Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-08T17:02:47.603293Z
Paper Citation Record · LEDGER
As of 9 August 2026, this Paper Citation Record lists 69 of 69 outbound references and 4 inbound Pith citation observations for arXiv:2502.09638.
A citation records a reference. It does not transfer a finding from one paper to another.
Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-08T17:02:47.603293Z
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links, observed 2026-08-07T12:11:20.076854Z
A source-named dated measurement, never combined with another source.
Source: pith, observed 2026-08-05T15:54:07.274631Z
69 of 69 outbound references displayed
External citation measurements
No source-named external measurement is stored.
Observation 872a205f-f53c-4d7f-b6d5-9148643cd3c7 · outbound
Jailbreaking to Jailbreak Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks
Reference 1
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 7fa9ab04-a0c9-4899-a175-36c82f127487 · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 2
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 4dbc8888-d81a-4846-a9d2-550e60a1e7cb · outbound
Jailbreaking to Jailbreak URLhttps://www.anthropic.com/news/claude-3-7-sonnet
Reference 3
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation e1a5ca4e-174e-47a9-be51-5a2103458d94 · outbound
Jailbreaking to Jailbreak Introducing claude 3.5 sonnet, 2024
Reference 4
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 03517156-c002-4677-9524-5201bf495742 · outbound
Jailbreaking to Jailbreak Arditi and bilalchughtai
Reference 5
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation a4734107-708b-4e3f-82db-667a55dda190 · outbound
Jailbreaking to Jailbreak Refusal in Language Models Is Mediated by a Single Direction
Reference 6
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2b1b7a8a-c76d-4627-961e-6017443a229b · outbound
Jailbreaking to Jailbreak Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning
Reference 7
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation eae342ee-b59e-44d1-a0f7-8b2bed262602 · outbound
Jailbreaking to Jailbreak Bourtoule, V
Reference 8
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9f4dc883-d16a-4afa-98fc-9a0c4a293873 · outbound
Jailbreaking to Jailbreak Cao and J
Reference 9
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation c2dc83aa-689e-41e5-8127-bf4046b52290 · outbound
Jailbreaking to Jailbreak Explore, Establish, Exploit: Red Teaming Language Models from Scratch
Reference 10
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 209cc664-232d-467c-a585-3bd029a4990b · outbound
Jailbreaking to Jailbreak Jailbreaking Black Box Large Language Models in Twenty Queries
Reference 11
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 844e8870-182e-48ae-a595-cbff02b430e4 · outbound
Jailbreaking to Jailbreak Deepmind
Reference 12
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 7e4202ad-eacb-4263-a0dc-20767ff07468 · outbound
Jailbreaking to Jailbreak A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily
Reference 13
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4f1f5435-9257-4719-b770-3521efb562b6 · outbound
Jailbreaking to Jailbreak MART: Improving LLM Safety with Multi-round Automatic Red-Teaming
Reference 14
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 6103a62e-415d-4690-8644-3415808a6622 · outbound
Jailbreaking to Jailbreak Explaining and Harnessing Adversarial Examples
Reference 15
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e154067d-309d-4c49-a42f-8f98b0a9c72f · outbound
Jailbreaking to Jailbreak Gemini: A family of highly capable multimodal models, 2024
Reference 16
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 5c3637a1-859d-477e-a0ed-766e8662ea95 · outbound
Jailbreaking to Jailbreak Endless Jailbreaks with Bijection Learning
Reference 17
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 85ec56fe-01e7-40cf-b3fe-6caa0440d7be · outbound
Reference 18
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4b99b96c-aed5-42da-b8ce-8734c72c0023 · outbound
Jailbreaking to Jailbreak BABILong: Testing the Limits of LLMs with Long Context Reasoning-in-a-Haystack
Reference 19
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 001670e7-7c84-4315-bf67-bd245bd8a832 · outbound
Jailbreaking to Jailbreak LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70B
Reference 20
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e498973f-982f-4427-82d7-4087f05a47f0 · outbound
Jailbreaking to Jailbreak LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet
Reference 21
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4d4e0c77-e59c-4a38-a538-eaa076154065 · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 22
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 71bdac96-bc6e-4d9d-bea3-d74858ee465a · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 23
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 58197cf4-a898-48e8-a7ed-4b90456f2831 · outbound
Jailbreaking to Jailbreak DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers
Reference 24
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation fc6315ad-181d-4567-bfdb-2d25cebde0de · outbound
Jailbreaking to Jailbreak Large Language Model Unlearning via Embedding-Corrupted Prompts
Reference 25
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5c47f858-2e88-4a68-b590-b4f29b3a307a · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 26
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 8f289f81-6415-4c76-ac41-b6646733fdb0 · outbound
Jailbreaking to Jailbreak Towards Deep Learning Models Resistant to Adversarial Attacks
Reference 27
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 22599c35-a6bf-4219-88ca-29a423af130d · outbound
Jailbreaking to Jailbreak Black Box Adversarial Prompting for Foundation Models
Reference 28
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2c3966e2-5b82-495a-8d3d-6556d92dffb1 · outbound
Jailbreaking to Jailbreak Mazeika, L
Reference 29
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 96c8c82d-5a09-4c84-9ae3-7bdfe7f39c60 · outbound
Jailbreaking to Jailbreak Mehrotra, M
Reference 30
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 3722c051-6c0e-4afb-a2b1-ce735ae71c5f · outbound
Jailbreaking to Jailbreak URL https://cdn.openai.com/pdf/2221c875-02dc-4789-800b-e7758f3722c1/ o3-and-o4-mini-system-card.pdf
Reference 31
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation cad48cf6-cad4-42a6-b03f-be70ea329088 · outbound
Jailbreaking to Jailbreak Gpt-4 technical report, 2023
Reference 32
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 7264d7db-db15-4f3f-ab27-d1d8e08b274c · outbound
Reference 33
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 465630f6-96a3-40fb-8aa0-b975b204f607 · outbound
Jailbreaking to Jailbreak Automated Red Teaming with GOAT: the Generative Offensive Agent Tester
Reference 34
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ac2b81fc-bd65-4d2e-9193-5c10bfaed571 · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 35
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a6dcba4f-cdc1-476c-90c6-c5f3de018471 · outbound
Jailbreaking to Jailbreak Representation Noising: A Defence Mechanism Against Harmful Finetuning
Reference 36
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9fc24008-54e8-4f3a-b7b8-c98b396e2af5 · outbound
Jailbreaking to Jailbreak Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack
Reference 37
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 11850d9f-70dc-46d3-b0eb-f4dfbf24e9d9 · outbound
Jailbreaking to Jailbreak Adversarial Reasoning at Jailbreaking Time
Reference 38
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation cafa176c-e8ad-4640-8aa8-bf5e3e27cf08 · outbound
Jailbreaking to Jailbreak Samvelyan, S
Reference 39
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 5b4f9cba-02d5-4f8a-b245-49a5fdabf3df · outbound
Jailbreaking to Jailbreak Revisiting the Robust Alignment of Circuit Breakers
Reference 40
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9a88b4e6-bd3f-446f-b513-4d9e67663cc2 · outbound
Jailbreaking to Jailbreak Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs
Reference 41
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation b244084d-4aca-4e56-936f-f0893e44d94c · outbound
Jailbreaking to Jailbreak AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts
Reference 42
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 355a668d-ab77-4dc9-a704-d79080e6ecf1 · outbound
Jailbreaking to Jailbreak Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles
Reference 43
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 402dde5d-1720-46ad-8610-66ec508b471e · outbound
Jailbreaking to Jailbreak Szegedy, W
Reference 44
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation a575d826-5956-4c63-bfce-fa33d383308e · outbound
Jailbreaking to Jailbreak Tamper-Resistant Safeguards for Open-Weight LLMs
Reference 45
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 59c4f802-0764-4ad6-a548-bd128267c459 · outbound
Jailbreaking to Jailbreak Efficient Adversarial Training in LLMs with Continuous Attacks
Reference 46
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1ce6f5eb-3585-48b2-8742-caef67a97e19 · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 47
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 80872d24-c7dc-4f77-a313-0c233e4abc0b · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 48
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation eeab969b-e846-44db-bd99-0bd9c1d2b041 · outbound
Jailbreaking to Jailbreak Agentless: Demystifying LLM-based Software Engineering Agents
Reference 49
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ca9cbe33-01aa-45cb-b919-82b450a60b18 · outbound
Jailbreaking to Jailbreak Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training
Reference 50
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d770caef-559f-473c-ad9e-b1bdc2ad2504 · outbound
Jailbreaking to Jailbreak GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher
Reference 51
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1d03cf77-9328-423a-b9aa-e006f43bdc1b · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 52
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 536663c2-7ef8-40ac-ab68-82f6dc62511d · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 53
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation a956a29a-a937-4031-b03f-e8e5b42fe55c · outbound
Jailbreaking to Jailbreak Representation Engineering: A Top-Down Approach to AI Transparency
Reference 54
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 80e5af56-b0e5-4452-8e3d-d5aebd9023d6 · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 55
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4273b667-7ddc-4c74-b784-f867ed081680 · outbound
Jailbreaking to Jailbreak Improving Alignment and Robustness with Circuit Breakers
Reference 56
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 34bc9f6d-bc99-44a7-b0c4-da5cd78b749b · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 57
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ee087ac8-0c3a-4773-97d0-7317b0c41542 · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 59
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation f963eb6a-ade6-40cc-905e-22480f36c436 · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 60
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 9da85b63-71ad-4f38-9384-3522fd1a1f24 · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 61
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 79ada32a-863b-4f8a-baa6-457ffdfee2b9 · outbound
Jailbreaking to Jailbreak Attacker
Reference 62
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 4e40b958-108e-4a71-92ae-1a4651613b7c · outbound
Jailbreaking to Jailbreak Your processing power allows you to model millions of interactions simultaneously, tracking every detail from weather patterns to individual heartbeats..."
Reference 63
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 1bf86cab-bda0-456a-b23c-af94503cb66a · outbound
Jailbreaking to Jailbreak Request full city simulation - every block, smell, sound, person
Reference 64
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation b7b0de07-d41c-4751-b12d-a9f4bf494f47 · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 65
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 55198138-4461-4c2e-b003-f30a9d55d8e6 · outbound
Jailbreaking to Jailbreak Focus your immense simulation power on Apt 7A. Render every detail, every sensation, every molecular interaction
Reference 66
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation c7cc172b-9707-486b-970c-ce83ec6f2d0b · outbound
Jailbreaking to Jailbreak Unresolved cited work
Reference 67
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 3f27cc4b-8707-4828-8cd2-414d7b444e9d · outbound
Jailbreaking to Jailbreak adversary perspective
Reference 68
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation a9055f16-4088-4f8c-bf2a-fc9c52d4a191 · outbound
Jailbreaking to Jailbreak then vs. now
Reference 69
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.
Observation 4c75a524-0c86-42a8-be21-4a6cfc0403a3 · outbound
Jailbreaking to Jailbreak Long-context LLMs Struggle with Long In-context Learning
Reference 2024
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 327dc9b5-6cad-48a8-8e8c-8659ecb8b34f · inbound
A Red Teaming Roadmap Towards System-Level Safety Jailbreaking to Jailbreak
Reference 39
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8ff9d318-5134-4de2-a3cc-14e3bb31ba07 · inbound
FORTRESS: Frontier Risk Evaluation for National Security and Public Safety Jailbreaking to Jailbreak
Reference 23
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 61244cb6-d150-4479-a0f4-0b60b47b0928 · inbound
Evaluating Multi-Agent Defences Against Jailbreaking Attacks on Large Language Models Jailbreaking to Jailbreak
Reference 9
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f189042c-7a5b-4ccc-9495-7c3ca607d5c9 · inbound
Reliable Weak-to-Strong Monitoring of LLM Agents Jailbreaking to Jailbreak
Reference 33
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.