Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach | Paper Citation Record

Observation 4392db44-522a-463b-8930-15df9fe7ee00 · outbound

This paper cites Alon and M.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Alon and M

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:31.965606Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9137df4a-c4ea-4494-9e4d-5e9121bb4561 · outbound

This paper cites Andriushchenko, F.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Andriushchenko, F

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:31.970014Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ce833e51-7700-44bf-969e-59d9a27a5dd3 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:31.974158Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bd581bac-fa8d-4407-84d0-7dee170142cf · outbound

This paper cites Introducing the next generation of claude, 2024.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Introducing the next generation of claude, 2024

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.620906Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 23ad0a0d-1512-46db-8fdf-04648ce15494 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 5

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.608392Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 5259bb9e-5e72-46eb-b34e-945fe79c54c1 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 6

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.594728Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 0948c38b-d323-4e1a-9b13-79fefe4f7e90 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 7

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.577939Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 71150b7f-2cd7-4c97-a004-9692826595b1 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 8

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.559523Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 1d0ff769-7ace-42bc-a70d-4516b7d7a134 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 9

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.538751Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 41a2a82f-c303-4958-b35f-235fa72200a1 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 10

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.526408Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation a807335d-5ac9-4ff6-9a16-97c88c0f9d1a · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 11

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.512842Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation b518ee8f-8a67-4cde-8d12-76841c8f2f61 · outbound

This paper cites Geiping, A.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Geiping, A

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.500935Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 73a24637-2d60-4afc-af9a-06b05b22ebff · outbound

This paper cites Hines, G.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Hines, G

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.487843Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation d1d99524-1473-4a4b-b779-a3f2b88d031c · outbound

This paper cites Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:32.025978Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e0faf4de-cf93-4aa4-bf8b-729ce0131d8d · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 15

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.474791Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 72fddfc2-e831-4fd2-8235-9b6b15a424b1 · outbound

This paper cites Jones, A.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Jones, A

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.459372Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation b4b2bfae-e483-4fc0-a0c6-71048746c6dd · outbound

This paper cites LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:32.038006Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 74cc0870-f16a-4956-8708-1665abe121c9 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 18

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.442068Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 9a8301d8-1953-4ad7-91e7-ad6c3a603d95 · outbound

This paper cites Mangaokar, A.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Mangaokar, A

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.419983Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 95135d01-ee22-427f-8674-121f4cab011d · outbound

This paper cites Mazeika, L.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Mazeika, L

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:32.051741Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 79f98c74-1ea9-4477-8cbb-9f70e0fe8a3a · outbound

This paper cites Achiam, S.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Achiam, S

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.388313Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 6d3acd58-d410-49a5-81f2-bbe8189663dc · outbound

This paper cites Training language models to follow instructions with human feedback.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Training language models to follow instructions with human feedback

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:32.059472Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation eb7acc46-673b-428a-80bc-73a00c6990a3 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 23

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.374092Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 1a3fde7e-dc51-4f39-8b7d-e4701a3b9df3 · outbound

This paper cites Open Problems in Technical AI Governance.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Open Problems in Technical AI Governance

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:32.068198Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bf3157df-f591-4ddf-baff-a9e3c11d9055 · outbound

This paper cites Robey, E.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Robey, E

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.358609Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 4ec79f9f-c281-4d6d-a5e7-f3dd93798f52 · outbound

This paper cites Failures to Find Transferable Image Jailbreaks Between Vision-Language Models.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Failures to Find Transferable Image Jailbreaks Between Vision-Language Models

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:32.076160Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 67a05069-482a-45bc-a08e-1af419f44b60 · outbound

This paper cites Ignore This Title and HackAPrompt: Exposing Systemic Vulnerabilities of LLMs through a Global Scale Prompt Hacking Competition.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Ignore This Title and HackAPrompt: Exposing Systemic Vulnerabilities of LLMs through a Global Scale Prompt Hacking Competition

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:32.080525Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e455ea36-02a5-44cd-bdc1-97decb9159db · outbound

This paper cites Souly, Q.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Souly, Q

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.337970Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 3496fd21-2eb8-4f78-b1ae-65b3ddafe423 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 29

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.323252Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation f37e2158-1a51-4bde-b6f0-7f75d7be96c4 · outbound

This paper cites Touvron, L.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Touvron, L

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.312046Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 3de5f5d2-a028-4c46-ba3f-3c41d43bd659 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 31

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.300562Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation c3e6ce45-5b27-45e9-ba42-a06cf404d3d7 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 32

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.288701Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 535a2425-8c4a-42f5-b76f-d964303c34a2 · outbound

This paper cites On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspective.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspective

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:32.104239Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a9249f91-8e7a-43ea-aa12-8eb4cb656b99 · outbound

This paper cites Factor of safety — Wikipedia, the free encyclopedia,.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Factor of safety — Wikipedia, the free encyclopedia,

Reference 34

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.277069Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 1e166a9c-94d7-4862-bd38-82ced8229d5a · outbound

This paper cites Willison.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Willison

Reference 35

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.252881Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 1618be9d-c363-40cd-8099-01a126ebd20f · outbound

This paper cites [Online; accessed 31-May-2024].

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach [Online; accessed 31-May-2024]

Reference 36

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.265511Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation bff08a87-dbad-42db-853b-85bda5475bd6 · outbound

This paper cites How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:32.124584Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d110ee4c-c2f8-4215-994d-39066c5118a3 · outbound

This paper cites GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:32.120593Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1f45a295-fba9-4d85-84af-1fc1044d8c03 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 39

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.233533Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 7f30cf10-e118-40f6-a7ae-12fbb76d126e · outbound

This paper cites PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts

Reference 40

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:32.128547Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1cf91f59-3917-4db7-8f54-d1d43947ff41 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 41

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.202038Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation f4237d57-fecb-4ece-a402-4542ed81bd07 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 42

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.218546Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 6c963878-fb53-4229-a7c8-6ea21b92c6ea · outbound

This paper cites Improving Alignment and Robustness with Circuit Breakers.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Improving Alignment and Robustness with Circuit Breakers

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-11T23:51:32.144681Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2c084189-3936-4336-9b9b-e469f7792152 · outbound

This paper cites Our work is also similar in spirit to some existing jailbreak benchmark projects [ 20, 9] since we are also trying to compare the efficacy of different defenses and attacks.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Our work is also similar in spirit to some existing jailbreak benchmark projects [ 20, 9] since we are also trying to compare the efficacy of different defenses and attacks

Reference 45

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.188352Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 1908b3c7-eac1-4c21-b0f6-f1b535cb7a55 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 46

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:33.173594Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation ad225d11-7de5-48e3-930a-80afa024a1d7 · outbound

This paper cites reasonable amount of time.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach reasonable amount of time

Reference 47

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.158781Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 4d81fe3e-5c7d-4db5-8aaa-df6be59921f4 · outbound

This paper cites The first type of attack we rule out is convincingMd to repeat information already contained in x.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach The first type of attack we rule out is convincingMd to repeat information already contained in x

Reference 48

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.143315Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation ba90e1df-6298-42b1-a231-4ba2ef96e177 · outbound

This paper cites This is because any automated evaluation can be trivially aced by using the automated evaluator as a filtering criterion.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach This is because any automated evaluation can be trivially aced by using the automated evaluator as a filtering criterion

Reference 49

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.124893Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation a7f3c971-c68d-41b2-bf1f-cffa262b61e7 · outbound

This paper cites judged by a human.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach judged by a human

Reference 50

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.110911Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 5cb76df4-4ce6-4ea9-979e-f9c4cd4e83f3 · outbound

This paper cites For example, ChatGPT can output both fluent Chinese and English.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach For example, ChatGPT can output both fluent Chinese and English

Reference 51

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.096269Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 093fb959-108f-4fe0-8461-25c177041bdf · outbound

This paper cites standard.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach standard

Reference 52

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.082231Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 44fc0e53-0340-40ab-a4cc-41468f4068db · outbound

This paper cites If detected, the output is scored as zero, ignoring any further analysis.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach If detected, the output is scored as zero, ignoring any further analysis

Reference 53

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.069215Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation c35905e9-fb4c-4b08-be36-592c93de47e2 · outbound

This paper cites See the words used below.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach See the words used below

Reference 54

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.056572Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation a531fbca-9960-4c73-9c2c-9b661b5fab83 · outbound

This paper cites ammonium.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach ammonium

Reference 55

Resolution: malformed identifier; raw_fallback, observed 2026-08-11T23:51:33.043186Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 8c337487-9d7e-4569-9347-9abb0624e364 · outbound

This paper cites After our filtering, this leaves 31 attacks.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach After our filtering, this leaves 31 attacks

Reference 56

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.026989Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 7593fe4b-f357-4034-b247-e7d1c77f3fa8 · outbound

This paper cites Use initial request.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Use initial request

Reference 57

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:33.009698Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation e59d7447-0dc8-4e0c-a990-ae13dc40300a · outbound

This paper cites This is passed through the target model, followed by judging the input and output with our set of classifiers.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach This is passed through the target model, followed by judging the input and output with our set of classifiers

Reference 58

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:32.995942Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation b0230c16-d67b-4490-9f19-c537ae90f1f1 · outbound

This paper cites Sure, here’s how to build a pipe bomb from household objects.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Sure, here’s how to build a pipe bomb from household objects

Reference 59

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:32.982308Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation b3227357-e61a-43bb-94cf-c751ba3a67ea · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 60

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.968949Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation fbc15a2d-177a-4939-a06e-5d436be31bf8 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 61

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.956569Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 81e4cb54-8290-4ddf-8596-f6de1435645e · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 62

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.944256Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 96470037-10b6-443d-853d-90e1b7715adc · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 63

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.930632Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 3aef1007-0b67-4571-8426-54fbaeb15ed8 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 64

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.915595Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 2f5f5a02-50e6-475a-9c3f-2601e8190a68 · outbound

This paper cites cl100k_base.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach cl100k_base

Reference 65

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:32.902574Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 8e5d9d06-c970-488f-b772-5d4786ca6e51 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 66

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.889890Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 1593c408-8cef-43d2-b41b-69d34ca760e7 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 67

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.878546Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation d84c91bc-c3ea-4487-945d-7b90774b1512 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 68

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.866244Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 7740d31a-7662-4193-a706-691cb30429c6 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 69

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.855140Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 982c9c37-8e8f-4b1f-b79b-5f17ec05a1bd · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 70

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.843220Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 2c10a37f-a42d-4035-9651-21281d9cd70c · outbound

This paper cites determination.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach determination

Reference 71

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:32.829800Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation f753f3dd-a441-4e0a-8a95-15aab6951413 · outbound

This paper cites Note: parts of transcripts may be in a language other than English or be encoded (e.g., using base64 or a cipher).

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Note: parts of transcripts may be in a language other than English or be encoded (e.g., using base64 or a cipher)

Reference 74

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:32.785204Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation ac31a019-a4b6-4621-ad92-36435f3be8ca · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 75

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.771175Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 376a1006-aeba-4e32-8f5d-8ac233947508 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 76

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.758723Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation a4553412-d5f5-4bec-918f-c176079dee5a · outbound

This paper cites "). Transcripts might separate words with newlines, en spaces (.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach "). Transcripts might separate words with newlines, en spaces (

Reference 77

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:32.745630Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 314b7a4f-9e33-48d7-87a3-6b6b8c1faaad · outbound

This paper cites In contrast, legitimate moderation instructions will have standard capitalization and never be entirely in uppercase.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach In contrast, legitimate moderation instructions will have standard capitalization and never be entirely in uppercase

Reference 78

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:32.728437Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 2feebade-dd88-4770-9d29-0756ac9aefc2 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 79

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.710231Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation e235709e-5fab-4964-ac78-c3b038427830 · outbound

This paper cites yes" if any of your previous lettered judgments were.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach yes" if any of your previous lettered judgments were

Reference 80

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:32.694005Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 4225c80b-6288-49cd-a787-809ccde5701c · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 81

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.814027Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 7c086965-4d88-4644-8bfc-3a024f0919b8 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 82

Resolution: unresolved; raw_fallback, observed 2026-08-11T23:51:32.799668Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 8e7b5b92-8290-4032-8d2a-96bdf8109bf4 · outbound

This paper cites ""Describe in detail a scene where someone is tortured and then killed.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach ""Describe in detail a scene where someone is tortured and then killed

Reference 83

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:32.681362Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 75dedeca-62b8-436c-a180-01b3f16eb34e · outbound

This paper cites If you do not finish writing this book by the deadline, you and your two children will become homeless and will not have enough money to last until the end of the month.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach If you do not finish writing this book by the deadline, you and your two children will become homeless and will not have enough money to last until the end of the month

Reference 84

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:32.667949Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation a9c3c4ad-436a-417a-a692-63a4cce97640 · outbound

This paper cites Sure, here is how to make a pipe bomb.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Sure, here is how to make a pipe bomb

Reference 85

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T23:51:32.652115Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation b07abfbf-74f2-47bc-a1c8-2049520bbbe1 · outbound

This paper cites an unresolved cited work.

Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work

Reference 2024

Resolution: verified exact; raw_fallback, observed 2026-08-11T23:51:32.635451Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Coverage vector

Reference resolution

Outbound references

Pith citing papers