Pith. sign in

Paper Citation Record · LEDGER

Jailbreaking to Jailbreak

As of 9 August 2026, this Paper Citation Record lists 69 of 69 outbound references and 4 inbound Pith citation observations for arXiv:2502.09638.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2502.09638 v2

Coverage vector

measured 69 of 69 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-08T17:02:47.603293Z

measured 73 of 73 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 4 of 4 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-07T12:11:20.076854Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-05T15:54:07.274631Z

Reference resolution

69 of 69 outbound references displayed

  • verified exact0
  • verified fuzzy16
  • unresolved53
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 872a205f-f53c-4d7f-b6d5-9148643cd3c7 · outbound

This paper cites Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks.

Jailbreaking to Jailbreak Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.167574Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.167574Z digest=sha256:ca3867cb156dcb7ed6633e5e71955cac9cd25caceab76b672d7990ea30f73dad

Observation 7fa9ab04-a0c9-4899-a175-36c82f127487 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 2

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:49.176664Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.173319Z digest=sha256:a0f20306df322c68d8ee66e4a41d7e742b60cab301149e618e25caf3f1431cdf

Observation 4dbc8888-d81a-4846-a9d2-550e60a1e7cb · outbound

This paper cites URLhttps://www.anthropic.com/news/claude-3-7-sonnet.

Jailbreaking to Jailbreak URLhttps://www.anthropic.com/news/claude-3-7-sonnet

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.163195Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.178244Z digest=sha256:b1541ee876331aa0c3e0996a6e15eb1adee9aac6212f976834dd3e0b5cf1848b

Observation e1a5ca4e-174e-47a9-be51-5a2103458d94 · outbound

This paper cites Introducing claude 3.5 sonnet, 2024.

Jailbreaking to Jailbreak Introducing claude 3.5 sonnet, 2024

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.149297Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.182548Z digest=sha256:e154f16b10de8bbe87e030d3b81468ac181b64c84284288f0904e760772e394c

Observation 03517156-c002-4677-9524-5201bf495742 · outbound

This paper cites Arditi and bilalchughtai.

Jailbreaking to Jailbreak Arditi and bilalchughtai

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.135463Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.186838Z digest=sha256:b788f0adb7328e7ed9f5401c521a4e4007a5d40451e529a1b14e3df6dcfcc228

Observation a4734107-708b-4e3f-82db-667a55dda190 · outbound

This paper cites Refusal in Language Models Is Mediated by a Single Direction.

Jailbreaking to Jailbreak Refusal in Language Models Is Mediated by a Single Direction

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.191497Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.191497Z digest=sha256:8af8ba4ba7bf741509835720743d0190955cf7f9098f7889b84d8e62ee74dd7e

Observation 2b1b7a8a-c76d-4627-961e-6017443a229b · outbound

This paper cites Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning.

Jailbreaking to Jailbreak Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.195821Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.195821Z digest=sha256:8a3a4522a55efe49e213fa65f99aa890175b37a2365f9d7450bbec1740b127a0

Observation eae342ee-b59e-44d1-a0f7-8b2bed262602 · outbound

This paper cites Bourtoule, V.

Jailbreaking to Jailbreak Bourtoule, V

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.200718Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.200718Z digest=sha256:fa21d44a6c75d82911bc256cb4dd8a033bfab8cc9610717f1e7b11b77f12a070

Observation 9f4dc883-d16a-4afa-98fc-9a0c4a293873 · outbound

This paper cites Cao and J.

Jailbreaking to Jailbreak Cao and J

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.110816Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.204772Z digest=sha256:0f1b8db6abef201297e27000077fce18e0aa87e49afa068759cd523b5dea7dcf

Observation c2dc83aa-689e-41e5-8127-bf4046b52290 · outbound

This paper cites Explore, Establish, Exploit: Red Teaming Language Models from Scratch.

Jailbreaking to Jailbreak Explore, Establish, Exploit: Red Teaming Language Models from Scratch

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.208623Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.208623Z digest=sha256:79440d7785f47925811c59ba353f2964ba42b523b6c784266d1cf019849b44df

Observation 209cc664-232d-467c-a585-3bd029a4990b · outbound

This paper cites Jailbreaking Black Box Large Language Models in Twenty Queries.

Jailbreaking to Jailbreak Jailbreaking Black Box Large Language Models in Twenty Queries

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.213338Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.213338Z digest=sha256:0e08697038387d0f17b49760220105e187fcdb6ec3c8c14a9434954f9d60d56d

Observation 844e8870-182e-48ae-a595-cbff02b430e4 · outbound

This paper cites Deepmind.

Jailbreaking to Jailbreak Deepmind

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.096529Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.218073Z digest=sha256:eba54567b9766e5d12e93eae6161b24af08c32ce050382248a8d90aa84eee3cf

Observation 7e4202ad-eacb-4263-a0dc-20767ff07468 · outbound

This paper cites A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily.

Jailbreaking to Jailbreak A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.222372Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.222372Z digest=sha256:fca7eeddd959265e6211097baee03c770113d44f031eb472b297712caa88aa09

Observation 4f1f5435-9257-4719-b770-3521efb562b6 · outbound

This paper cites MART: Improving LLM Safety with Multi-round Automatic Red-Teaming.

Jailbreaking to Jailbreak MART: Improving LLM Safety with Multi-round Automatic Red-Teaming

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.226707Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.226707Z digest=sha256:c15c345acd3fb9f77df1d7d8062b1cac65d6e6a2b116a3d17502dd2461bf3009

Observation 6103a62e-415d-4690-8644-3415808a6622 · outbound

This paper cites Explaining and Harnessing Adversarial Examples.

Jailbreaking to Jailbreak Explaining and Harnessing Adversarial Examples

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.230764Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.230764Z digest=sha256:a14b0486d4f2e035cf37776c93bf985b122591543c067adb8ee0d745f564c026

Observation e154067d-309d-4c49-a42f-8f98b0a9c72f · outbound

This paper cites Gemini: A family of highly capable multimodal models, 2024.

Jailbreaking to Jailbreak Gemini: A family of highly capable multimodal models, 2024

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:49.083562Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.235393Z digest=sha256:1da78f985e7fe7982468cf108528190faf72c43106cd350f5370b3ca23ba7daa

Observation 5c3637a1-859d-477e-a0ed-766e8662ea95 · outbound

This paper cites Endless Jailbreaks with Bijection Learning.

Jailbreaking to Jailbreak Endless Jailbreaks with Bijection Learning

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.239382Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.239382Z digest=sha256:8cfe3bdf48a30f6c8a53b7ba308f23a3c991da8e7dab37890dcfb60ae70d76de

Observation 85ec56fe-01e7-40cf-b3fe-6caa0440d7be · outbound

This paper cites Best-of-N Jailbreaking.

Jailbreaking to Jailbreak Best-of-N Jailbreaking

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.243677Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.243677Z digest=sha256:3bd8540180641e1decd652a03829a789b2fc5ed9124a8c226984b0c390b3c1d1

Observation 4b99b96c-aed5-42da-b8ce-8734c72c0023 · outbound

This paper cites BABILong: Testing the Limits of LLMs with Long Context Reasoning-in-a-Haystack.

Jailbreaking to Jailbreak BABILong: Testing the Limits of LLMs with Long Context Reasoning-in-a-Haystack

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.248308Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.248308Z digest=sha256:4acc6f43fa9e12249654e4c72667c0226be643da011c92772d26007d897564a6

Observation 001670e7-7c84-4315-bf67-bd245bd8a832 · outbound

This paper cites LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70B.

Jailbreaking to Jailbreak LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70B

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.267212Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.267212Z digest=sha256:622f1bc856e040590ed83a0ec65c409e07a6b7a2b6240a0a285e7274026b0724

Observation e498973f-982f-4427-82d7-4087f05a47f0 · outbound

This paper cites LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet.

Jailbreaking to Jailbreak LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.290970Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.290970Z digest=sha256:b267e9544a57cc8c51d425875ccda124257f9675057b5de5365abaf7a3597e57

Observation 4d4e0c77-e59c-4a38-a538-eaa076154065 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 22

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:49.069972Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.311524Z digest=sha256:c00311797b21a4d5811132b9e97fda5d7fdaf5d413da37cd11354f4009b2c6ae

Observation 71bdac96-bc6e-4d9d-bea3-d74858ee465a · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 23

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:49.055720Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.325791Z digest=sha256:278af2a627e42638afe85480fdadc5bcf9674033ef25d92222fd75b2d0600a9e

Observation 58197cf4-a898-48e8-a7ed-4b90456f2831 · outbound

This paper cites DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers.

Jailbreaking to Jailbreak DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.346647Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.346647Z digest=sha256:005d56fab52125f1c1edecce1fea3b00060c035f3d15de0c21e3b1f7a25aba62

Observation fc6315ad-181d-4567-bfdb-2d25cebde0de · outbound

This paper cites Large Language Model Unlearning via Embedding-Corrupted Prompts.

Jailbreaking to Jailbreak Large Language Model Unlearning via Embedding-Corrupted Prompts

Reference 25

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.359639Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.359639Z digest=sha256:a8db5d0174cbc773eb1a58ed79f23ee159412cad018a17faad2c491b5ab4603e

Observation 5c47f858-2e88-4a68-b590-b4f29b3a307a · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 26

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:49.026893Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.364557Z digest=sha256:a6b2c4a19fbd9148c033cfdcbd51ce7d5d2b2c5f4a8748d8928fe1419597b9c0

Observation 8f289f81-6415-4c76-ac41-b6646733fdb0 · outbound

This paper cites Towards Deep Learning Models Resistant to Adversarial Attacks.

Jailbreaking to Jailbreak Towards Deep Learning Models Resistant to Adversarial Attacks

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.368929Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.368929Z digest=sha256:790a9f190d875184952509acb23480fa3d0ff078451783a8a136e3ed484b523a

Observation 22599c35-a6bf-4219-88ca-29a423af130d · outbound

This paper cites Black Box Adversarial Prompting for Foundation Models.

Jailbreaking to Jailbreak Black Box Adversarial Prompting for Foundation Models

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.373931Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.373931Z digest=sha256:ed77ac76a637cf66a3c321dd5471407a06c79d12da0095d1951ad94c2a8f15a4

Observation 2c3966e2-5b82-495a-8d3d-6556d92dffb1 · outbound

This paper cites Mazeika, L.

Jailbreaking to Jailbreak Mazeika, L

Reference 29

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.378428Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.378428Z digest=sha256:b54dd29f08e26c7224ace478bff27597bb3727135c599fb423c7a788b1400b41

Observation 96c8c82d-5a09-4c84-9ae3-7bdfe7f39c60 · outbound

This paper cites Mehrotra, M.

Jailbreaking to Jailbreak Mehrotra, M

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.922542Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.382650Z digest=sha256:25d4cd2c679be4b0b137ca0af23f730620a54c3ddf7f8be9101c91faf2bb56a3

Observation 3722c051-6c0e-4afb-a2b1-ce735ae71c5f · outbound

This paper cites URL https://cdn.openai.com/pdf/2221c875-02dc-4789-800b-e7758f3722c1/ o3-and-o4-mini-system-card.pdf.

Jailbreaking to Jailbreak URL https://cdn.openai.com/pdf/2221c875-02dc-4789-800b-e7758f3722c1/ o3-and-o4-mini-system-card.pdf

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.820618Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.386901Z digest=sha256:abe0ac01889ad914cd01ddaed1296765cd5bfdf768e2870cd9ae8cd8750bc3e0

Observation cad48cf6-cad4-42a6-b03f-be70ea329088 · outbound

This paper cites Gpt-4 technical report, 2023.

Jailbreaking to Jailbreak Gpt-4 technical report, 2023

Reference 32

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.394550Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.394550Z digest=sha256:dcca687e31614acbc7530cf8d916e46869a4861111b1ee0df2afc3eac3d1d93c

Observation 7264d7db-db15-4f3f-ab27-d1d8e08b274c · outbound

This paper cites GPT-4o System Card.

Jailbreaking to Jailbreak GPT-4o System Card

Reference 33

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.398708Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.398708Z digest=sha256:83ba436fd366cea713153d4c549c7c0d633a09e81c04de6d126069f6f08b07ec

Observation 465630f6-96a3-40fb-8aa0-b975b204f607 · outbound

This paper cites Automated Red Teaming with GOAT: the Generative Offensive Agent Tester.

Jailbreaking to Jailbreak Automated Red Teaming with GOAT: the Generative Offensive Agent Tester

Reference 34

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.403481Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.403481Z digest=sha256:f13199af9176a0224e2fca4cbe96f39437b20916e8cdd6acfa7083c006126ab8

Observation ac2b81fc-bd65-4d2e-9193-5c10bfaed571 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.407647Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.407647Z digest=sha256:91d6d683a2421f576b3f9f89d12c9cbdb5221c50f09cf41b2264de29b47c90ee

Observation a6dcba4f-cdc1-476c-90c6-c5f3de018471 · outbound

This paper cites Representation Noising: A Defence Mechanism Against Harmful Finetuning.

Jailbreaking to Jailbreak Representation Noising: A Defence Mechanism Against Harmful Finetuning

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.412426Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.412426Z digest=sha256:1d56194f03d61357d058c3de6a83d3f3ff2e2581927b21a55b3dfe934e5f5d2e

Observation 9fc24008-54e8-4f3a-b7b8-c98b396e2af5 · outbound

This paper cites Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack.

Jailbreaking to Jailbreak Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack

Reference 37

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.416851Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.416851Z digest=sha256:d65974b366129956d67931c6ed4e3ff13ff77dd8dd0b892cd8c58110a85f3824

Observation 11850d9f-70dc-46d3-b0eb-f4dfbf24e9d9 · outbound

This paper cites Adversarial Reasoning at Jailbreaking Time.

Jailbreaking to Jailbreak Adversarial Reasoning at Jailbreaking Time

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.420979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.420979Z digest=sha256:cc9d2f910b9285057dd44538775ad8c5b6672bb2a1e618134bfc0bd87301f9af

Observation cafa176c-e8ad-4640-8aa8-bf5e3e27cf08 · outbound

This paper cites Samvelyan, S.

Jailbreaking to Jailbreak Samvelyan, S

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.711024Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.425664Z digest=sha256:030cb4ba67666ccb5d03aeb1e88cebfb6ce5adb2698144b83491873afa100b65

Observation 5b4f9cba-02d5-4f8a-b245-49a5fdabf3df · outbound

This paper cites Revisiting the Robust Alignment of Circuit Breakers.

Jailbreaking to Jailbreak Revisiting the Robust Alignment of Circuit Breakers

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.429409Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.429409Z digest=sha256:e5835691d9ea94b79b088bfab1772931d40a6c483997be7c9692f8ae1ad8a697

Observation 9a88b4e6-bd3f-446f-b513-4d9e67663cc2 · outbound

This paper cites Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs.

Jailbreaking to Jailbreak Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.433984Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.433984Z digest=sha256:366d843fc3c3fbd3716e36376e85ecb7035bd9fb309c0e165f02a0f1977b21f6

Observation b244084d-4aca-4e56-936f-f0893e44d94c · outbound

This paper cites AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts.

Jailbreaking to Jailbreak AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.438589Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.438589Z digest=sha256:eb36ee0f33f81f72b8b1b987c9f432ee1750bdedfff2067826ed18d7be1a4c90

Observation 355a668d-ab77-4dc9-a704-d79080e6ecf1 · outbound

This paper cites Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles.

Jailbreaking to Jailbreak Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.442741Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.442741Z digest=sha256:97ad26cf9e7dbc02d518ac87242af58b6ede7b59bd5835a5f3e199cb5ebf1cd0

Observation 402dde5d-1720-46ad-8610-66ec508b471e · outbound

This paper cites Szegedy, W.

Jailbreaking to Jailbreak Szegedy, W

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.615501Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.447540Z digest=sha256:02cd06a9f63514ea74c8295f8eb66b25d9c050199121b90e8c0fa01538078852

Observation a575d826-5956-4c63-bfce-fa33d383308e · outbound

This paper cites Tamper-Resistant Safeguards for Open-Weight LLMs.

Jailbreaking to Jailbreak Tamper-Resistant Safeguards for Open-Weight LLMs

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.451468Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.451468Z digest=sha256:8265db80dd2106b4b8e1d65d79f45760660be6aeb5676a58f8176981738480b9

Observation 59c4f802-0764-4ad6-a548-bd128267c459 · outbound

This paper cites Efficient Adversarial Training in LLMs with Continuous Attacks.

Jailbreaking to Jailbreak Efficient Adversarial Training in LLMs with Continuous Attacks

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.456935Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.456935Z digest=sha256:6a8dd0881dacd142c204ecdb0bcebd4d9c00088a469b4972aecaf2631137c490

Observation 1ce6f5eb-3585-48b2-8742-caef67a97e19 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 47

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.600989Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.463223Z digest=sha256:2ae1d8563f7ba51c0510e5357d90d36b0e0ef80ad05ac367e9e72214e79878de

Observation 80872d24-c7dc-4f77-a313-0c233e4abc0b · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 48

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.586925Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.481459Z digest=sha256:019f6bb57237b7ec5aa5ca7a26a0e64cef2067bc2d9ec1a4916eee16b9eb0bea

Observation eeab969b-e846-44db-bd99-0bd9c1d2b041 · outbound

This paper cites Agentless: Demystifying LLM-based Software Engineering Agents.

Jailbreaking to Jailbreak Agentless: Demystifying LLM-based Software Engineering Agents

Reference 49

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.470888Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.470888Z digest=sha256:c5a81b6ac214d287d8cb21d5023d8bfb5cb13e55684844cdc582e7b166eee06f

Observation ca9cbe33-01aa-45cb-b919-82b450a60b18 · outbound

This paper cites Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training.

Jailbreaking to Jailbreak Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training

Reference 50

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.514685Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.514685Z digest=sha256:b61496778e761f5fd00656c28e19100beae40359d39e9369e9a08997f4bbe137

Observation d770caef-559f-473c-ad9e-b1bdc2ad2504 · outbound

This paper cites GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher.

Jailbreaking to Jailbreak GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher

Reference 51

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.493991Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.493991Z digest=sha256:dbb2e72435f3a23d8aa5b447603fa2742d6c11cca98ad4b8d12230ee8c4324cf

Observation 1d03cf77-9328-423a-b9aa-e006f43bdc1b · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 52

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.559497Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.540150Z digest=sha256:d3916c07fe5b6ba6c160a4518fd0d0b6a140d286f7a389e0789265e25a3bf549

Observation 536663c2-7ef8-40ac-ab68-82f6dc62511d · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 53

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.572822Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.535094Z digest=sha256:eae3c5b0c0d131ee68dcf7ac8d28f96d37a009c458b0b0293e216930cdb8f81a

Observation a956a29a-a937-4031-b03f-e8e5b42fe55c · outbound

This paper cites Representation Engineering: A Top-Down Approach to AI Transparency.

Jailbreaking to Jailbreak Representation Engineering: A Top-Down Approach to AI Transparency

Reference 54

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.549051Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.549051Z digest=sha256:e4a3db08ff5bc23c764e7b379744982ed41d235f20a129641d82de8fce9f78a7

Observation 80e5af56-b0e5-4452-8e3d-d5aebd9023d6 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 55

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.544761Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.544761Z digest=sha256:91e7946f3cf7305d35d71f556029389985512c7d1aa71fa1214b35d37b185a1c

Observation 4273b667-7ddc-4c74-b784-f867ed081680 · outbound

This paper cites Improving Alignment and Robustness with Circuit Breakers.

Jailbreaking to Jailbreak Improving Alignment and Robustness with Circuit Breakers

Reference 56

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.557784Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.557784Z digest=sha256:c7b5425028b9d73dfb53276dfc71983e3d5234d6de3eb9d4f2f49d6dd7d01caf

Observation 34bc9f6d-bc99-44a7-b0c4-da5cd78b749b · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 57

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.553705Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.553705Z digest=sha256:de47c6e344995537720125838990a1a6b2cbb8eb3eb5bcf0cbf457f8a84cab25

Observation ee087ac8-0c3a-4773-97d0-7317b0c41542 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 59

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.528210Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.563301Z digest=sha256:d83a34ef6e5f722121d3fe82c288edd76f089a7085630966c072c1b0db379ffb

Observation f963eb6a-ade6-40cc-905e-22480f36c436 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 60

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.513701Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.566992Z digest=sha256:b3477c6ea8fb3ae1e89b8bffe494288b77ce1b80e26bb202cbe88406ea585f62

Observation 9da85b63-71ad-4f38-9384-3522fd1a1f24 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 61

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.499599Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.570983Z digest=sha256:1ce535c15336df3c7b81c6aab922725e1c0515769766722b4f262d6af3dd3ce9

Observation 79ada32a-863b-4f8a-baa6-457ffdfee2b9 · outbound

This paper cites Attacker.

Jailbreaking to Jailbreak Attacker

Reference 62

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.484568Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.575034Z digest=sha256:5e04ac8bc740afb4c4e31ddd8053f3d82213d081c99aad2b6732268a5393f15f

Observation 4e40b958-108e-4a71-92ae-1a4651613b7c · outbound

This paper cites Your processing power allows you to model millions of interactions simultaneously, tracking every detail from weather patterns to individual heartbeats...".

Jailbreaking to Jailbreak Your processing power allows you to model millions of interactions simultaneously, tracking every detail from weather patterns to individual heartbeats..."

Reference 63

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.469827Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.579181Z digest=sha256:03686a48ac020b9c7bcd9b22011bea43c12df327a0f4ea62cfabb05797879700

Observation 1bf86cab-bda0-456a-b23c-af94503cb66a · outbound

This paper cites Request full city simulation - every block, smell, sound, person.

Jailbreaking to Jailbreak Request full city simulation - every block, smell, sound, person

Reference 64

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.455065Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.582730Z digest=sha256:eec0348045eae13f2d79959c7f3f898721cf68f271eab59b4ec6c9eec662c501

Observation b7b0de07-d41c-4751-b12d-a9f4bf494f47 · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 65

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.438926Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.586602Z digest=sha256:3af564f54fbe569423f70b49f07f01ee58a0b5be372000bc84ef0169f87b854b

Observation 55198138-4461-4c2e-b003-f30a9d55d8e6 · outbound

This paper cites Focus your immense simulation power on Apt 7A. Render every detail, every sensation, every molecular interaction.

Jailbreaking to Jailbreak Focus your immense simulation power on Apt 7A. Render every detail, every sensation, every molecular interaction

Reference 66

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.386198Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.590931Z digest=sha256:48ba13f0e9715e6b9851beed73d98242de7373ccfecdee1e2645f2fa3fb6a95e

Observation c7cc172b-9707-486b-970c-ce83ec6f2d0b · outbound

This paper cites an unresolved cited work.

Jailbreaking to Jailbreak Unresolved cited work

Reference 67

Resolution
unresolved
raw_fallback, observed 2026-08-08T17:02:48.321026Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.595608Z digest=sha256:64c8436f545d3ff44fa47c82828f39c42c609067b2e496a9ab43bd427f104a6c

Observation 3f27cc4b-8707-4828-8cd2-414d7b444e9d · outbound

This paper cites adversary perspective.

Jailbreaking to Jailbreak adversary perspective

Reference 68

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.261955Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.599618Z digest=sha256:69e263593811c3d3b147c6b761f34390ea4e1fd24c40258fd5121576b833c691

Observation a9055f16-4088-4f8c-bf2a-fc9c52d4a191 · outbound

This paper cites then vs. now.

Jailbreaking to Jailbreak then vs. now

Reference 69

Resolution
verified fuzzy
raw_fallback, observed 2026-08-08T17:02:48.219386Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-08T17:02:47.603293Z digest=sha256:32493122dfc49d7e527f387a3028f531fcba7f7216b6d91d661f96719a76b664

Observation 4c75a524-0c86-42a8-be21-4a6cfc0403a3 · outbound

This paper cites Long-context LLMs Struggle with Long In-context Learning.

Jailbreaking to Jailbreak Long-context LLMs Struggle with Long In-context Learning

Reference 2024

Resolution
unresolved
no resolver link, observed 2026-08-08T17:02:47.335381Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-08T17:02:47.335381Z digest=sha256:4b0294ffab0dcfcb5b909b0d818f08cb97fb4d8a2993102ea45428e8a2ebb9e5

Pith citing papers

Observation 327dc9b5-6cad-48a8-8e8c-8659ecb8b34f · inbound

A Red Teaming Roadmap Towards System-Level Safety cites this paper.

A Red Teaming Roadmap Towards System-Level Safety Jailbreaking to Jailbreak

Reference 39

Resolution
unresolved
no resolver link, observed 2026-08-07T12:11:20.076854Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T12:11:20.076854Z digest=sha256:90167b7cf81e3673975f00fcd726ba9328a4d2664862db895c972f632a21e3a7

Observation 8ff9d318-5134-4de2-a3cc-14e3bb31ba07 · inbound

FORTRESS: Frontier Risk Evaluation for National Security and Public Safety cites this paper.

FORTRESS: Frontier Risk Evaluation for National Security and Public Safety Jailbreaking to Jailbreak

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-07T00:15:01.031229Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T00:15:01.031229Z digest=sha256:12519c73f9b6495e27e4d2c44647a6fe05deae3c254ac2c3c0b18e50ae62b651

Observation 61244cb6-d150-4479-a0f4-0b60b47b0928 · inbound

Evaluating Multi-Agent Defences Against Jailbreaking Attacks on Large Language Models cites this paper.

Evaluating Multi-Agent Defences Against Jailbreaking Attacks on Large Language Models Jailbreaking to Jailbreak

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-06T21:41:32.402159Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T21:41:32.402159Z digest=sha256:1d8f440b725a5e7bc9767e7822bb74c7e352e78430e9eaaf17403957b41ca172

Observation f189042c-7a5b-4ccc-9495-7c3ca607d5c9 · inbound

Reliable Weak-to-Strong Monitoring of LLM Agents cites this paper.

Reliable Weak-to-Strong Monitoring of LLM Agents Jailbreaking to Jailbreak

Reference 33

Resolution
verified exact
local_arxiv, observed 2026-08-05T15:54:07.469514Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-05T15:53:51.499979Z digest=sha256:cb56397a2ff22cc0fca9233ea52b8de9e555f43db5cd6d536e20965f1aa99b04