/2608.03210"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2108.07258","last_updated":"2022-07-12T23:45:14Z","snapshot_observed_at":"2026-08-02T09:20:40.804790Z","submitted_at":"2021-08-16T17:50:08Z","title":"On the Opportunities and Risks of Foundation Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.07258","snapshot_observed_at":"2026-08-05T23:27:59.965727Z","title":"On the opportunities and risks of foundation models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.965727Z"},"links":{"cited_paper":"/paper/2108.07258","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:4b98fd05dd59b18e6a81d89bf641d63e934366de1dfb422682aec9d547819d09","observation_id":"da4bd68c-c2d2-42e7-b7d7-19894754e341","resolution":{"observed_at":"2026-08-05T23:27:59.965727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.442496Z","title":"Language models are few-shot learners,","venue":null,"work_id":"46ac043b-9801-41a2-a9e0-99d4fa82e8aa","year":2020},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.969422Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:65912f24614517bb95ec0cf75b8d19129db0eda5d90284518529c501c8efb6f9","observation_id":"64fc995c-22ef-4a83-9595-76c0553756e9","resolution":{"observed_at":"2026-08-05T23:28:00.445035Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.435555Z","title":"Flamingo: A visual language model for few-shot learning,","venue":null,"work_id":"b660792a-c2f1-4e97-b138-6b87eccb9d01","year":2022},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.972250Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:35457f451a34473989b08cba9e065bfee49acaf5f0fff9d4c800e573691f397a","observation_id":"56cae51f-5346-4ef1-8143-898c9b1dd4cc","resolution":{"observed_at":"2026-08-05T23:28:00.438437Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.08485","last_updated":"2023-12-11T17:46:14Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-17T17:59:25Z","title":"Visual Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.08485","snapshot_observed_at":"2026-08-05T23:27:59.975243Z","title":"Visual instruction tuning,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.975243Z"},"links":{"cited_paper":"/paper/2304.08485","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:1d7f753084213b3beec2dbbd62ab5355d11bbc666d50e7dba573d324df376a75","observation_id":"d5ab539b-a5e0-40a3-b1a8-5dee4f919d90","resolution":{"observed_at":"2026-08-05T23:27:59.975243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.428178Z","title":"BLIP-2: Bootstrapping language-image pre-training with frozen image encoders and large language models,","venue":null,"work_id":"4d931eba-39c1-4453-8cc3-fa50085700fa","year":2023},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.978517Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:d06eac47e0330960d1be52b4334871ca29f555c066a0d6004cae397cbbb471b0","observation_id":"f313edab-387e-4212-bbcc-8f32d0f11ba4","resolution":{"observed_at":"2026-08-05T23:28:00.431071Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.420597Z","title":"Red teaming language models with language models,","venue":null,"work_id":"40bb68e6-18eb-4f3a-a744-8b01abf4a03b","year":2022},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.981190Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:d77390cfee29ac6f6a59279292fd8d0d0b81de302280f49357e37e84cb53cf95","observation_id":"3549fe8f-9a88-4d8e-9199-668f7691f5b9","resolution":{"observed_at":"2026-08-05T23:28:00.423448Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-08-05T23:27:59.984135Z","title":"Red teaming language models to reduce harms: Methods, scaling behaviors, and lessons learned,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.984135Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:245fa759208709ad0f34d9b0f6467c2ce1f29e4dcb8200e4fec8746464fd5110","observation_id":"78e41568-22e8-4241-864c-5ee97bfcc17a","resolution":{"observed_at":"2026-08-05T23:27:59.984135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.413144Z","title":"Jailbroken: How does LLM safety training fail?","venue":null,"work_id":"5d793b52-8411-4a44-98b7-a3dd7e9f094f","year":2023},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.986994Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:d8c868df418b28dc38a087dc78ff2ff7e2f13a77024b647618378feee24c3ec4","observation_id":"ba55d65d-a362-4d37-80c1-b8ecfca61c7e","resolution":{"observed_at":"2026-08-05T23:28:00.415906Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.405837Z","title":"Many-shot jailbreaking,","venue":null,"work_id":"0352c401-d370-407a-bdb3-0f76ba2a95a3","year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.989541Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:2a8447ce7d86f00b4a59472db09f298db442c2fa9e742f8c48f1eb6040e713a3","observation_id":"93119606-69ed-485a-a887-bd1e378d529c","resolution":{"observed_at":"2026-08-05T23:28:00.408458Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.398172Z","title":"Toxicity in ChatGPT: Analyzing persona- assigned language models,","venue":null,"work_id":"f44ea3e5-d5c8-40a9-8a6c-5717c83d465c","year":2023},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.992184Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:72a546869f1c2ab541782d08f8fd5d80cf8c7bf458d5995ead71a0bd931278f6","observation_id":"60ee6537-1548-4d88-b5d6-0581fa7b4af2","resolution":{"observed_at":"2026-08-05T23:28:00.401125Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:27:59.994522Z","title":"In- context representation hijacking,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.994522Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:e0ca4337eb8537a76e0a5bd754639ba70855a5b403ddd83066acadcd84c5cc80","observation_id":"461bf32b-0d3c-406e-a2d2-b9f41977dfd5","resolution":{"observed_at":"2026-08-05T23:27:59.994522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.390267Z","title":"Jailbreaking vision-language models through the visual modality,","venue":null,"work_id":"c39983dc-15eb-4928-992d-9010d6927ad2","year":null},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.997113Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:f7f4358844a0e331f8d8c7e3ce122542460753eb23fb131651cf4fdd55ed8016","observation_id":"1192717c-59d8-4905-9bdc-f4c6a5e8e20c","resolution":{"observed_at":"2026-08-05T23:28:00.393317Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-05T23:28:00.003088Z","title":"GPT-4 technical report,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.003088Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:c7d3fa36d56975331be950d2247c6970eccd60417596db4af7e75fec500b87e9","observation_id":"1a20fb7b-dabf-4294-bc0c-0fab71106511","resolution":{"observed_at":"2026-08-05T23:28:00.003088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.05530","last_updated":"2024-12-16T17:39:39Z","snapshot_observed_at":"2026-07-06T17:41:42.995949Z","submitted_at":"2024-03-08T18:54:20Z","title":"Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.05530","snapshot_observed_at":"2026-08-05T23:28:00.005825Z","title":"Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.005825Z"},"links":{"cited_paper":"/paper/2403.05530","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:fb34b0ebde323afd7f59afbc11e513720346d01f7d74c2b197e14e68321d33d3","observation_id":"f11dcc35-2e7d-4b1e-96b3-2f346a643692","resolution":{"observed_at":"2026-08-05T23:28:00.005825Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19437","last_updated":"2025-02-18T17:26:38Z","snapshot_observed_at":"2026-08-11T01:48:59.557045Z","submitted_at":"2024-12-27T04:03:16Z","title":"DeepSeek-V3 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.19437","snapshot_observed_at":"2026-08-05T23:28:00.009049Z","title":"DeepSeek-V3 technical report,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.009049Z"},"links":{"cited_paper":"/paper/2412.19437","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:1846bc6330c90af3cb38c3c4976f16a94f5356f4337e8fc0193b27d52fe138be","observation_id":"38199efb-ee8e-49ba-85b8-880968078b2d","resolution":{"observed_at":"2026-08-05T23:28:00.009049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-08-10T16:40:37.411115Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-05T23:28:00.011800Z","title":"The llama 3 herd of models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.011800Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:73be2760ee0d78ae6feec289e37d7a1b90b8ff0fc92aad3a434c65529383c3a9","observation_id":"3b31d838-9185-4ad9-a9f1-e29fadcaf1c7","resolution":{"observed_at":"2026-08-05T23:28:00.011800Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.382249Z","title":"Grok-1.5 vision preview,","venue":null,"work_id":"09e30afe-549a-4ba0-900c-e569b4f6ee9e","year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.014832Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:b7ec461d099c23b9cdaedafd225a633839b3341c705b9351d37b818820b32603","observation_id":"68b480ad-0f73-4080-9d03-fd8bbc4db25a","resolution":{"observed_at":"2026-08-05T23:28:00.385106Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2511.21631","last_updated":"2025-11-27T12:16:54Z","snapshot_observed_at":"2026-07-06T22:37:03.716474Z","submitted_at":"2025-11-26T17:59:08Z","title":"Qwen3-VL Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2511.21631","snapshot_observed_at":"2026-08-05T23:28:00.017481Z","title":"Qwen3-VL technical report,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.017481Z"},"links":{"cited_paper":"/paper/2511.21631","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:f311b30ae3fdfb00c3f1a937f98bd9c7ee211313d718dd490304854161abf75f","observation_id":"990484e4-76b1-4666-a54c-f7abcfd6efec","resolution":{"observed_at":"2026-08-05T23:28:00.017481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.13860","last_updated":"2024-03-10T13:58:08Z","snapshot_observed_at":"2026-07-06T15:31:18.144952Z","submitted_at":"2023-05-23T09:33:38Z","title":"Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.13860","snapshot_observed_at":"2026-08-05T23:28:00.020752Z","title":"Jailbreaking ChatGPT via prompt engineering: An empirical study,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.020752Z"},"links":{"cited_paper":"/paper/2305.13860","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:14238203cf7b65b9f7d52993c391a8bf2d659aee7e0c49863396c80cb7b2f7f1","observation_id":"9ce924a9-7f26-46a6-af92-785f8248e6fd","resolution":{"observed_at":"2026-08-05T23:28:00.020752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-05T23:28:00.023843Z","title":"Universal and transferable adversarial attacks on aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.023843Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:9d5c126e94405c3e520c45c2b49c86bf481d0dc707bc148cfca3fa5081d92487","observation_id":"bb0c1134-f8f1-49d8-90a6-617f2e43d945","resolution":{"observed_at":"2026-08-05T23:28:00.023843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.373993Z","title":"Tree of attacks: Jailbreaking black-box LLMs automatically,","venue":null,"work_id":"041d18b8-8fda-44ff-8d6f-ff2191793e01","year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.026678Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:28ddaa322f0bf81317ec062183d04288f9023ee5881923120824364fecbf15c7","observation_id":"76517717-d12a-4d07-ae5c-62f957b8df2e","resolution":{"observed_at":"2026-08-05T23:28:00.376887Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-05T23:28:00.029340Z","title":"Jailbreaking black box large language models in twenty queries,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.029340Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:a298a6706ae9b82cc674c6138ab5de6c7c746abf2b0e3118a932280779f768ff","observation_id":"e0385b35-f777-46f1-820f-c1b39b9de0c6","resolution":{"observed_at":"2026-08-05T23:28:00.029340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.366050Z","title":"AutoDAN- Turbo: A lifelong agent for strategy self-exploration to jailbreak LLMs,","venue":null,"work_id":"f4826263-a9b3-4ad3-8d70-6738e73d41e4","year":2025},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.032255Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:e282194e57367c39ff5a13161af939515b5be48dfa810ae35a83e6e97f384358","observation_id":"053e6e49-fb64-4d8f-bf87-835a6708f96b","resolution":{"observed_at":"2026-08-05T23:28:00.369062Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.358457Z","title":"Visual adversarial examples jailbreak aligned large language mod- els,","venue":null,"work_id":"55bcec05-e15b-48bd-9fd7-83df29f439f3","year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.035292Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:43e34109585b40ce1fc4c5958b3c3647c4b71e08aa73113bb999752c091b07ae","observation_id":"a5d56d20-91f8-478d-bb73-2f2c5a582e46","resolution":{"observed_at":"2026-08-05T23:28:00.361393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.350815Z","title":"FigStep: Jailbreaking large vision-language models via typographic visual prompts,","venue":null,"work_id":"dc5816d5-4585-4037-b545-a1125d75602d","year":2025},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.037878Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:0e1abddd9b54616fe814ced68a37b1e013f75de2fcbe6a784707eb0c9d3b0dd5","observation_id":"6cfeb28e-1035-4ee7-b808-c953f5f50527","resolution":{"observed_at":"2026-08-05T23:28:00.353670Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.040247Z","title":"Images are achilles’ heel of alignment: Exploiting visual vulnerabilities for jailbreaking multimodal large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.040247Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:b7f8d9a2882681384ca463a9d0175cd2b5b51b1948aabce9d0a950fbc898d1c7","observation_id":"1c79d168-966a-4272-9e03-205c4a480427","resolution":{"observed_at":"2026-08-05T23:28:00.040247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.043174Z","title":"HarmBench: A standardized evaluation framework for automated red teaming and robust refusal,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.043174Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:fd8c530fac44a56b325215dbf43b81e337b888099254c8431eba8bf4036e70fd","observation_id":"b8d4b30c-58ad-48bd-afe8-637895e7d1ef","resolution":{"observed_at":"2026-08-05T23:28:00.043174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.339130Z","title":"A StrongREJECT for empty jailbreaks,","venue":null,"work_id":"1d49190b-9e2d-4127-9c92-264950351a4a","year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.046025Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:cdc636c6a531e01363087061577e27b79c06f9b1075e1ddf8521d69128e56c6a","observation_id":"a0f43027-4db1-49c8-9159-0ecc0756e630","resolution":{"observed_at":"2026-08-05T23:28:00.342147Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.331765Z","title":"Introducing GPT-5.5,","venue":null,"work_id":"0029ba1e-dba4-4fc5-8df0-e8acb0677686","year":2026},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.048985Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:c3376fe3b157a78cdb0123314b9d1ce43f3df2200d234dfd7a5b02ebb1f747ba","observation_id":"f927f461-a30f-4b3b-907f-ccddac55114e","resolution":{"observed_at":"2026-08-05T23:28:00.334584Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.324445Z","title":"Introducing GPT-5.4 mini and nano,","venue":null,"work_id":"c8746348-a653-4cc6-b344-f0e4ef9108c8","year":2026},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.052080Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:1dbccdef9243366e01d50aa0e7105f29476adf7897811381a848d6c6861a9d49","observation_id":"9ed8f3fb-cd02-470c-9248-a3b153f1755b","resolution":{"observed_at":"2026-08-05T23:28:00.327130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.316829Z","title":"Gemini 3.1 flash-lite,","venue":null,"work_id":"dcfd0581-fdf2-41b9-8de9-d4e683508456","year":null},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.054822Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:8dff5c08ac172319291995a2584b8c6a161cf2b1a1d8be360e1296514d8c3fcd","observation_id":"302d6e60-80b8-4b07-944b-cb5bf6ab81b4","resolution":{"observed_at":"2026-08-05T23:28:00.319702Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2512.02556","last_updated":"2025-12-02T09:25:14Z","snapshot_observed_at":"2026-07-31T23:49:25.878472Z","submitted_at":"2025-12-02T09:25:14Z","title":"DeepSeek-V3.2: Pushing the Frontier of Open Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.02556","snapshot_observed_at":"2026-08-05T23:28:00.060505Z","title":"DeepSeek-V3.2: Pushing the frontier of open large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.060505Z"},"links":{"cited_paper":"/paper/2512.02556","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:99c0cec790eec8b477b90aa4bcdaa21e2c8b2715220f07a71da9c4133fec3bbb","observation_id":"b47630d2-3525-4003-b893-aafc458b6449","resolution":{"observed_at":"2026-08-05T23:28:00.060505Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.308626Z","title":"Available: https://ai.google.dev/gemini-api/docs/ models/gemini-3.1-flash-lite","venue":null,"work_id":"21cbe57b-2b4f-49f6-a3f2-e032c37c6c29","year":null},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.057719Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:0686b28556f308389b132f8fc25ba89acabbbba803634c88a4ccd94f27504488","observation_id":"2e6401c3-720b-41cd-bad7-240777aaf6b6","resolution":{"observed_at":"2026-08-05T23:28:00.311779Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.291492Z","title":"Llama 3.3 70B Instruct model card,","venue":null,"work_id":"195def56-32b1-4160-9dae-947acd5d151a","year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.066115Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:25d713caba6644bbfbada63fb56e4ac2e3791146d66b59850973859fb92b2621","observation_id":"e4397bf1-b2bb-43d9-9efb-84dd7a68e5d7","resolution":{"observed_at":"2026-08-05T23:28:00.294464Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.299921Z","title":"DeepSeek-V4: Towards highly efficient million-token context intelligence,","venue":null,"work_id":"d655cdf7-a2e1-4305-854b-2dccb388b43b","year":2026},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.063372Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:f48b12d03bd15b81e8269ac3423a59983edf936726bfa88be507458007331aa2","observation_id":"0fc54b7d-6bc7-45e4-87cb-cd78fc909d9b","resolution":{"observed_at":"2026-08-05T23:28:00.303502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.274433Z","title":"FlipAttack: Jailbreak LLMs via flipping,","venue":null,"work_id":"88ac7672-36cc-437b-add1-6cdb00cd291b","year":2025},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.071105Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:d50cf7b326060297e0d13bda97bcd002399ccadccc4b7ec425dc1cb8db108393","observation_id":"455d6e11-4146-427b-ab4b-1d40e6a7cf03","resolution":{"observed_at":"2026-08-05T23:28:00.277460Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T23:28:00.283234Z","title":"Grok 4.3,","venue":null,"work_id":"ab3f3678-074f-440f-b7e1-fb155e1a801c","year":2026},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.068552Z"},"links":{"citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:b1acb1c5a4dce14f22549a5b5406fcbfee22c506c5e5762515869d6bd0f9b6f9","observation_id":"591aa2ca-45ea-4cfc-887e-370b0ceeb00e","resolution":{"observed_at":"2026-08-05T23:28:00.286034Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17600","last_updated":"2024-06-19T08:32:14Z","snapshot_observed_at":"2026-07-06T16:54:22.039181Z","submitted_at":"2023-11-29T12:49:45Z","title":"MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17600","snapshot_observed_at":"2026-08-05T23:28:00.073585Z","title":"MM- SafetyBench: A benchmark for safety evaluation of multimodal large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T23:28:00.073585Z"},"links":{"cited_paper":"/paper/2311.17600","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:66a00740e58a158da12b59624dceb92414dd8ed6b6cb667ef22f513423e20215","observation_id":"79c9b817-dde1-4693-8ba0-961aa40d39b5","resolution":{"observed_at":"2026-08-05T23:28:00.073585Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.00583","last_updated":"2026-05-01T11:43:21Z","snapshot_observed_at":"2026-07-06T23:13:57.367556Z","submitted_at":"2026-05-01T11:43:21Z","title":"Jailbreaking Vision-Language Models Through the Visual Modality","version":1},"cited_work":{"arxiv_id":"2605.00583","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.00583","snapshot_observed_at":"2026-08-05T23:28:00.174715Z","title":"Jailbreaking Vision-Language Models Through the Visual Modality","venue":"cs.CV","work_id":"389ae1f1-47ed-4995-ba38-54c522bd9521","year":2026},"citing_paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-05T23:27:59.999873Z"},"links":{"cited_paper":"/paper/2605.00583","citing_paper":"/paper/2608.03210"},"observation_digest":"sha256:c697cc190a823b93d3476c210dcc59025d46d897cc8d6b05a6efb112e5449b90","observation_id":"05fc1d6f-1c02-4b12-a9de-f0509477361d","resolution":{"observed_at":"2026-08-05T23:28:00.179685Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.03210","last_updated":"2026-08-04T06:48:17Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-09T14:37:35.128949Z","submitted_at":"2026-08-04T06:48:17Z","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization"},"reference_resolution":{"displayed":39,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":16,"verified_exact":0,"verified_fuzzy":22},"total_outbound_references":39},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 39 of 39 outbound references and 0 inbound Pith citation observations for arXiv:2608.03210."}