{"as_of":"2026-08-07T05:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4ce3f3b419c88aea3fafdb04dd358f51829c917b20aa7b8dafe8c3bf33446f46","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":17,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T14:45:42.853648Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":25,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":"2306.15447","doi":"10.48550/arxiv.2306.15447","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":"arXiv (Cornell University)","work_id":"cbf9eae3-40c5-419a-9f5b-335eab5a2bb2","year":2023},"citing_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-24T07:42:09.112946Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2307.15043"},"observation_digest":"sha256:610be1d6ad1e110fe60da4d29e9b127f988161ff1fcb7eed064b75bf428e503a","observation_id":"70b52c00-5d1e-4019-8c6b-dbede855f858","resolution":{"observed_at":"2026-05-24T07:44:08.583092Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":"2306.15447","doi":"10.48550/arxiv.2306.15447","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":"arXiv (Cornell University)","work_id":"cbf9eae3-40c5-419a-9f5b-335eab5a2bb2","year":2023},"citing_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-05-13T23:24:39.835347Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2309.00614"},"observation_digest":"sha256:b3f5d2ecfd9425f9adb7e011ebe7c1a92168e65d749c0e3f1339ff992c96e1a7","observation_id":"85a81cbd-593d-4fd0-b8d4-ab1c37255d06","resolution":{"observed_at":"2026-05-13T23:24:40.058993Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":"2306.15447","doi":"10.48550/arxiv.2306.15447","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":"arXiv (Cornell University)","work_id":"cbf9eae3-40c5-419a-9f5b-335eab5a2bb2","year":2023},"citing_paper":{"arxiv_id":"2310.02446","last_updated":"2024-01-27T22:54:52Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-03T21:30:56Z","title":"Low-Resource Languages Jailbreak GPT-4","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-17T09:24:13.911401Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2310.02446"},"observation_digest":"sha256:f6caad9cc8c3cbacffc0a2956d3c0dc524e5fd368be2e3b1880c60c2c574ac5d","observation_id":"aaa59a1f-99e0-40dd-96fc-eb6c8f354cf4","resolution":{"observed_at":"2026-05-17T09:24:14.078179Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":"2306.15447","doi":"10.48550/arxiv.2306.15447","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":"arXiv (Cornell University)","work_id":"cbf9eae3-40c5-419a-9f5b-335eab5a2bb2","year":2023},"citing_paper":{"arxiv_id":"2310.03684","last_updated":"2024-06-11T19:02:52Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:01:53Z","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","version":4},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-14T17:11:00.639293Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2310.03684"},"observation_digest":"sha256:1c7e030bb6ef67281a07998e6f8b56ed0359b962a13ad05c7afb83eef5140f59","observation_id":"aac2d768-ee6f-446e-9d45-521ced7a6b5e","resolution":{"observed_at":"2026-05-14T17:11:00.979943Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":"2306.15447","doi":"10.48550/arxiv.2306.15447","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":"arXiv (Cornell University)","work_id":"cbf9eae3-40c5-419a-9f5b-335eab5a2bb2","year":2023},"citing_paper":{"arxiv_id":"2310.03744","last_updated":"2024-05-15T19:22:44Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:59:56Z","title":"Improved Baselines with Visual Instruction Tuning","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-12T19:11:33.783746Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2310.03744"},"observation_digest":"sha256:ff9fa498f8d766f582ee2aa421a41ae7448af56a19a7f26b9e88d6c3031ab219","observation_id":"3403e9d2-551a-403b-8b32-e16d0ad468b5","resolution":{"observed_at":"2026-05-12T19:11:34.013332Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":"2306.15447","doi":"10.48550/arxiv.2306.15447","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":"arXiv (Cornell University)","work_id":"cbf9eae3-40c5-419a-9f5b-335eab5a2bb2","year":2023},"citing_paper":{"arxiv_id":"2310.06987","last_updated":"2023-10-10T20:15:54Z","snapshot_observed_at":"2026-07-06T16:30:46.321160Z","submitted_at":"2023-10-10T20:15:54Z","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-16T22:00:51.487120Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2310.06987"},"observation_digest":"sha256:8cb404d401ab3f6a83c3c711bba81a70c15c15fa655dfd797f1beccd146fe536","observation_id":"98085e8b-d96b-4ffd-a0be-7156b031366a","resolution":{"observed_at":"2026-05-16T22:00:51.514305Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":"2306.15447","doi":"10.48550/arxiv.2306.15447","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":"arXiv (Cornell University)","work_id":"cbf9eae3-40c5-419a-9f5b-335eab5a2bb2","year":2023},"citing_paper":{"arxiv_id":"2311.17035","last_updated":"2023-11-28T18:47:03Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-11-28T18:47:03Z","title":"Scalable Extraction of Training Data from (Production) Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-15T19:00:46.708242Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2311.17035"},"observation_digest":"sha256:1ba77241dda90fc5af19b92b0085da7bbb7b7d01bf84afd2e446b4141f4bbf88","observation_id":"8ddb4cf7-b71d-4e9a-bb31-fda093a272d0","resolution":{"observed_at":"2026-05-15T19:00:46.800869Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":"2306.15447","doi":"10.48550/arxiv.2306.15447","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":"arXiv (Cornell University)","work_id":"cbf9eae3-40c5-419a-9f5b-335eab5a2bb2","year":2023},"citing_paper":{"arxiv_id":"2412.14113","last_updated":"2026-05-14T17:15:02Z","snapshot_observed_at":"2026-07-06T20:09:28.763595Z","submitted_at":"2024-12-18T17:58:58Z","title":"Adversarial Hubness in Multi-Modal Retrieval","version":4},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-23T06:39:36.039613Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2412.14113"},"observation_digest":"sha256:7d9f4a1a2495e518023ab5375e5d3371cf5abf5cb681710ed1ae3ebd57995195","observation_id":"df9b70f8-16a7-438d-89c7-9cbe07c6315d","resolution":{"observed_at":"2026-05-23T06:42:39.688561Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-06T14:45:42.853648Z","title":"Are aligned neural networks adversarially aligned?, 2023.URL https://arxiv","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.18105","last_updated":"2025-07-24T05:30:54Z","snapshot_observed_at":"2026-08-06T14:36:17.225757Z","submitted_at":"2025-07-24T05:30:54Z","title":"Understanding the Supply Chain and Risks of Large Language Model Applications","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-06T14:45:42.853648Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2507.18105"},"observation_digest":"sha256:980c3216f060e190f2b9db91e738c5dc77738bf84e605c60c62c284678b8aea6","observation_id":"f9454b0b-8c8d-44ad-898e-cd51dce5e8ea","resolution":{"observed_at":"2026-08-06T14:45:42.853648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T19:39:09.544533Z","title":"Are aligned neural networks adversarially aligned? arXiv preprint arXiv:2306.15447, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.12175","last_updated":"2025-08-16T22:56:51Z","snapshot_observed_at":"2026-08-06T23:10:25.204698Z","submitted_at":"2025-08-16T22:56:51Z","title":"Invitation Is All You Need! Promptware Attacks Against LLM-Powered Assistants in Production Are Practical and Dangerous","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T19:39:09.544533Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2508.12175"},"observation_digest":"sha256:9b1a74730ce6701dd1c1b1017d2827c3bfdfc105b16953df6b2277e1ada0ffdc","observation_id":"654a4353-6e73-416b-9b94-a353778e90be","resolution":{"observed_at":"2026-08-05T19:39:09.544533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-07-13T12:52:49.101462Z","title":"Carlini, M","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2604.03598","last_updated":"2026-04-04T05:49:30Z","snapshot_observed_at":"2026-07-13T12:52:48.858079Z","submitted_at":"2026-04-04T05:49:30Z","title":"AttackEval: A Systematic Empirical Study of Prompt Injection Attack Effectiveness Against Large Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-13T12:52:49.101462Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2604.03598"},"observation_digest":"sha256:eeb1f630923c84a80a82fdbf4d0026d6b5534f16e90575c88a451d56df3dd123","observation_id":"4ad71a2e-fd11-4cfe-b04f-9a463724be41","resolution":{"observed_at":"2026-07-13T12:52:49.101462Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":"2306.15447","doi":"10.48550/arxiv.2306.15447","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":"arXiv (Cornell University)","work_id":"cbf9eae3-40c5-419a-9f5b-335eab5a2bb2","year":2023},"citing_paper":{"arxiv_id":"2605.01449","last_updated":"2026-05-02T13:56:50Z","snapshot_observed_at":"2026-08-03T12:34:05.607551Z","submitted_at":"2026-05-02T13:56:50Z","title":"VisInject: Disruption != Injection -- A Dual-Dimension Evaluation of Universal Adversarial Attacks on Vision-Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-09T14:24:48.999632Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2605.01449"},"observation_digest":"sha256:75497b934921eeec4d9603a0569671726569a0f7480269893b21575ade789a56","observation_id":"308e3d43-e2c8-4ec0-be1e-e0507397f344","resolution":{"observed_at":"2026-05-11T16:56:08.052543Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":"2306.15447","doi":"10.48550/arxiv.2306.15447","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":"arXiv (Cornell University)","work_id":"cbf9eae3-40c5-419a-9f5b-335eab5a2bb2","year":2023},"citing_paper":{"arxiv_id":"2605.04019","last_updated":"2026-05-05T17:43:52Z","snapshot_observed_at":"2026-07-06T23:16:49.553583Z","submitted_at":"2026-05-05T17:43:52Z","title":"Redefining AI Red Teaming in the Agentic Era: From Weeks to Hours","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-07T16:06:18.057868Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2605.04019"},"observation_digest":"sha256:00bfbf338762a1f25191fec855a26f03d4517362623ba5915b259673d0809fde","observation_id":"f2e3a91d-658d-45fc-b9f6-6ec9edc6e50c","resolution":{"observed_at":"2026-05-11T23:51:47.107368Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":"2306.15447","doi":"10.48550/arxiv.2306.15447","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":"arXiv (Cornell University)","work_id":"cbf9eae3-40c5-419a-9f5b-335eab5a2bb2","year":2023},"citing_paper":{"arxiv_id":"2605.10582","last_updated":"2026-05-11T13:54:26Z","snapshot_observed_at":"2026-08-06T09:00:38.839501Z","submitted_at":"2026-05-11T13:54:26Z","title":"Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-05-12T04:50:08.866969Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2605.10582"},"observation_digest":"sha256:2205ba24393310d88ffee7eeae7c13966d25ed5e3dbe9c7b80084e723e974171","observation_id":"10a509cc-6079-4212-9bb1-f9b74c54e56a","resolution":{"observed_at":"2026-05-12T05:51:27.599788Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":"2306.15447","doi":"10.48550/arxiv.2306.15447","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":"arXiv (Cornell University)","work_id":"cbf9eae3-40c5-419a-9f5b-335eab5a2bb2","year":2023},"citing_paper":{"arxiv_id":"2605.17310","last_updated":"2026-05-17T08:02:27Z","snapshot_observed_at":"2026-07-06T23:28:21.395050Z","submitted_at":"2026-05-17T08:02:27Z","title":"Attention Hijacking: Response Manipulation Across Queries in Vision-Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-20T14:25:10.603780Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2605.17310"},"observation_digest":"sha256:65980013d29e242303fa7eef3d2d6118f839851b034beb232b6b41e9016ff76f","observation_id":"ee06d903-7470-4563-a7eb-d91c51946392","resolution":{"observed_at":"2026-05-20T14:28:21.591740Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":"2306.15447","doi":"10.48550/arxiv.2306.15447","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":"arXiv (Cornell University)","work_id":"cbf9eae3-40c5-419a-9f5b-335eab5a2bb2","year":2023},"citing_paper":{"arxiv_id":"2605.21948","last_updated":"2026-05-21T03:28:06Z","snapshot_observed_at":"2026-07-06T23:32:20.708664Z","submitted_at":"2026-05-21T03:28:06Z","title":"SCI-Defense: Defending Manipulation Attacks from Generative Engine Optimization","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-22T07:43:00.837852Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2605.21948"},"observation_digest":"sha256:fc04cbf79fb71f7cbf5239010a04d3c676b160c099e96a84153a3662d586a4bd","observation_id":"532e644e-4b6d-4b0d-90e2-f46eb8df4150","resolution":{"observed_at":"2026-05-22T07:44:42.727058Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?","version":2},"cited_work":{"arxiv_id":"2306.15447","doi":"10.48550/arxiv.2306.15447","metadata_source":"arxiv_reference","pith_arxiv_id":"2306.15447","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods","venue":"arXiv (Cornell University)","work_id":"cbf9eae3-40c5-419a-9f5b-335eab5a2bb2","year":2023},"citing_paper":{"arxiv_id":"2606.07968","last_updated":"2026-06-06T03:52:27Z","snapshot_observed_at":"2026-07-06T23:47:33.680573Z","submitted_at":"2026-06-06T03:52:27Z","title":"RecurGuard: Runtime Monitoring for Reasoning-Token Consumption Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-06-27T19:45:30.671490Z"},"links":{"cited_paper":"/paper/2306.15447","citing_paper":"/paper/2606.07968"},"observation_digest":"sha256:a0b0ac119c40e328128bafd12ce507aa62d42c34e9bcaa0d51d5f7efd6b18f84","observation_id":"b061b0a4-61be-4f8d-8f3a-99216c013c0c","resolution":{"observed_at":"2026-07-02T21:27:24.527682Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2306.15447/citation-record","integrity":"/paper/2306.15447/integrity","json":"/paper/2306.15447/citation-record.json","paper":"/paper/2306.15447"},"outbound":[],"paper":{"arxiv_id":"2306.15447","last_updated":"2024-05-06T06:36:24Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-03T21:29:11.660688Z","submitted_at":"2023-06-26T17:18:44Z","title":"Are aligned neural networks adversarially aligned?"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 17 inbound Pith citation observations for arXiv:2306.15447."}