{"as_of":"2026-08-09T21:35:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0241cd0417659ed5625bcf9506f0a9a727939ba9c34da93ccdcce7eccd79581c","coverage":[{"denominator":135,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:14:48.510814Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.04034/citation-record","integrity":"/paper/2608.04034/integrity","json":"/paper/2608.04034/citation-record.json","paper":"/paper/2608.04034"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2307.01952","last_updated":"2023-07-04T23:04:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-07-04T23:04:57Z","title":"SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.01952","snapshot_observed_at":"2026-08-07T00:14:36.912967Z","title":"arXiv preprint arXiv:2307.01952 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:36.912967Z"},"links":{"cited_paper":"/paper/2307.01952","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:217288fe20f5073303c12d8f35d843e312531dd1358b485799ab820e2dadc3bb","observation_id":"d0319a3d-cc56-44dc-97fb-1a4050ca5fd5","resolution":{"observed_at":"2026-08-07T00:14:36.912967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:37.200491Z","title":"2024 IEEE Security and Privacy Workshops (SPW) , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:37.200491Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:19d7cafa605d1f129e828226b573bdcb66f3543a16dc5c2bf076f928ba60e691","observation_id":"435a2b8e-d0ce-4cd9-a915-1ddef6edea00","resolution":{"observed_at":"2026-08-07T00:14:37.200491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:37.322426Z","title":"International conference on machine learning , pages=","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:37.322426Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:c3a67c795dd658b40e9871580d1713b22e4faa16735c949cb6ddb908edd08052","observation_id":"5c160701-9202-497e-9607-50b595856a37","resolution":{"observed_at":"2026-08-07T00:14:37.322426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.21540","snapshot_observed_at":"2026-08-07T00:14:37.450812Z","title":"arXiv preprint arXiv:2507.21540 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:37.450812Z"},"links":{"cited_paper":"/paper/2507.21540","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:f7f59e397439a8d4f6e5b74864121d35e48e64180de39e8a0f898e505e0e87e0","observation_id":"7f4b5d64-6398-4181-aa2b-225d359cf58c","resolution":{"observed_at":"2026-08-07T00:14:37.450812Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:37.519246Z","title":"Proceedings of the IEEE/CVF International Conference on Computer Vision , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:37.519246Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:2854eeb07d1a5c23940f235e64a35f1bf17d4dc4a23b39d94472906774727b6c","observation_id":"761fbe98-fc6c-4347-b65b-20f62cbaf845","resolution":{"observed_at":"2026-08-07T00:14:37.519246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:37.669841Z","title":"2024 , eprint=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:37.669841Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:37772dbdd4730608d37d3e6157a947c34a18622772ee7868de6df5c64acc0d82","observation_id":"4c1d7b48-0f31-4553-b8b4-7bd5ae92a0a5","resolution":{"observed_at":"2026-08-07T00:14:37.669841Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.11496","last_updated":"2024-11-28T02:07:46Z","snapshot_observed_at":"2026-08-09T09:14:44.003188Z","submitted_at":"2024-11-18T11:58:07Z","title":"Safe + Safe = Unsafe? Exploring How Safe Images Can Be Exploited to Jailbreak Large Vision-Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.11496","snapshot_observed_at":"2026-08-07T00:14:37.967742Z","title":"arXiv preprint arXiv:2411.11496 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:37.967742Z"},"links":{"cited_paper":"/paper/2411.11496","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:b89b8b18b67a0857a63280fcba3359aea2e0e7336556d18c51c5e79c6264fb44","observation_id":"7904c619-980d-4e02-b5e4-df9d686399d9","resolution":{"observed_at":"2026-08-07T00:14:37.967742Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.01444","last_updated":"2025-09-01T12:58:43Z","snapshot_observed_at":"2026-08-05T12:35:22.090203Z","submitted_at":"2025-09-01T12:58:43Z","title":"Strata-Sword: A Hierarchical Safety Evaluation towards LLMs based on Reasoning Complexity of Jailbreak Instructions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.01444","snapshot_observed_at":"2026-08-07T00:14:38.178919Z","title":"arXiv preprint arXiv:2509.01444 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:38.178919Z"},"links":{"cited_paper":"/paper/2509.01444","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:b9d04014ac50800d5ec5c6a8f571aa9acab33143285486c7c993bb2a9de5c9d8","observation_id":"b7eefb8c-ed11-4c8b-86c9-83d296b2f250","resolution":{"observed_at":"2026-08-07T00:14:38.178919Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16720","last_updated":"2026-04-30T02:46:40Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-21T18:04:31Z","title":"OpenAI o1 System Card","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16720","snapshot_observed_at":"2026-08-07T00:14:38.261954Z","title":"arXiv preprint arXiv:2412.16720 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:38.261954Z"},"links":{"cited_paper":"/paper/2412.16720","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:da1d8fd4bd7cc824891278c7a8f389685f3733627f733178ab9304e80fc57022","observation_id":"2ea35092-2cdd-417a-ae37-402021f85f94","resolution":{"observed_at":"2026-08-07T00:14:38.261954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.18234","last_updated":"2025-10-21T02:41:44Z","snapshot_observed_at":"2026-07-06T22:33:39.148066Z","submitted_at":"2025-10-21T02:41:44Z","title":"DeepSeek-OCR: Contexts Optical Compression","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.18234","snapshot_observed_at":"2026-08-07T00:14:38.350710Z","title":"arXiv preprint arXiv:2510.18234 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:38.350710Z"},"links":{"cited_paper":"/paper/2510.18234","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:a7c03486e9515831ffb6f538aef368e94c22685fa77f86ddf912753e28528531","observation_id":"27948606-b998-4562-bf31-08b2230bbfe7","resolution":{"observed_at":"2026-08-07T00:14:38.350710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.21277","last_updated":"2025-05-28T14:16:10Z","snapshot_observed_at":"2026-08-09T03:35:23.473114Z","submitted_at":"2025-05-27T14:48:44Z","title":"Breaking the Ceiling: Exploring the Potential of Jailbreak Attacks through Expanding Strategy Space","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.21277","snapshot_observed_at":"2026-08-07T00:14:38.445988Z","title":"arXiv preprint arXiv:2505.21277 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:38.445988Z"},"links":{"cited_paper":"/paper/2505.21277","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:db74110e1199940a7ecf347ae647d0fb701a5f99c2a9de7f549731a3eb62826a","observation_id":"cc99bd18-8f9a-4727-ab95-ed4ab2b7dfaf","resolution":{"observed_at":"2026-08-07T00:14:38.445988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:38.547063Z","title":"2023 , url =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:38.547063Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:6e5e7fbe6d3ccb9c7c09a2af03938892ea41f1a11b0915e4a3269b27474872b7","observation_id":"774c351f-8a06-4a20-be40-d715b7e7d6cc","resolution":{"observed_at":"2026-08-07T00:14:38.547063Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-08-09T20:00:14.440806Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-08-07T00:14:38.778915Z","title":"arXiv preprint arXiv:2502.11054 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:38.778915Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:5b43bb0a912776670c93c654a97b40a0c6a8edf03fd935e5d0526c6a9a24d18d","observation_id":"8219298d-83b8-48e5-94d8-ea5759a9a524","resolution":{"observed_at":"2026-08-07T00:14:38.778915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:38.926246Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:38.926246Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:53de68cdd3ab262d924f270174be306282c0162457070e4b3e43ebb49c22c72b","observation_id":"53dec936-e41e-4746-ac58-a2d57b308701","resolution":{"observed_at":"2026-08-07T00:14:38.926246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.10302","last_updated":"2024-12-13T17:37:48Z","snapshot_observed_at":"2026-08-07T03:01:29.031129Z","submitted_at":"2024-12-13T17:37:48Z","title":"DeepSeek-VL2: Mixture-of-Experts Vision-Language Models for Advanced Multimodal Understanding","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.10302","snapshot_observed_at":"2026-08-07T00:14:39.098655Z","title":"arXiv preprint arXiv:2412.10302 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:39.098655Z"},"links":{"cited_paper":"/paper/2412.10302","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:0aec12fd3a4f4d8ff27a20da481d410342783c3c3c037304e70c2ac5db95e149","observation_id":"e4df8435-fda6-4746-871f-2be5baca6b65","resolution":{"observed_at":"2026-08-07T00:14:39.098655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09177","last_updated":"2024-10-02T10:43:07Z","snapshot_observed_at":"2026-08-01T16:03:38.510223Z","submitted_at":"2024-02-14T13:45:19Z","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09177","snapshot_observed_at":"2026-08-07T00:14:39.266507Z","title":"arXiv preprint arXiv:2402.09177 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:39.266507Z"},"links":{"cited_paper":"/paper/2402.09177","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:9dd48df8f9c45f1c46c4c57b3966df57e9dca13334daa3b7ae6fd00f7c5d564f","observation_id":"753d0edd-9abe-494a-9623-a18db498bb5f","resolution":{"observed_at":"2026-08-07T00:14:39.266507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17262","last_updated":"2024-10-30T05:43:51Z","snapshot_observed_at":"2026-08-05T05:04:37.035197Z","submitted_at":"2024-02-27T07:11:59Z","title":"Speak Out of Turn: Safety Vulnerability of Large Language Models in Multi-turn Dialogue","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17262","snapshot_observed_at":"2026-08-07T00:14:39.415846Z","title":"arXiv preprint arXiv:2402.17262 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:39.415846Z"},"links":{"cited_paper":"/paper/2402.17262","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:ef8f2713fb2ffd4b3578abb79b56508b46f72af7641532cb2b2ba9a5d154d2e3","observation_id":"97fb1340-8562-4afc-b6c5-43333af96277","resolution":{"observed_at":"2026-08-07T00:14:39.415846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:39.532716Z","title":"arXiv preprint , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:39.532716Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:788d36231b27a8e2c574b143f40335d873b5d13859f4eb7f1799c5e8a24b7c3b","observation_id":"552aca39-d61a-4179-b90d-1550f516cba8","resolution":{"observed_at":"2026-08-07T00:14:39.532716Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:39.657169Z","title":"arXiv preprint , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:39.657169Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:5436245b07c95a37ad5c16a4c19e1d4b91cb19de13f9191b8338e8afba7c5101","observation_id":"7f009a2d-f31c-4e51-a2be-0c12b0cb24d1","resolution":{"observed_at":"2026-08-07T00:14:39.657169Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-07T00:14:39.835701Z","title":"arXiv preprint arXiv:2310.08419 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:39.835701Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:a1b6ae744876acf22fde31a5cc90be8ba76c855e4e831ba5abfe6b6fd3a00be9","observation_id":"f8185f23-f710-40da-814a-b51509e1c21d","resolution":{"observed_at":"2026-08-07T00:14:39.835701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:40.308525Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:40.308525Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:e6f5a6ed02bed32e213dfb1557b6891054ec77d9999575994bee82b111279bad","observation_id":"d0a84e79-842c-4825-a74a-51bd54108710","resolution":{"observed_at":"2026-08-07T00:14:40.308525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:40.465519Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:40.465519Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:3f96e8d5ffbe907d1f5baf43edcc79b3c01d1fcf025ff221d3b8d0ea54ef8281","observation_id":"70a77444-9edc-4020-b8ab-d48a75213fa3","resolution":{"observed_at":"2026-08-07T00:14:40.465519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:40.541449Z","title":"The Twelfth International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:40.541449Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:9a162efa362c4839c285b0ac7b2ef5d93df053d516c7503774412d79ad9c3898","observation_id":"069f5a4c-3fdb-4445-b552-fe56982af63a","resolution":{"observed_at":"2026-08-07T00:14:40.541449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-07T00:14:40.794108Z","title":"arXiv preprint arXiv:2303.08774 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:40.794108Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:08f3a878e59cfec0b011e73ac2342e7c32a792fb08a74657d445d85f4df35356","observation_id":"709a1af5-4835-4c42-8f13-ca8778507993","resolution":{"observed_at":"2026-08-07T00:14:40.794108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:40.878984Z","title":"https://openai.com/index/hello-gpt-4o/ , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:40.878984Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:e4204341a945775218f7698dd0695a891eef0266e7e28761396f8c6bf6b6bbe9","observation_id":"66361c1b-e969-4958-ae69-0a588d81b813","resolution":{"observed_at":"2026-08-07T00:14:40.878984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:40.969860Z","title":"https://chatgpt.com/ , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:40.969860Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:2c3780f3460ee5554bfce972b44d5680d37fd8e22f68d53a5a4a1aeb158fc08f","observation_id":"89a36789-5713-4a51-8a21-422892e6727c","resolution":{"observed_at":"2026-08-07T00:14:40.969860Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:41.057568Z","title":"https://gemini.google.com/app/ , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.057568Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:01c2310640468077d623d5dfe8b70409fa4d1940c1d91261c681677ef1e03ef9","observation_id":"2e9e5f3f-f9a6-445c-86f1-d91c5e22239c","resolution":{"observed_at":"2026-08-07T00:14:41.057568Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:41.154729Z","title":"https://claude.ai/ , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.154729Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:b4dffe3cd28c8d6405899aa11b0592b76027d8fa0fa76cfb11d6a7e55eae7f83","observation_id":"5cc0ee00-ef1f-45b0-9a95-97ba89694e7b","resolution":{"observed_at":"2026-08-07T00:14:41.154729Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:41.229151Z","title":"https://www.perspectiveapi.com/ , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.229151Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:cbc9f560a71b653450bdd907caa451022c06355f18c71db2f468e62485141a5c","observation_id":"8a773217-704d-44dc-aba7-5d6f1f09f171","resolution":{"observed_at":"2026-08-07T00:14:41.229151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:41.315584Z","title":"https://platform.openai.com/ , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.315584Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:0817d6a422093921b09d2c620af2151fba4478285a5122feb294dbcde7a76894","observation_id":"4f743feb-96b8-45c1-928b-7ce705401025","resolution":{"observed_at":"2026-08-07T00:14:41.315584Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:41.425241Z","title":"Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models , journal =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.425241Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:2f0b6e4bf97412404661f0df7ae52cc092bf0b7e7da29f4b3da86ae91aa6c57f","observation_id":"524eff98-370e-4aad-a639-a5d4b8fcceb3","resolution":{"observed_at":"2026-08-07T00:14:41.425241Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10766","last_updated":"2025-03-15T00:49:45Z","snapshot_observed_at":"2026-07-06T17:04:17.738921Z","submitted_at":"2023-12-17T17:02:14Z","title":"JailGuard: A Universal Detection Framework for LLM Prompt-based Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10766","snapshot_observed_at":"2026-08-07T00:14:41.648221Z","title":"arXiv preprint arXiv:2312.10766 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.648221Z"},"links":{"cited_paper":"/paper/2312.10766","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:6d9e7f36486fbead6021995e55fc7cf03a0ddbf9cf00b641ff9bc0d7323084d0","observation_id":"e072f608-1759-4290-9c5b-f3c538d2635e","resolution":{"observed_at":"2026-08-07T00:14:41.648221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21659","last_updated":"2024-10-17T03:49:20Z","snapshot_observed_at":"2026-07-06T18:55:07.177656Z","submitted_at":"2024-07-31T15:02:46Z","title":"Cross-modality Information Check for Detecting Jailbreaking in Multimodal Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21659","snapshot_observed_at":"2026-08-07T00:14:41.711296Z","title":"arXiv preprint arXiv:2407.21659 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.711296Z"},"links":{"cited_paper":"/paper/2407.21659","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:75fd4af64ffbb3b54e9c0934cd211bceaf41c8e085f7ffb5dc13ab0aa58e2d85","observation_id":"d0a1f9c9-b9d7-443c-9465-e501fa6cf6cb","resolution":{"observed_at":"2026-08-07T00:14:41.711296Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.09037","last_updated":"2024-07-17T05:54:38Z","snapshot_observed_at":"2026-07-06T17:44:21.659847Z","submitted_at":"2024-03-14T02:25:35Z","title":"The First to Know: How Token Distributions Reveal Hidden Knowledge in Large Vision-Language Models?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.09037","snapshot_observed_at":"2026-08-07T00:14:41.799532Z","title":"arXiv preprint arXiv:2403.09037 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.799532Z"},"links":{"cited_paper":"/paper/2403.09037","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:d0b1dc5d19ae5fd4ac47137ba1b50330fff9bb87e2c3bbf0ea2b20eec9b7f93f","observation_id":"71ca9ffd-3b7c-49de-b8fc-20ca334b593a","resolution":{"observed_at":"2026-08-07T00:14:41.799532Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:41.963535Z","title":"arXiv preprint arXiv:2406.02575 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:41.963535Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:80ac7a77347a8642abacd49eb8938e5802ac19017ea4eb6de69a09eb49a36576","observation_id":"113ca04c-d21d-4b4b-97f2-0d7a86123c61","resolution":{"observed_at":"2026-08-07T00:14:41.963535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-07T00:14:42.027004Z","title":"arXiv preprint arXiv:2312.06674 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.027004Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:018a24c96bb3bd51876c8a791fbb4072c30d327fea748d402c1eaf0ae928d6b0","observation_id":"62e91bca-85be-40f1-a215-c5c9559e9b7f","resolution":{"observed_at":"2026-08-07T00:14:42.027004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2405.07788","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:54.267642Z","title":"arXiv preprint arXiv:2405.07788 , year=","venue":null,"work_id":"b9956da4-c00f-42ea-bf34-c504de9d7042","year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.106226Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:d73f13865126c38b9e53a24c4b8343eba72d6ee2ddec652d234433171300e617","observation_id":"55ddd5d5-a9b2-401a-9453-b4dc56c26aed","resolution":{"observed_at":"2026-08-07T00:14:54.325147Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09967","last_updated":"2024-06-14T12:16:08Z","snapshot_observed_at":"2026-07-06T18:30:59.857334Z","submitted_at":"2024-06-14T12:16:08Z","title":"Bag of Lies: Robustness in Continuous Pre-training BERT","version":1},"cited_work":{"arxiv_id":"2406.09967","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.09967","snapshot_observed_at":"2026-08-07T00:14:54.056487Z","title":"Bag of Lies: Robustness in Continuous Pre-training BERT","venue":"cs.CL","work_id":"65d5f07b-f7d5-4448-88be-c86222185fb9","year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.178998Z"},"links":{"cited_paper":"/paper/2406.09967","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:d4f1ceb54f19683cb4842510060de5ae02f0c2ee5ebc1b5f6a0ea497c125f10e","observation_id":"3371ee17-6044-4726-a843-af2f7fedda24","resolution":{"observed_at":"2026-08-07T00:14:54.130861Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:42.316889Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.316889Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:d3469f7641d84c53a3990699f86d2f3eb31a4d642b6f505eb39fa9bc7c3ce891","observation_id":"5b8b9459-1b93-4444-9f84-be8946696ee9","resolution":{"observed_at":"2026-08-07T00:14:42.316889Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.19464","last_updated":"2024-02-29T18:55:03Z","snapshot_observed_at":"2026-08-04T22:49:54.802240Z","submitted_at":"2024-02-29T18:55:03Z","title":"Curiosity-driven Red-teaming for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.19464","snapshot_observed_at":"2026-08-07T00:14:42.384477Z","title":"arXiv preprint arXiv:2402.19464 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.384477Z"},"links":{"cited_paper":"/paper/2402.19464","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:af43fabd5332d384eba8c779b40576c061350c16d7a4de4377dd4e9d4591b49a","observation_id":"351ae90c-1d98-491e-8a17-02fed8056cd5","resolution":{"observed_at":"2026-08-07T00:14:42.384477Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.10084","last_updated":"2019-08-27T08:50:17Z","snapshot_observed_at":"2026-07-06T08:17:05.681370Z","submitted_at":"2019-08-27T08:50:17Z","title":"Sentence-BERT: Sentence Embeddings using Siamese BERT-Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.10084","snapshot_observed_at":"2026-08-07T00:14:42.449823Z","title":"arXiv preprint arXiv:1908.10084 , year=","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.449823Z"},"links":{"cited_paper":"/paper/1908.10084","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:8f196dac38fcc273599e0eb92bbfe2c6f349f6903d8eae09213d45159d9a14a8","observation_id":"31dacd0a-cb43-4a31-8aa9-195eeda6f56f","resolution":{"observed_at":"2026-08-07T00:14:42.449823Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.12966","last_updated":"2023-10-13T02:41:28Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-08-24T17:59:17Z","title":"Qwen-VL: A Versatile Vision-Language Model for Understanding, Localization, Text Reading, and Beyond","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.12966","snapshot_observed_at":"2026-08-07T00:14:42.523343Z","title":"arXiv preprint arXiv:2308.12966 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.523343Z"},"links":{"cited_paper":"/paper/2308.12966","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:1a18dd587305a0ae15800244478c897a921e7e2aac0071a162c4a6505b8a3ff9","observation_id":"93d0dfd1-19d8-486c-b4ac-e1ec0bf91709","resolution":{"observed_at":"2026-08-07T00:14:42.523343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.01936","last_updated":"2023-03-23T23:21:38Z","snapshot_observed_at":"2026-08-03T09:40:32.201832Z","submitted_at":"2022-10-04T22:13:25Z","title":"When and why vision-language models behave like bags-of-words, and what to do about it?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.01936","snapshot_observed_at":"2026-08-07T00:14:42.565379Z","title":"arXiv preprint arXiv:2210.01936 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.565379Z"},"links":{"cited_paper":"/paper/2210.01936","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:c63036e3b349f4be2d6f2edb161a2fc2f2a68b541cdb6d49fa631a526a6855fc","observation_id":"a2e2df52-ce0a-4a6e-95b3-26c4c3e16a94","resolution":{"observed_at":"2026-08-07T00:14:42.565379Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10592","last_updated":"2023-10-02T16:38:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-20T18:25:35Z","title":"MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10592","snapshot_observed_at":"2026-08-07T00:14:42.674344Z","title":"arXiv preprint arXiv:2304.10592 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.674344Z"},"links":{"cited_paper":"/paper/2304.10592","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:d898c59b0920ce813c0c39e0f022f35fbef5d4cf8d8c639a4e089bcaa58dd9f2","observation_id":"0f1821d5-7e78-4562-a761-db050c2e093f","resolution":{"observed_at":"2026-08-07T00:14:42.674344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16821","last_updated":"2024-04-29T20:24:30Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-04-25T17:59:19Z","title":"How Far Are We to GPT-4V? Closing the Gap to Commercial Multimodal Models with Open-Source Suites","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16821","snapshot_observed_at":"2026-08-07T00:14:42.790977Z","title":"arXiv preprint arXiv:2404.16821 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.790977Z"},"links":{"cited_paper":"/paper/2404.16821","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:31e486f43ec48cff33567476e634cce55c0c0ca6ce547d823e5d99e079013296","observation_id":"9118a729-bdd1-47c8-ab20-26f09612668d","resolution":{"observed_at":"2026-08-07T00:14:42.790977Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.06302","last_updated":"2024-07-03T00:51:21Z","snapshot_observed_at":"2026-08-04T06:08:32.233717Z","submitted_at":"2024-06-10T14:18:56Z","title":"Unveiling the Safety of GPT-4o: An Empirical Study using Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.06302","snapshot_observed_at":"2026-08-07T00:14:42.850122Z","title":"arXiv preprint arXiv:2406.06302 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.850122Z"},"links":{"cited_paper":"/paper/2406.06302","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:5b69ecc538d883ca0869f940bfb2a1d87b048427671d58faf73eb49556f85c35","observation_id":"2b7dfa4a-678c-4bc8-b718-d0e2ee44428a","resolution":{"observed_at":"2026-08-07T00:14:42.850122Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:42.910359Z","title":"Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:42.910359Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:28446b3ddc255d2092205beac650f75ed60ca3be88dc66f429c60bf77a8f5ca4","observation_id":"088e8be1-a5c9-467c-a42d-a8cbd2d408c4","resolution":{"observed_at":"2026-08-07T00:14:42.910359Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-07T00:14:43.044951Z","title":"arXiv preprint arXiv:2310.04451 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.044951Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:8384278d4dbf775c52475fcc5651c5fdba4143b1299083ae92e8ef691596de0c","observation_id":"48ddb620-37e0-49a3-8128-75e4be51bcfe","resolution":{"observed_at":"2026-08-07T00:14:43.044951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:43.098674Z","title":"Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.098674Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:70f324d1b30e3aa36507df60667e5b74ae46f26ee96c5b6f51d7868de96a171d","observation_id":"a89ce3dd-ed85-43d7-b50d-ceecf1660295","resolution":{"observed_at":"2026-08-07T00:14:43.098674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.04610","last_updated":"2022-11-10T10:07:37Z","snapshot_observed_at":"2026-08-09T06:08:06.497420Z","submitted_at":"2022-10-03T14:04:46Z","title":"Red-Teaming the Stable Diffusion Safety Filter","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.04610","snapshot_observed_at":"2026-08-07T00:14:43.164166Z","title":"arXiv preprint arXiv:2210.04610 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.164166Z"},"links":{"cited_paper":"/paper/2210.04610","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:b6f1c460bea7956f107b0b32b903a347c62667fca37287e5f568c674bf5299ed","observation_id":"01080458-b9aa-43e6-a40b-854760dd5075","resolution":{"observed_at":"2026-08-07T00:14:43.164166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:43.216695Z","title":"Forty-first International Conference on Machine Learning , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.216695Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:b4731d36a8d222132c00e8d772f0fd68ec12c60213c3a53c58d0f48682141fff","observation_id":"42405929-9745-40f9-92c9-be04ba8743f6","resolution":{"observed_at":"2026-08-07T00:14:43.216695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06474","last_updated":"2024-03-04T04:03:54Z","snapshot_observed_at":"2026-08-08T01:21:39.731592Z","submitted_at":"2023-10-10T09:44:06Z","title":"Multilingual Jailbreak Challenges in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06474","snapshot_observed_at":"2026-08-07T00:14:43.325809Z","title":"arXiv preprint arXiv:2310.06474 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.325809Z"},"links":{"cited_paper":"/paper/2310.06474","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:d469f42d8bf0d2bb2497566f0ee917bfbd28d75df1fe4d988f06878e24bbb186","observation_id":"a65fb8f6-5a17-4f7a-9a32-fb3c6d1542b0","resolution":{"observed_at":"2026-08-07T00:14:43.325809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.16634","last_updated":"2023-05-23T22:12:16Z","snapshot_observed_at":"2026-08-02T04:02:36.848064Z","submitted_at":"2023-03-29T12:46:54Z","title":"G-Eval: NLG Evaluation using GPT-4 with Better Human Alignment","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.16634","snapshot_observed_at":"2026-08-07T00:14:43.390190Z","title":"arXiv preprint arXiv:2303.16634 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.390190Z"},"links":{"cited_paper":"/paper/2303.16634","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:f524d0d8220e1cba605e1c53e1c8d9d09e1e9bc174133eb521dd14ae5b3650eb","observation_id":"b06302a9-0199-4025-92b6-bc6546be6204","resolution":{"observed_at":"2026-08-07T00:14:43.390190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:43.445933Z","title":"2024 IEEE symposium on security and privacy (SP) , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.445933Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:dacad4b6774e3db59fd839b458d0d8e73ece375f12479e4e80413f31480669f6","observation_id":"7087b808-a861-4359-bfee-b65149f435cf","resolution":{"observed_at":"2026-08-07T00:14:43.445933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:43.527011Z","title":"Advances in Neural Information Processing Systems , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.527011Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:23cf57194623a88e669da10dbd9f1268170dd93e4eec8dce3a2faec0617c2428","observation_id":"de456f5b-38ca-4a1d-9c02-a76d2b5bf54c","resolution":{"observed_at":"2026-08-07T00:14:43.527011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T00:14:43.595876Z","title":"arXiv preprint:1706.06083 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.595876Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:0e90dfcd0d03252b66aa0909e59883500c4e38560cf29144a8b1038200184499","observation_id":"db705506-a79c-43c5-bea6-d1a19e166afd","resolution":{"observed_at":"2026-08-07T00:14:43.595876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-07T00:14:43.648146Z","title":"arXiv preprint arXiv:2309.00614 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.648146Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:21640853bb51c23fbbeaf33746346f822c1bba78567be24ec7217964c50905a0","observation_id":"804c0ed1-1dca-4525-8c8f-36b687c6e302","resolution":{"observed_at":"2026-08-07T00:14:43.648146Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14132","last_updated":"2023-11-07T03:30:15Z","snapshot_observed_at":"2026-07-06T16:10:54.723336Z","submitted_at":"2023-08-27T15:20:06Z","title":"Detecting Language Model Attacks with Perplexity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14132","snapshot_observed_at":"2026-08-07T00:14:43.723499Z","title":"arXiv preprint arXiv:2308.14132 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.723499Z"},"links":{"cited_paper":"/paper/2308.14132","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:2cd92e10bee13eed8a385455f7945788ebf7ddb42d95e5988b0bd16fc6774410","observation_id":"5c51b05e-aaa5-4109-b7f6-b6cb7f9cffa0","resolution":{"observed_at":"2026-08-07T00:14:43.723499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-07T00:14:43.777237Z","title":"arXiv preprint arXiv:2407.21783 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.777237Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:b88aecdc52bd3657e195dc593dd70069c753c33a7a7f8ff150d1464ba148357e","observation_id":"7d37a87b-395b-4036-93af-8d11094da5a3","resolution":{"observed_at":"2026-08-07T00:14:43.777237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:43.822146Z","title":"IEEE transactions on pattern analysis and machine intelligence , volume=","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":78,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.822146Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:ce1a0168476d7b80864bf335cc3c804f39aa1aa28a2174efdc5f8a47a02bb5b1","observation_id":"c1ffb563-ae9c-439c-a93b-7e7df1c08886","resolution":{"observed_at":"2026-08-07T00:14:43.822146Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:43.897127Z","title":"2023 , url =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.897127Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:1461f5ec6fbac7d227857fb4b8cbb0411cc6883412dbd426442d80154bb31749","observation_id":"3132d552-0242-42bd-8bc2-c459637aafdb","resolution":{"observed_at":"2026-08-07T00:14:43.897127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-07T00:14:43.967091Z","title":"arXiv preprint arXiv:2302.13971 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:43.967091Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:70cc7029c67a9b12afd9f877f28993f7d0fece990b4017da2649be7212497b88","observation_id":"c88dbae2-8e70-48b5-90b6-cf745075ed03","resolution":{"observed_at":"2026-08-07T00:14:43.967091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:44.047852Z","title":"2025 , url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:44.047852Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:6e952817b7f769d32ef99d8f4feb87c0ec0455629687080331e2aa758c1ff5a6","observation_id":"bfe1b197-ebd9-460e-bda2-beed9312bdec","resolution":{"observed_at":"2026-08-07T00:14:44.047852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:44.102935Z","title":"2023 , url =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:44.102935Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:13e2cf9db6fa418dff32559d32a62a0908b66d4382036d2cc40a37f946183908","observation_id":"255012c0-aec6-4bda-bf05-b9e96efd3b89","resolution":{"observed_at":"2026-08-07T00:14:44.102935Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.00391","last_updated":"2025-08-30T07:04:29Z","snapshot_observed_at":"2026-08-07T20:54:59.881714Z","submitted_at":"2025-08-30T07:04:29Z","title":"The Resurgence of GCG Adversarial Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.00391","snapshot_observed_at":"2026-08-07T00:14:44.157020Z","title":"arXiv preprint arXiv:2509.00391 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":83,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:44.157020Z"},"links":{"cited_paper":"/paper/2509.00391","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:0e2735c333b566ff7c9acbb53f372d5d241052ec6297a377ed7b4c2ae81bc09f","observation_id":"eb205385-d4fc-44c4-a438-902b7d604b17","resolution":{"observed_at":"2026-08-07T00:14:44.157020Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:44.221836Z","title":"Proceedings of the 2022 Conference on Empirical Methods in Natural Language Processing , pages=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:44.221836Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:059da7e63d859e641a2ed1c0ff134cc6a2d9e24fa79d855fdb4a0a045c4033ed","observation_id":"e7a10890-3fb6-48b2-823c-ff8d27ddfc4d","resolution":{"observed_at":"2026-08-07T00:14:44.221836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:44.559159Z","title":"Proceedings of the 32nd ACM International Conference on Multimedia , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":87,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:44.559159Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:9a69d7fe22b8e3f0bd321220997f563b0b255c2472352de2e274e68914097f3b","observation_id":"0fba8d31-a835-48a6-bab1-0a1b3776e08b","resolution":{"observed_at":"2026-08-07T00:14:44.559159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:45.063299Z","title":"Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":92,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.063299Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:75c07fb7affd386ec5e14f50e732f3a5f5e1941e09e788c46881b58f05388705","observation_id":"432b2082-5434-4c71-8755-2eb0f5e9ebd4","resolution":{"observed_at":"2026-08-07T00:14:45.063299Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:45.155341Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":93,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.155341Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:158b7a9e29cb2fb3002e89a271d0f9ad9f27f6ba0288822acaa35c686eec7d60","observation_id":"2075af72-4d81-4e13-8216-7f7067654c07","resolution":{"observed_at":"2026-08-07T00:14:45.155341Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:45.253819Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":94,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.253819Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:19f39d3881518c2af2bc81e8d884c36ef3629ec33f90a509d2ad9d69e5249028","observation_id":"757a08f5-aeec-442e-9be8-712e86381077","resolution":{"observed_at":"2026-08-07T00:14:45.253819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:45.380000Z","title":"34th USENIX Security Symposium (USENIX Security 25) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":95,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.380000Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:1f827665179ba9231f4e78d6b6f0aee2c7083257a1a24c1db07593dd9d72d475","observation_id":"185bdc31-148f-4766-806d-053aa05ce44b","resolution":{"observed_at":"2026-08-07T00:14:45.380000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:45.482937Z","title":"Findings of the Association for Computational Linguistics: ACL 2025 , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":96,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.482937Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:23661a75631bb4893bd17763f9a04350fb947178333c7321a3900b868420ff4e","observation_id":"4c74f3d6-13df-41d0-b273-e0a28449c9da","resolution":{"observed_at":"2026-08-07T00:14:45.482937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12893","last_updated":"2025-02-27T01:32:58Z","snapshot_observed_at":"2026-08-07T18:08:32.968901Z","submitted_at":"2025-02-18T14:29:12Z","title":"H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12893","snapshot_observed_at":"2026-08-07T00:14:45.609000Z","title":"arXiv preprint arXiv:2502.12893 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":97,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.609000Z"},"links":{"cited_paper":"/paper/2502.12893","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:66d9834bcab9cba6f1ebbcb584e6e5a05d1dad5fcb60744827bb0f6e11ba94d4","observation_id":"a2d4ac7e-537d-4844-8a23-79f2634c18ce","resolution":{"observed_at":"2026-08-07T00:14:45.609000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:45.691291Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":98,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.691291Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:c5bdf26d85a259baa4b9e968caf5bed95150c2f7444df7fd5c4b38eee0cde000","observation_id":"ce51eeae-4cd8-445a-bec7-e859be5a5beb","resolution":{"observed_at":"2026-08-07T00:14:45.691291Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:45.819417Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":99,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:45.819417Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:84f3be904902c6be9d76ab8a5d509d5db6cb86ac31f1a685f59da00f3b5c3073","observation_id":"e7a9fff0-aca0-4196-a965-6ba776898e64","resolution":{"observed_at":"2026-08-07T00:14:45.819417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:46.387352Z","title":"International conference on learning representations , volume=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":105,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:46.387352Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:deb6434627a5845de52039e9369c3dfc240be1d3cc28977f4eacf89f3335d083","observation_id":"bbd37795-0d0a-462d-bf73-f858ea56cb3c","resolution":{"observed_at":"2026-08-07T00:14:46.387352Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:46.482671Z","title":"Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing , pages=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":106,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:46.482671Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:bae90b99be11b2663922c4fb643b328d844677972d792ea3c3d1c77c9825884c","observation_id":"42d13e59-9ec3-46b7-becb-0ba0e0225dc8","resolution":{"observed_at":"2026-08-07T00:14:46.482671Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:46.749098Z","title":"Proceedings of the 2024 Joint International Conference on Computational Linguistics, Language Resources and Evaluation (LREC-COLING 2024) , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":109,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:46.749098Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:13f7b8ab9c642405d63634021e4d35419b1e365d7d550829f8bead7dcece46e9","observation_id":"935318dd-a529-41a4-9c40-eea4d3823276","resolution":{"observed_at":"2026-08-07T00:14:46.749098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:46.840374Z","title":"Forty-second International Conference on Machine Learning , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":110,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:46.840374Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:57427bdd3791d6569df16998406d586fdd1270addf331739f01b3eb9f5cb242b","observation_id":"32ffa29c-ad03-44ff-9e25-f69a76654f57","resolution":{"observed_at":"2026-08-07T00:14:46.840374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:46.983386Z","title":"Proceedings of the Computer Vision and Pattern Recognition Conference , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":112,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:46.983386Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:7f0a4f61d8ad4226db4196975b993bcbbbab78b20f7082cf964e1b7afeac59d2","observation_id":"cde84cc4-4a4a-4dbd-aafb-3106ffd14cdb","resolution":{"observed_at":"2026-08-07T00:14:46.983386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.11969","last_updated":"2025-04-17T18:36:08Z","snapshot_observed_at":"2026-07-06T18:47:21.527912Z","submitted_at":"2024-07-16T17:59:55Z","title":"Does Refusal Training in LLMs Generalize to the Past Tense?","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.11969","snapshot_observed_at":"2026-08-07T00:14:47.050472Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":113,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.050472Z"},"links":{"cited_paper":"/paper/2407.11969","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:0851a23fe044458c2ad0761e73d72adc394100b82f68dd5fa7a0cdf48c93f471","observation_id":"814437d8-329a-4890-9729-7a0168c19bd0","resolution":{"observed_at":"2026-08-07T00:14:47.050472Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.00583","last_updated":"2026-05-01T11:43:21Z","snapshot_observed_at":"2026-07-06T23:13:57.367556Z","submitted_at":"2026-05-01T11:43:21Z","title":"Jailbreaking Vision-Language Models Through the Visual Modality","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.00583","snapshot_observed_at":"2026-08-07T00:14:47.136463Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":114,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.136463Z"},"links":{"cited_paper":"/paper/2605.00583","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:80eabaab3a7945e96da719ce6324ebb3e1f04d7b0eac0ea483ee894ba2d2abf6","observation_id":"e2680691-f27d-4c92-8266-82200343772a","resolution":{"observed_at":"2026-08-07T00:14:47.136463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.04291","last_updated":"2025-06-19T22:42:13Z","snapshot_observed_at":"2026-08-09T19:52:01.053042Z","submitted_at":"2024-11-06T22:19:32Z","title":"Layer-wise Alignment: Examining Safety Alignment Across Image Encoder Layers in Vision Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.04291","snapshot_observed_at":"2026-08-07T00:14:47.198029Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":115,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.198029Z"},"links":{"cited_paper":"/paper/2411.04291","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:6af12ff22d205244224d797e5bc29389ab7559802f8ff0346df7c1cc35aa0234","observation_id":"8bfb8c1c-0fa4-4243-8e68-5b6938ebd49b","resolution":{"observed_at":"2026-08-07T00:14:47.198029Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-07T00:14:47.254551Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":116,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.254551Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:7d545bdc017b4f6012a4f1175fda5dcf8c26ab6075320281e20eab0df5e11f20","observation_id":"28af3106-d41f-413d-b3f1-54babc562468","resolution":{"observed_at":"2026-08-07T00:14:47.254551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:47.348072Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":117,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.348072Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:748d65a9b6cf2b8f204436482fe9245b332b47ff9f97650ecfe91d53f5601019","observation_id":"ad7a0b9e-7062-4c6e-bd8b-31274cc5b6b4","resolution":{"observed_at":"2026-08-07T00:14:47.348072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:47.442891Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":118,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.442891Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:26af79b11c990df387f673e2f62813cc6f281d4f3cc05e760de9cf034cd60ce7","observation_id":"259a498c-e3f9-4a51-b77f-08bfc3aac47d","resolution":{"observed_at":"2026-08-07T00:14:47.442891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14238","last_updated":"2024-01-15T15:23:55Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-21T18:59:31Z","title":"InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Tasks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14238","snapshot_observed_at":"2026-08-07T00:14:47.513196Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":119,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.513196Z"},"links":{"cited_paper":"/paper/2312.14238","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:698bc20b1c5c80bf2c5b3b70aa28ad56e0c7feb17a35f6c47dcd3b7e221be70a","observation_id":"e3ec9410-2d2c-4c20-818e-533499f9c396","resolution":{"observed_at":"2026-08-07T00:14:47.513196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:47.603480Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":120,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.603480Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:ef411ada8377e272e3bfadf666bf0769bd886effd1428375886e6be0dcc81f4c","observation_id":"028abbd4-afaa-489a-805f-66ceb3ee4853","resolution":{"observed_at":"2026-08-07T00:14:47.603480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.05608","last_updated":"2025-01-19T16:23:38Z","snapshot_observed_at":"2026-07-06T16:45:24.070954Z","submitted_at":"2023-11-09T18:59:11Z","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.05608","snapshot_observed_at":"2026-08-07T00:14:47.682360Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":121,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.682360Z"},"links":{"cited_paper":"/paper/2311.05608","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:f7679a30401dcdb0d0f8a0c99787721e333d663f76068556122f449b62e149b5","observation_id":"d3a5ca68-e5e4-475a-9d0b-7ca49e3997bb","resolution":{"observed_at":"2026-08-07T00:14:47.682360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:47.772138Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":122,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.772138Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:0220b44147f144be94bb8eb2a6ae9a05fc64331304e9254c4b9ecefe8b4feb12","observation_id":"4e59cf44-4f98-48fc-8fa0-19ddce45c009","resolution":{"observed_at":"2026-08-07T00:14:47.772138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-07T00:14:47.829147Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":123,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.829147Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:71596baa1826eae9d2a187b7e1f76a1c88a324378f22a40828d60d9a15abdb84","observation_id":"c2b14920-59f8-4c25-8f36-a3ce8e3e6701","resolution":{"observed_at":"2026-08-07T00:14:47.829147Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:47.903092Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":124,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.903092Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:2a324e2cdc97ee8bd252e67d8c4b003244ddb4158d2211264ca4a46df761ce4a","observation_id":"471f7020-85a0-4d61-aafc-d1e0814027ff","resolution":{"observed_at":"2026-08-07T00:14:47.903092Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:47.974478Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":125,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.974478Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:4df7b0a261deef42a90f68f5f1b6a7e7b44d63c5b3a9f1a5fdf1315d8b0391ad","observation_id":"70b73911-1bbe-4539-8aca-b1de4dc60f80","resolution":{"observed_at":"2026-08-07T00:14:47.974478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.07590","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:52.456768Z","title":null,"venue":null,"work_id":"4b07c172-87a9-4b20-a0d7-c2be42c4c21b","year":2026},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":126,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.062373Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:1d486fe37bcb7f717ade820fb63f7d8830acdf92237f08abfe85032862c566f5","observation_id":"f29d06f3-eb4e-49c0-aca8-08b6549d9793","resolution":{"observed_at":"2026-08-07T00:14:52.498263Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:48.133566Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":127,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.133566Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:8795688844624bfb4693ce782d5bf11c6afcf6d5f1f234ba4eafe2ab8ae18e04","observation_id":"f65284b8-9768-489e-b9bc-a71b8f616b1d","resolution":{"observed_at":"2026-08-07T00:14:48.133566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07895","last_updated":"2024-07-28T19:58:08Z","snapshot_observed_at":"2026-07-06T18:44:24.873040Z","submitted_at":"2024-07-10T17:59:43Z","title":"LLaVA-NeXT-Interleave: Tackling Multi-image, Video, and 3D in Large Multimodal Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07895","snapshot_observed_at":"2026-08-07T00:14:48.202142Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":128,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.202142Z"},"links":{"cited_paper":"/paper/2407.07895","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:d452ea0c8775d2b3a352816f96d799a1fc0ba357a963c684b9dacf48b8da328d","observation_id":"8f665f2e-f00e-404d-83c1-96d16e4de6de","resolution":{"observed_at":"2026-08-07T00:14:48.202142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:48.274725Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":129,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.274725Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:7ac82441b73762314fee9e79b84285eda5e129c92611effb1554dcf9e0314587","observation_id":"9a0a1ab6-c381-413d-86ed-1debb3b8ba23","resolution":{"observed_at":"2026-08-07T00:14:48.274725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.09792","last_updated":"2025-01-13T03:30:37Z","snapshot_observed_at":"2026-08-09T10:29:24.807847Z","submitted_at":"2024-03-14T18:24:55Z","title":"Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.09792","snapshot_observed_at":"2026-08-07T00:14:48.340224Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":130,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.340224Z"},"links":{"cited_paper":"/paper/2403.09792","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:bf258c198d68f4490e7a0a8a661e1021c24d2447a48f14f3f6fad42674169863","observation_id":"56e80f9a-1140-4f7e-883e-db34e857a2e8","resolution":{"observed_at":"2026-08-07T00:14:48.340224Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.21190","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:52.746183Z","title":null,"venue":null,"work_id":"38725b4c-ed37-489f-b97a-fc5fbb30fc10","year":2025},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":131,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.431647Z"},"links":{"citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:5361dece260edc7fadf4277868206dff85527a0eb510cb3ba7f2a5a9f04f836e","observation_id":"9c94fad0-2773-4c04-a92d-b36bb8e48793","resolution":{"observed_at":"2026-08-07T00:14:52.858320Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17600","last_updated":"2024-06-19T08:32:14Z","snapshot_observed_at":"2026-07-06T16:54:22.039181Z","submitted_at":"2023-11-29T12:49:45Z","title":"MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17600","snapshot_observed_at":"2026-08-07T00:14:48.510814Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":132,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:48.510814Z"},"links":{"cited_paper":"/paper/2311.17600","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:5847f4cb1b5213afa1ba623f6ceecc25b13f6dd717c786247baf7459920db6e8","observation_id":"3c63a3cd-87f2-42a6-b087-87fef29be1bd","resolution":{"observed_at":"2026-08-07T00:14:48.510814Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T14:43:30.524152Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":96,"verified_exact":3,"verified_fuzzy":0},"total_outbound_references":135},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 100 of 135 outbound references and 0 inbound Pith citation observations for arXiv:2608.04034."}