Paper Citation Record · LEDGER

AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 39 inbound Pith citation observations for arXiv:2410.05295.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2410.05295 v4

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 39 of 39 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 39 of 39 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-09T04:22:00.510546Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

0
arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation 7a6bcbc2-39d1-4672-879c-75f27e4eba40 · inbound

KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs cites this paper.

KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-09T04:22:00.510546Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1f3963e7-0887-4698-a8ef-f282c1479027 · inbound

Lifelong Safety Alignment for Language Models cites this paper.

Lifelong Safety Alignment for Language Models AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-07T14:00:06.675923Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7cc71309-e256-45eb-abfe-903780222d71 · inbound

Adversarial Preference Learning for Robust LLM Alignment cites this paper.

Adversarial Preference Learning for Robust LLM Alignment AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-07T12:35:21.846278Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 33b04a5e-5201-4103-a505-f126f201da8a · inbound

Jailbreak-R1: Exploring the Jailbreak Capabilities of LLMs via Reinforcement Learning cites this paper.

Jailbreak-R1: Exploring the Jailbreak Capabilities of LLMs via Reinforcement Learning AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-07T12:01:09.010611Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 04f9bc7a-20fe-4c09-bab5-2efced5b5b29 · inbound

Quality-Diversity Red-Teaming: Automated Generation of High-Quality and Diverse Attackers for Large Language Models cites this paper.

Quality-Diversity Red-Teaming: Automated Generation of High-Quality and Diverse Attackers for Large Language Models AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-07T05:47:06.362862Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 37d45666-6cd8-4238-a472-ce1bc8adba7e · inbound

Beyond Jailbreaks: Revealing Stealthier and Broader LLM Security Risks Stemming from Alignment Failures cites this paper.

Beyond Jailbreaks: Revealing Stealthier and Broader LLM Security Risks Stemming from Alignment Failures AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-07T05:40:20.632046Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2604efad-cd46-4739-8285-e2d38c17fe1d · inbound

SAFEFLOW: A Principled Protocol for Trustworthy and Transactional Autonomous Agent Systems cites this paper.

SAFEFLOW: A Principled Protocol for Trustworthy and Transactional Autonomous Agent Systems AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-07T05:36:34.121835Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e6eff8a6-30ba-4341-9ce7-7aeea4b8911d · inbound

VERA: Variational Inference Framework for Jailbreaking Large Language Models cites this paper.

VERA: Variational Inference Framework for Jailbreaking Large Language Models AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-06T22:07:03.921548Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation be5c8c50-11ed-4dbb-a60b-4b47e7176bbd · inbound

VSF-Med:A Vulnerability Scoring Framework for Medical Vision-Language Models cites this paper.

VSF-Med:A Vulnerability Scoring Framework for Medical Vision-Language Models AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 2023

Resolution: unresolved; no resolver link, observed 2026-08-06T23:01:04.653534Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e7d2450e-b32f-4a61-acd8-d6f99824c51d · inbound

Addressing Benchmarking Gaps in Large Language Models for Health and Medicine with Dynamic Red-Teaming cites this paper.

Addressing Benchmarking Gaps in Large Language Models for Health and Medicine with Dynamic Red-Teaming AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-06T11:45:40.949098Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ebdf212a-25e8-4707-9096-57d66d1687dd · inbound

SATORI: Static Test Oracle Generation for REST APIs cites this paper.

SATORI: Static Test Oracle Generation for REST APIs AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-05T17:26:48.579160Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation af0d4e4f-68d9-42b7-82c5-1dae5dedef2f · inbound

Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs cites this paper.

Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 26

Resolution: metadata mismatch; arxiv_id, observed 2026-05-21T19:00:30.385782Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 53933384-a6f1-4869-86fa-3982b07ae5dc · inbound

TROJail: Trajectory-Level Optimization for Multi-Turn Large Language Model Jailbreaks with Process Rewards cites this paper.

TROJail: Trajectory-Level Optimization for Multi-Turn Large Language Model Jailbreaks with Process Rewards AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 2

Resolution: verified exact; arxiv_id, observed 2026-05-17T00:23:44.700970Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 8b5564b4-793d-4aec-9a16-2eef8a05158f · inbound

The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems cites this paper.

The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 47

Resolution: metadata mismatch; arxiv_id, observed 2026-05-11T09:16:03.903850Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation e5757c6d-f5a5-4c3d-bbb2-9f52da843d5e · inbound

TEMPLATEFUZZ: Fine-Grained Chat Template Fuzzing for Jailbreaking and Red Teaming LLMs cites this paper.

TEMPLATEFUZZ: Fine-Grained Chat Template Fuzzing for Jailbreaking and Red Teaming LLMs AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 31

Resolution: verified exact; arxiv_id, observed 2026-05-11T09:25:59.983966Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 69cd6318-8040-4648-aa31-5da6a783bd4f · inbound

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs cites this paper.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 23

Resolution: metadata mismatch; arxiv_id, observed 2026-05-11T11:11:05.526422Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation eeeff360-f314-428d-88ea-afb0a73755c8 · inbound

Understanding and Improving Continuous Adversarial Training for LLMs via In-context Learning Theory cites this paper.

Understanding and Improving Continuous Adversarial Training for LLMs via In-context Learning Theory AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 15

Resolution: verified exact; arxiv_id, observed 2026-05-11T09:36:11.031717Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 2b64557c-f11a-424e-9e12-91e6e8438793 · inbound

Characterizing Model-Native Skills cites this paper.

Characterizing Model-Native Skills AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 17

Resolution: verified exact; arxiv_id, observed 2026-05-10T06:06:19.513926Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation b737919f-43cd-4414-a0f2-9adc503ff3bf · inbound

ARES: Adaptive Red-Teaming and End-to-End Repair of Policy-Reward System cites this paper.

ARES: Adaptive Red-Teaming and End-to-End Repair of Policy-Reward System AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 3

Resolution: metadata mismatch; arxiv_id, observed 2026-05-11T12:16:03.221722Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation a42ba0d1-3772-42ec-9b14-4212bf1be01b · inbound

STAR-Teaming: A Strategy-Response Multiplex Network Approach to Automated LLM Red Teaming cites this paper.

STAR-Teaming: A Strategy-Response Multiplex Network Approach to Automated LLM Red Teaming AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 60

Resolution: verified exact; arxiv_id, observed 2026-05-11T12:46:02.591173Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation eba65cc3-7010-4ce8-a543-433336ead8bf · inbound

ContextualJailbreak: Evolutionary Red-Teaming via Simulated Conversational Priming cites this paper.

ContextualJailbreak: Evolutionary Red-Teaming via Simulated Conversational Priming AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 12

Resolution: verified exact; arxiv_id, observed 2026-05-09T05:55:32.373357Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 2844f5fb-83bd-4896-a672-56ecdf882e47 · inbound

On the Hardness of Junking LLMs cites this paper.

On the Hardness of Junking LLMs AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 28

Resolution: verified exact; arxiv_id, observed 2026-05-11T17:21:10.117605Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 5cc8c764-e315-4085-a901-77b0135683b7 · inbound

PersonaTeaming: Supporting Persona-Driven Red-Teaming for Generative AI cites this paper.

PersonaTeaming: Supporting Persona-Driven Red-Teaming for Generative AI AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 38

Resolution: verified exact; arxiv_id, observed 2026-05-11T20:56:19.344107Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 7139b5ec-bdb0-4220-a632-17939ffdca87 · inbound

PersonaTeaming: Supporting Persona-Driven Red-Teaming for Generative AI cites this paper.

PersonaTeaming: Supporting Persona-Driven Red-Teaming for Generative AI AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 38

Resolution: verified exact; arxiv_id, observed 2026-05-12T07:56:25.998345Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation ac703452-58c4-4979-85b5-2173cf2c37ec · inbound

Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing cites this paper.

Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 86

Resolution: verified exact; arxiv_id, observed 2026-05-12T05:51:27.472985Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 861629ff-3c98-404d-8335-b178b06c7ce3 · inbound

REALISTA: Realistic Latent Adversarial Attacks that Elicit LLM Hallucinations cites this paper.

REALISTA: Realistic Latent Adversarial Attacks that Elicit LLM Hallucinations AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 185

Resolution: verified exact; arxiv_id, observed 2026-05-14T20:17:56.262273Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 7993213f-8d59-4953-a3f2-cd4ac573b187 · inbound

ADR: An Agentic Detection System for Enterprise Agentic AI Security cites this paper.

ADR: An Agentic Detection System for Enterprise Agentic AI Security AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 38

Resolution: verified exact; arxiv_id, observed 2026-05-20T13:18:18.212118Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 14064216-d2db-4f33-9971-312262f43cf2 · inbound

DarkLLM: Learning Language-Driven Adversarial Attacks with Large Language Models cites this paper.

DarkLLM: Learning Language-Driven Adversarial Attacks with Large Language Models AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 34

Resolution: verified exact; arxiv_id, observed 2026-05-20T18:33:37.896661Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation b87c3166-0dbf-414f-b89e-d560ea459596 · inbound

LASH: Adaptive Semantic Hybridization for Black-Box Jailbreaking of Large Language Models cites this paper.

LASH: Adaptive Semantic Hybridization for Black-Box Jailbreaking of Large Language Models AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 20

Resolution: verified exact; arxiv_id, observed 2026-05-21T04:49:35.474867Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 7c16dbd4-1718-4ccc-9a21-1ba481e178c7 · inbound

Adversarial Reframing: A Framework for Targeted Generation in Language Models cites this paper.

Adversarial Reframing: A Framework for Targeted Generation in Language Models AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 33

Resolution: verified exact; arxiv_id, observed 2026-05-22T09:36:21.042903Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation ef6251bc-566b-41e5-bcc2-138a1c31208f · inbound

Black-box, Adaptive, Efficient, Transferable, Harmful, Applicable... Attacks Are All You Need to Break LLMs cites this paper.

Black-box, Adaptive, Efficient, Transferable, Harmful, Applicable... Attacks Are All You Need to Break LLMs AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 35

Resolution: verified exact; arxiv_id, observed 2026-07-02T04:16:34.669932Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 90b33e95-f16d-41e8-ab1b-6f8cebf37f8c · inbound

Korean Culture into LLM Alignment: Toward Cultural Coherence cites this paper.

Korean Culture into LLM Alignment: Toward Cultural Coherence AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 45

Resolution: verified exact; arxiv_id, observed 2026-07-02T16:37:09.337980Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation e4365639-ad87-4913-9961-73a4d9fab176 · inbound

Runtime Skill Audit: Targeted Runtime Probing for Agent Skill Security cites this paper.

Runtime Skill Audit: Targeted Runtime Probing for Agent Skill Security AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 18

Resolution: verified exact; arxiv_id, observed 2026-06-27T09:30:46.528515Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation eee5c730-7901-4509-8056-26d6f56aca17 · inbound

FinRED: An Expert-Guided Benchmark Generation and Evaluation Framework for Financial LLM Red-Teaming cites this paper.

FinRED: An Expert-Guided Benchmark Generation and Evaluation Framework for Financial LLM Red-Teaming AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 49

Resolution: metadata mismatch; arxiv_id, observed 2026-07-04T04:09:34.740713Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation b7e2f51d-7c24-44b7-85d6-d2951cdad73e · inbound

Distributed Quality-Diversity Search for Toxicity in Large Language Models cites this paper.

Distributed Quality-Diversity Search for Toxicity in Large Language Models AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 33

Resolution: verified exact; arxiv_id, observed 2026-07-04T19:00:04.619658Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 5650bdb6-1ed1-496c-8f9a-36737bb7c2b2 · inbound

Beyond Static Rules: Automated Discovery of Latent Vulnerabilities in Text-to-SQL cites this paper.

Beyond Static Rules: Automated Discovery of Latent Vulnerabilities in Text-to-SQL AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 53

Resolution: unresolved; no resolver link, observed 2026-07-11T23:37:54.128572Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f68d1564-7e93-463c-a149-57ccdd4cd73f · inbound

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models cites this paper.

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 68

Resolution: unresolved; no resolver link, observed 2026-07-31T09:23:52.512490Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 70de2287-057c-4e6c-b66c-db808db69336 · inbound

Chain-of-Models: Cross-Model Auditing for Bias-Robust LLM Judges cites this paper.

Chain-of-Models: Cross-Model Auditing for Bias-Robust LLM Judges AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 56

Resolution: unresolved; no resolver link, observed 2026-08-03T00:55:24.449101Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a09827e2-9353-438c-b32e-d3a5b81cef8b · inbound

A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination cites this paper.

A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 133

Resolution: unresolved; no resolver link, observed 2026-08-07T00:14:48.580356Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.