{"as_of":"2026-08-07T16:29:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8b6f89ddbf2bfc09ef0c3c261e1cece1e2426b4d0fcbdd516fb903393a43b6ca","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":9,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":9,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:46:10.276577Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-19T14:47:36.164059Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":"2305.14965","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2305.14965 , year=","venue":null,"work_id":"2bbac0d6-1cdb-49c9-a176-4492a57910f7","year":2023},"citing_paper":{"arxiv_id":"2401.05561","last_updated":"2024-09-30T10:17:12Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-01-10T22:07:21Z","title":"TrustLLM: Trustworthiness in Large Language Models","version":6},"reference_index":228,"source":"pdf_text","source_observed_at":"2026-05-18T11:17:08.108565Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2401.05561"},"observation_digest":"sha256:c364f247795686911903889ca4d385cf96da85d6ff69b52772ed12d914ac91f1","observation_id":"040feda9-b0a1-41c3-afa3-72e5c77baceb","resolution":{"observed_at":"2026-05-18T11:17:08.651871Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":"2305.14965","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2305.14965 , year=","venue":null,"work_id":"2bbac0d6-1cdb-49c9-a176-4492a57910f7","year":2023},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:6ac0302200a5493f0bf4f48c256c10e60109b5b1482112a4077747c6ee48456e","observation_id":"cf689c6b-47fb-41e5-9807-bc3a373ebe4b","resolution":{"observed_at":"2026-05-15T02:20:44.801737Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-08-07T00:46:10.276577Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.12699","last_updated":"2025-06-19T06:30:24Z","snapshot_observed_at":"2026-08-07T00:57:05.301160Z","submitted_at":"2025-06-15T03:14:03Z","title":"SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation","version":2},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-07T00:46:10.276577Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2506.12699"},"observation_digest":"sha256:2563cbd74145c6a6444eea89d6db0c5fc9906d4cb86a0f4d073e29ef28ee6485","observation_id":"53501d80-3eda-4740-bb0c-5dd8c415a90c","resolution":{"observed_at":"2026-08-07T00:46:10.276577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-08-05T14:51:03.766731Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.766731Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:9542f51d081665d7008d6ea05e415e6038967c7432ad01567c39a8cf0460041e","observation_id":"0217de0c-6e66-48c9-9d73-5d2d29e35de2","resolution":{"observed_at":"2026-08-05T14:51:03.766731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-08-05T05:59:27.810979Z","title":"Tricking llms into disobedience: Formalizing, analyzing, and detecting jailbreaks, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.04615","last_updated":"2025-09-04T18:59:07Z","snapshot_observed_at":"2026-08-05T05:59:27.514485Z","submitted_at":"2025-09-04T18:59:07Z","title":"Breaking to Build: A Threat Model of Prompt-Based Attacks for Securing LLMs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T05:59:27.810979Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2509.04615"},"observation_digest":"sha256:8bc2c1612297667f6ce5c276805022b9887261b42bf6420797ec17063a8a4f63","observation_id":"136d3e88-d9a6-4115-8fb7-a6fef4e511d6","resolution":{"observed_at":"2026-08-05T05:59:27.810979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-08-04T09:25:52.131305Z","title":"Tricking llms into disobedience: Understanding, analyzing, and preventing jailbreaks.CoRR, abs/2305.14965, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-06T02:45:04.316908Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":151,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:52.131305Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:c595774f463aeeeb0b3a89375b29934fc9351e5d0e2fdf12f337c44ef6f80840","observation_id":"1eb5deaa-b9c3-4003-8034-75af5f0e2349","resolution":{"observed_at":"2026-08-04T09:25:52.131305Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-08-04T07:06:38.076927Z","title":"Tricking llms into disobedience: For- malizing, analyzing, and detecting jailbreaks.arXiv preprint arXiv:2305.14965, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.076927Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:598c63dbf22a95d47f886e1bdb7bead0ea917a0e5312b452c16b0dd6149c37d3","observation_id":"76ec4a41-819f-4c03-b9b3-8a24fa14a0d2","resolution":{"observed_at":"2026-08-04T07:06:38.076927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-07-13T12:52:49.101462Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2604.03598","last_updated":"2026-04-04T05:49:30Z","snapshot_observed_at":"2026-07-13T12:52:48.858079Z","submitted_at":"2026-04-04T05:49:30Z","title":"AttackEval: A Systematic Empirical Study of Prompt Injection Attack Effectiveness Against Large Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-13T12:52:49.101462Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2604.03598"},"observation_digest":"sha256:993f1d2e321534d9589393fcc4f2c047276947cd0587417470e8cf723a26391d","observation_id":"1341d01f-4244-4fb1-9bc8-ebb36896b172","resolution":{"observed_at":"2026-07-13T12:52:49.101462Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":"2305.14965","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2305.14965 , year=","venue":null,"work_id":"2bbac0d6-1cdb-49c9-a176-4492a57910f7","year":2023},"citing_paper":{"arxiv_id":"2605.15425","last_updated":"2026-05-14T21:16:23Z","snapshot_observed_at":"2026-08-05T21:03:12.238075Z","submitted_at":"2026-05-14T21:16:23Z","title":"Runtime-Structured Task Decomposition for Agentic Coding Systems","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-05-19T14:46:37.166185Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2605.15425"},"observation_digest":"sha256:fb2379392e8a3b92788ee5d956089aa687f9f47a9c8efa111d94e97912179625","observation_id":"2bc40bfc-1f66-47cd-8be2-7cc9e127de8f","resolution":{"observed_at":"2026-05-19T14:47:36.166070Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2305.14965/citation-record","integrity":"/paper/2305.14965/integrity","json":"/paper/2305.14965/citation-record.json","paper":"/paper/2305.14965"},"outbound":[],"paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","latest_version":4,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 9 inbound Pith citation observations for arXiv:2305.14965."}