{"as_of":"2026-08-08T02:14:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c83a72d07384363da4010424a4b05efac844fd22379ed86c0acf12608d44e4af","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":27,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":27,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":27,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":27,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:37:27.312304Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":23,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":"2304.05197","doi":"10.48550/arxiv.2304.05197","metadata_source":"arxiv_reference","pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","venue":"arXiv (Cornell University)","work_id":"7cb35d81-5362-4753-874b-a92705c42c6e","year":2023},"citing_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-14T18:17:42.752997Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2307.02483"},"observation_digest":"sha256:b10426a6adcf34b647f1c052293c9aba55ba6c46e903245613947f7ecbcf2e5d","observation_id":"204da7a1-74fc-4dbf-8820-6ce367f02093","resolution":{"observed_at":"2026-05-14T18:17:42.875300Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":"2304.05197","doi":"10.48550/arxiv.2304.05197","metadata_source":"arxiv_reference","pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","venue":"arXiv (Cornell University)","work_id":"7cb35d81-5362-4753-874b-a92705c42c6e","year":2023},"citing_paper":{"arxiv_id":"2308.03825","last_updated":"2024-05-15T12:06:31Z","snapshot_observed_at":"2026-07-06T16:03:34.432602Z","submitted_at":"2023-08-07T16:55:20Z","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-17T08:39:28.047394Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2308.03825"},"observation_digest":"sha256:0a66d984cbddea3c040c736b3fcef6cecac3e28bb5d8cf2b05bb7206c58d947b","observation_id":"491ec865-d4aa-4cee-a1d3-67c6f26efb66","resolution":{"observed_at":"2026-05-17T08:39:28.187529Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":"2304.05197","doi":"10.48550/arxiv.2304.05197","metadata_source":"arxiv_reference","pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","venue":"arXiv (Cornell University)","work_id":"7cb35d81-5362-4753-874b-a92705c42c6e","year":2023},"citing_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-05-13T23:24:39.835347Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2309.00614"},"observation_digest":"sha256:cd5323d1d505fc196baeadfe60cb9b0d2c4bad51fcc76691bb47e659f4d8a1e8","observation_id":"22aa7f8a-75c6-4e1c-8bb8-b3e5138b9891","resolution":{"observed_at":"2026-05-13T23:24:40.042862Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":"2304.05197","doi":"10.48550/arxiv.2304.05197","metadata_source":"arxiv_reference","pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","venue":"arXiv (Cornell University)","work_id":"7cb35d81-5362-4753-874b-a92705c42c6e","year":2023},"citing_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-15T06:25:20.966510Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2309.10253"},"observation_digest":"sha256:8b425ab640b0517533110e5512e55cfe87c62de61b0c3da3c9076a66a0f03aa4","observation_id":"87765850-f45c-4693-8675-f0980c4c5c32","resolution":{"observed_at":"2026-05-15T06:25:21.059948Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":"2304.05197","doi":"10.48550/arxiv.2304.05197","metadata_source":"arxiv_reference","pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","venue":"arXiv (Cornell University)","work_id":"7cb35d81-5362-4753-874b-a92705c42c6e","year":2023},"citing_paper":{"arxiv_id":"2310.06987","last_updated":"2023-10-10T20:15:54Z","snapshot_observed_at":"2026-07-06T16:30:46.321160Z","submitted_at":"2023-10-10T20:15:54Z","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-16T22:00:51.487120Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2310.06987"},"observation_digest":"sha256:2ecd3a1080d726e0018d737fdd9c6990765a6ec08f73ba146dfebd87c0afd2a8","observation_id":"0208d8b9-342c-45c0-b777-fadf982d748a","resolution":{"observed_at":"2026-05-16T22:00:51.560693Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":"2304.05197","doi":"10.48550/arxiv.2304.05197","metadata_source":"arxiv_reference","pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","venue":"arXiv (Cornell University)","work_id":"7cb35d81-5362-4753-874b-a92705c42c6e","year":2023},"citing_paper":{"arxiv_id":"2401.05561","last_updated":"2024-09-30T10:17:12Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-01-10T22:07:21Z","title":"TrustLLM: Trustworthiness in Large Language Models","version":6},"reference_index":277,"source":"pdf_text","source_observed_at":"2026-05-18T11:17:08.108565Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2401.05561"},"observation_digest":"sha256:d8d8ddb85ccdee49d1025d4c02883e21e9860a58cce6d78960bcf1fc70fbd808","observation_id":"26fc97cf-6200-4b3e-b9f1-a3940bb92306","resolution":{"observed_at":"2026-05-18T11:17:08.792092Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":"2304.05197","doi":"10.48550/arxiv.2304.05197","metadata_source":"arxiv_reference","pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","venue":"arXiv (Cornell University)","work_id":"7cb35d81-5362-4753-874b-a92705c42c6e","year":2023},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:e3188595634f92f6a58ce9f67fc6e67e986c96c83458a9341402fbba1e612559","observation_id":"2af2417c-cfaa-4663-8bfb-f254c35ef1df","resolution":{"observed_at":"2026-05-15T02:20:44.714757Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":"2304.05197","doi":"10.48550/arxiv.2304.05197","metadata_source":"arxiv_reference","pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","venue":"arXiv (Cornell University)","work_id":"7cb35d81-5362-4753-874b-a92705c42c6e","year":2023},"citing_paper":{"arxiv_id":"2502.01241","last_updated":"2026-04-13T12:56:05Z","snapshot_observed_at":"2026-07-06T20:30:12.663808Z","submitted_at":"2025-02-03T11:02:30Z","title":"Peering Behind the Shield: Guardrail Identification in Large Language Models","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-23T03:45:14.234545Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2502.01241"},"observation_digest":"sha256:27ccbb748dbdc9bdc8bfd3e80075ba994aa9b8bd8193dd957c558683163e8a02","observation_id":"2df84383-6af1-4717-a0b3-27be0b89e95e","resolution":{"observed_at":"2026-05-23T03:45:21.377951Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-07T15:37:27.312304Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.14585","last_updated":"2025-09-04T11:31:24Z","snapshot_observed_at":"2026-08-07T21:21:35.164318Z","submitted_at":"2025-05-20T16:40:09Z","title":"Context Reasoner: Incentivizing Reasoning Capability for Contextualized Privacy and Safety Compliance via Reinforcement Learning","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T15:37:27.312304Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2505.14585"},"observation_digest":"sha256:ae76e82ed66f687f963c8bdb09bcb913aa25b246d1897099d80fdfefae7c75c8","observation_id":"f7e18a7c-af09-43e7-a55d-7dc2e77a5963","resolution":{"observed_at":"2026-08-07T15:37:27.312304Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-07T14:27:05.763058Z","title":"Multi-step jailbreaking privacy attacks on chatgpt,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18864","last_updated":"2025-05-24T20:46:36Z","snapshot_observed_at":"2026-08-08T00:24:14.677549Z","submitted_at":"2025-05-24T20:46:36Z","title":"Audio Jailbreak Attacks: Exposing Vulnerabilities in SpeechGPT in a White-Box Framework","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T14:27:05.763058Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2505.18864"},"observation_digest":"sha256:60fb28b9b96d51dd6a6ca03cc77ba6e1e049cc24470b5949ac93caf71b370599","observation_id":"f0a5b696-8e6d-41ff-a1ee-460b73b5c2e8","resolution":{"observed_at":"2026-08-07T14:27:05.763058Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-07T13:28:17.454592Z","title":"Multi-step jailbreaking privacy attacks on ChatGPT","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-07T13:20:45.414243Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:17.454592Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:4e792e91764b3e8f610892360f5cb65b835cd63d4ca89b08c1ac03c56d7fa789","observation_id":"227d56cf-4a72-4ca8-954f-adc32a8a8f80","resolution":{"observed_at":"2026-08-07T13:28:17.454592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-07T12:34:34.521629Z","title":"Multi-step jailbreaking privacy attacks on chatgpt.arXiv preprint arXiv:2304.05197, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.24232","last_updated":"2025-05-30T05:48:50Z","snapshot_observed_at":"2026-08-07T12:26:05.850027Z","submitted_at":"2025-05-30T05:48:50Z","title":"From Hallucinations to Jailbreaks: Rethinking the Vulnerability of Large Foundation Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T12:34:34.521629Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2505.24232"},"observation_digest":"sha256:0c222114ef3eeb0240acdf553c54ef982540e862502c5b72086fe7c3eb4984fc","observation_id":"b71f90d3-ed83-411a-953f-8f89b9ec73c1","resolution":{"observed_at":"2026-08-07T12:34:34.521629Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-07T00:46:10.159449Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.159449Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:b0d6c3cf8018490b87ef58849dc61f6cff699ee97d186412407c418a1975685f","observation_id":"8ee003a4-d249-40a4-8d2b-ffcf7a084972","resolution":{"observed_at":"2026-08-07T00:46:10.159449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-06T23:20:53.545039Z","title":"Multi-step jailbreaking privacy attacks on chatgpt.arXiv preprint arXiv:2304.051972023","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.18543","last_updated":"2026-05-25T10:15:56Z","snapshot_observed_at":"2026-08-06T23:13:30.961405Z","submitted_at":"2025-06-23T11:53:31Z","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T23:20:53.545039Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2506.18543"},"observation_digest":"sha256:eafab8df3703ef20087863937bcb6a70e40ce7edd0aecb05c4b7d27bcf122d8b","observation_id":"2ec64b4f-08f6-42c6-a595-c514a2f21e81","resolution":{"observed_at":"2026-08-06T23:20:53.545039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-06T23:20:21.849271Z","title":"Multi-step jailbreaking privacy attacks on chatgpt,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.18796","last_updated":"2025-06-23T16:03:32Z","snapshot_observed_at":"2026-08-06T23:13:21.864743Z","submitted_at":"2025-06-23T16:03:32Z","title":"Context-Aware CodeLLM Eviction for AI-assisted Coding","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T23:20:21.849271Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2506.18796"},"observation_digest":"sha256:27e586a696bfe3f5ba1fa35db9961108ac5e258de4e14b7ce234b6b698904d83","observation_id":"40754a9e-14de-4b14-8c84-e60493fb549b","resolution":{"observed_at":"2026-08-06T23:20:21.849271Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-06T20:36:46.757676Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02332","last_updated":"2025-08-19T04:18:58Z","snapshot_observed_at":"2026-08-06T20:29:35.265529Z","submitted_at":"2025-07-03T05:50:50Z","title":"PII Jailbreaking in LLMs via Activation Steering Reveals Personal Information Leakage","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-06T20:36:46.757676Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2507.02332"},"observation_digest":"sha256:1b455836c1e6fe90d39b6c680868b9935410a138e12e7475f78921eb67fa9d83","observation_id":"56c20140-73a0-4ff4-9ef4-3d80d0683b38","resolution":{"observed_at":"2026-08-06T20:36:46.757676Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-06T21:05:19.409556Z","title":"Multi-step jailbreaking privacy attacks on chatgpt","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02990","last_updated":"2025-07-01T18:00:04Z","snapshot_observed_at":"2026-08-06T20:57:35.466498Z","submitted_at":"2025-07-01T18:00:04Z","title":"`For Argument's Sake, Show Me How to Harm Myself!': Jailbreaking LLMs in Suicide and Self-Harm Contexts","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T21:05:19.409556Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2507.02990"},"observation_digest":"sha256:4f37004365275804d995eb8ded5b42746c8a93b8a0c4574dd5c4c023db12eb45","observation_id":"3284897d-dcb6-4f19-94b1-f3889c235309","resolution":{"observed_at":"2026-08-06T21:05:19.409556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-06T19:43:28.259535Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.05307","last_updated":"2025-07-07T09:11:16Z","snapshot_observed_at":"2026-08-07T04:03:58.663760Z","submitted_at":"2025-07-07T09:11:16Z","title":"ASSURE: Metamorphic Testing for AI-powered Browser Extensions","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T19:43:28.259535Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2507.05307"},"observation_digest":"sha256:fc259f99c31b4350e72c21fa402f2a85641471b5ddc4630b1eaaaa9a8f33484d","observation_id":"dff63c40-38df-4b90-87f7-1e84646346d8","resolution":{"observed_at":"2026-08-06T19:43:28.259535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-06T14:17:34.033208Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.19598","last_updated":"2025-07-25T18:11:10Z","snapshot_observed_at":"2026-08-06T14:36:53.214750Z","submitted_at":"2025-07-25T18:11:10Z","title":"MOCHA: Are Code Language Models Robust Against Multi-Turn Malicious Coding Prompts?","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-06T14:17:34.033208Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2507.19598"},"observation_digest":"sha256:7cf562faf3e3b05f04a6e064317489ef78e7209dc82e4e747872e3b5cd8ec894","observation_id":"71226ad7-b208-4b86-9b7a-fdf73dd78354","resolution":{"observed_at":"2026-08-06T14:17:34.033208Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T20:31:44.379657Z","title":"Multi-step jailbreaking privacy attacks on chatgpt","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-07T14:42:27.926127Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":125,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:44.379657Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:e0b14b2616f706e481ef70844a75bfae395c9525b59fad31f26a4659559c8432","observation_id":"5e00bf6b-3ea3-49c7-8290-047fa9be4ff3","resolution":{"observed_at":"2026-08-05T20:31:44.379657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":"2304.05197","doi":"10.48550/arxiv.2304.05197","metadata_source":"arxiv_reference","pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","venue":"arXiv (Cornell University)","work_id":"7cb35d81-5362-4753-874b-a92705c42c6e","year":2023},"citing_paper":{"arxiv_id":"2508.20325","last_updated":"2026-05-11T14:12:43Z","snapshot_observed_at":"2026-07-06T22:19:48.389341Z","submitted_at":"2025-08-28T00:07:10Z","title":"GUARD: Guideline Upholding Test through Adaptive Role-play and Jailbreak Diagnostics for LLMs","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-18T21:34:51.665401Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2508.20325"},"observation_digest":"sha256:1cf5c597beec3c13f3e0ae7be470fdc8c6587b90cdcbc3ddd3513e0daa7e7504","observation_id":"ef35f386-b49d-4051-89c1-c0d2990413b2","resolution":{"observed_at":"2026-05-18T21:36:52.522996Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T13:42:42.111230Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.00391","last_updated":"2025-08-30T07:04:29Z","snapshot_observed_at":"2026-08-07T20:54:59.881714Z","submitted_at":"2025-08-30T07:04:29Z","title":"The Resurgence of GCG Adversarial Attacks on Large Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T13:42:42.111230Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2509.00391"},"observation_digest":"sha256:df441ad7fac5c068b7d8e4f947771e85f1d4aa152f9013e351cc81dfc46de7ad","observation_id":"0531ff80-7e34-4b9b-9aa5-b094f3650f56","resolution":{"observed_at":"2026-08-05T13:42:42.111230Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T10:44:10.497463Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.03787","last_updated":"2025-09-04T00:45:58Z","snapshot_observed_at":"2026-08-07T22:51:24.319569Z","submitted_at":"2025-09-04T00:45:58Z","title":"Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T10:44:10.497463Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2509.03787"},"observation_digest":"sha256:6e10246228904eb2a1c79d43c2ee851c0fe50308cab560458dffcb81498a4901","observation_id":"1fc3e1a8-895c-4e0f-8215-22f8b45590cc","resolution":{"observed_at":"2026-08-05T10:44:10.497463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":"2304.05197","doi":"10.48550/arxiv.2304.05197","metadata_source":"arxiv_reference","pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","venue":"arXiv (Cornell University)","work_id":"7cb35d81-5362-4753-874b-a92705c42c6e","year":2023},"citing_paper":{"arxiv_id":"2510.16558","last_updated":"2026-04-27T18:24:07Z","snapshot_observed_at":"2026-07-06T22:33:28.866887Z","submitted_at":"2025-10-18T16:09:05Z","title":"A First Look at the Security Issues in the Model Context Protocol Ecosystem","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-18T06:10:58.928119Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2510.16558"},"observation_digest":"sha256:88ba7e4ed6d2befa29b4aa4be99e1d4ecdd052049952791e9ce7464bf3086dbd","observation_id":"eae64ffb-36c8-45b9-9b02-97bbad674b2b","resolution":{"observed_at":"2026-05-18T06:12:26.285817Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":"2304.05197","doi":"10.48550/arxiv.2304.05197","metadata_source":"arxiv_reference","pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","venue":"arXiv (Cornell University)","work_id":"7cb35d81-5362-4753-874b-a92705c42c6e","year":2023},"citing_paper":{"arxiv_id":"2603.04459","last_updated":"2026-05-14T18:30:07Z","snapshot_observed_at":"2026-07-06T22:47:50.848191Z","submitted_at":"2026-03-03T09:10:45Z","title":"Benchmark of Benchmarks: Unpacking Influence and Code Repository Quality in LLM Safety Benchmarks","version":3},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-21T12:09:55.500940Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2603.04459"},"observation_digest":"sha256:6dd50febed6ab0e00065e1521f30cbc9993dedca5a6bafd7a521843c49c038e1","observation_id":"a8cd7965-2239-46e6-80de-95c139b66f82","resolution":{"observed_at":"2026-05-21T12:10:06.533915Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":"2304.05197","doi":"10.48550/arxiv.2304.05197","metadata_source":"arxiv_reference","pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","venue":"arXiv (Cornell University)","work_id":"7cb35d81-5362-4753-874b-a92705c42c6e","year":2023},"citing_paper":{"arxiv_id":"2606.30783","last_updated":"2026-06-29T18:11:17Z","snapshot_observed_at":"2026-07-07T00:04:34.491408Z","submitted_at":"2026-06-29T18:11:17Z","title":"Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense","version":1},"reference_index":108,"source":"arxiv_source","source_observed_at":"2026-07-01T01:44:07.700127Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2606.30783"},"observation_digest":"sha256:d60e24e633f46b5bbc445a3e764e04af785406bb4eac7d6e10c751af74635d8b","observation_id":"9704c824-fe30-4529-a2bf-ebd943e2ca1c","resolution":{"observed_at":"2026-07-01T12:45:44.876166Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":"2304.05197","doi":"10.48550/arxiv.2304.05197","metadata_source":"arxiv_reference","pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","venue":"arXiv (Cornell University)","work_id":"7cb35d81-5362-4753-874b-a92705c42c6e","year":2023},"citing_paper":{"arxiv_id":"2606.31208","last_updated":"2026-06-30T06:40:36Z","snapshot_observed_at":"2026-08-01T15:26:30.335537Z","submitted_at":"2026-06-30T06:40:36Z","title":"Probing Memorization of Tabular In-Context Learning","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-07-01T06:37:44.328625Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2606.31208"},"observation_digest":"sha256:1b81af77e278aedf4d478d2f253e9a03094bb221f7a7ce629b8ed7b68ac47d7e","observation_id":"cea1207f-3ba8-4970-8da3-33735677e940","resolution":{"observed_at":"2026-07-01T09:25:40.859090Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2304.05197/citation-record","integrity":"/paper/2304.05197/integrity","json":"/paper/2304.05197/citation-record.json","paper":"/paper/2304.05197"},"outbound":[],"paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","latest_version":3,"primary_category":"cs.CL","snapshot_observed_at":"2026-07-06T15:14:24.794122Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 27 inbound Pith citation observations for arXiv:2304.05197."}