{"as_of":"2026-08-05T08:09:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a0dec73a670cebde9c1c119b2e55ece7a1cc0b96828383c66e12c99abffc2e1a","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":12,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T13:00:06.102923Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T19:50:11.224071Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":"2311.08268","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-07-04T19:50:11.224071Z","title":"arXiv preprint arXiv:2311.08268 (2023)","venue":null,"work_id":"dc102118-d85b-44e9-87d4-6094b6295e9b","year":2023},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:af105eef96a43ef40de6c7f6d6005ff830ee6af1d38fbf895b6e9edcb0833a7e","observation_id":"6947849b-6cc5-4ca0-a124-2d19663ebf95","resolution":{"observed_at":"2026-05-15T02:20:44.608746Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-08-04T13:00:06.102923Z","title":"A wolf in sheep’s clothing: Generalized nested jailbreak prompts can fool large language models easily","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.01359","last_updated":"2026-06-15T23:34:33Z","snapshot_observed_at":"2026-08-04T13:00:04.692528Z","submitted_at":"2025-10-01T18:38:20Z","title":"Breaking the Code: Security Assessment of AI Code Agents Through Systematic Jailbreaking Attacks","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T13:00:06.102923Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2510.01359"},"observation_digest":"sha256:ef4c516b97fde4d10a749b85da309cd3c70595a8eff125a020c4fc941640de82","observation_id":"9ee6ddb0-e0a9-48e5-ae2d-b078a54dcac5","resolution":{"observed_at":"2026-08-04T13:00:06.102923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":"2311.08268","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-07-04T19:50:11.224071Z","title":"arXiv preprint arXiv:2311.08268 (2023)","venue":null,"work_id":"dc102118-d85b-44e9-87d4-6094b6295e9b","year":2023},"citing_paper":{"arxiv_id":"2510.08592","last_updated":"2026-05-09T15:18:45Z","snapshot_observed_at":"2026-07-06T22:32:13.055128Z","submitted_at":"2025-10-04T20:01:21Z","title":"Less Diverse, Less Safe: The Indirect But Pervasive Risk of Test-Time Scaling in Large Language Models","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-18T09:53:57.765473Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2510.08592"},"observation_digest":"sha256:8c9d190b77ab4cae73e8f82e9e91b313a72ea27306be717665ea424116e9d415","observation_id":"72742bba-8617-4f09-bdb8-a367f512eca0","resolution":{"observed_at":"2026-05-18T09:56:13.055253Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":"2311.08268","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-07-04T19:50:11.224071Z","title":"arXiv preprint arXiv:2311.08268 (2023)","venue":null,"work_id":"dc102118-d85b-44e9-87d4-6094b6295e9b","year":2023},"citing_paper":{"arxiv_id":"2510.10073","last_updated":"2026-04-14T02:53:37Z","snapshot_observed_at":"2026-07-06T22:32:22.953630Z","submitted_at":"2025-10-11T07:18:12Z","title":"SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-18T08:14:51.102085Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2510.10073"},"observation_digest":"sha256:cde3b509f12980b58dcbac11b0f4a946e62bde81628ff66f14ffb6c4bd05ee84","observation_id":"51e16ce5-49cb-4a34-bcd9-45e57c6c16d8","resolution":{"observed_at":"2026-05-18T08:16:06.618493Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":"2311.08268","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-07-04T19:50:11.224071Z","title":"arXiv preprint arXiv:2311.08268 (2023)","venue":null,"work_id":"dc102118-d85b-44e9-87d4-6094b6295e9b","year":2023},"citing_paper":{"arxiv_id":"2511.02356","last_updated":"2026-04-20T12:25:45Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-11-04T08:24:22Z","title":"ASTRA: An Automated Framework for Strategy Discovery, Retrieval, and Evolution for Jailbreaking LLMs","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-18T01:54:22.995178Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2511.02356"},"observation_digest":"sha256:854ebea492a7e5e5288c546d246a186fcbb35bdd04f73787f774b8f675dd5d07","observation_id":"4961cfbf-b82b-48e2-9e80-df0b21336ba1","resolution":{"observed_at":"2026-05-18T01:55:37.918509Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":"2311.08268","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-07-04T19:50:11.224071Z","title":"arXiv preprint arXiv:2311.08268 (2023)","venue":null,"work_id":"dc102118-d85b-44e9-87d4-6094b6295e9b","year":2023},"citing_paper":{"arxiv_id":"2605.00236","last_updated":"2026-04-30T21:15:38Z","snapshot_observed_at":"2026-07-06T23:13:42.661364Z","submitted_at":"2026-04-30T21:15:38Z","title":"Attention Is Where You Attack","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-09T19:54:41.445447Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2605.00236"},"observation_digest":"sha256:e66a82ea370004707524628610c31d89d802309b1626f25f06cf532d55012acb","observation_id":"8a13254b-0ded-49ab-b69f-9621d112c7b8","resolution":{"observed_at":"2026-05-11T15:31:05.176918Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":"2311.08268","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-07-04T19:50:11.224071Z","title":"arXiv preprint arXiv:2311.08268 (2023)","venue":null,"work_id":"dc102118-d85b-44e9-87d4-6094b6295e9b","year":2023},"citing_paper":{"arxiv_id":"2605.19485","last_updated":"2026-05-19T07:36:52Z","snapshot_observed_at":"2026-07-06T23:30:11.337726Z","submitted_at":"2026-05-19T07:36:52Z","title":"Attention-Guided Reward for Reinforcement Learning-based Jailbreak against Large Reasoning Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-20T06:33:30.647965Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2605.19485"},"observation_digest":"sha256:2e9bd35d22d9d6467b7f5dfc14cdd760bdcd575b1370622fd9a980cb50eb3505","observation_id":"e17a41c3-e780-4aea-845a-3da7637ff811","resolution":{"observed_at":"2026-05-20T06:38:05.850307Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":"2311.08268","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-07-04T19:50:11.224071Z","title":"arXiv preprint arXiv:2311.08268 (2023)","venue":null,"work_id":"dc102118-d85b-44e9-87d4-6094b6295e9b","year":2023},"citing_paper":{"arxiv_id":"2605.20654","last_updated":"2026-06-03T08:00:52Z","snapshot_observed_at":"2026-08-02T18:56:31.274465Z","submitted_at":"2026-05-20T03:16:15Z","title":"REFLECTOR: Internalizing Step-wise Reflection against Indirect Jailbreak","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-05-21T06:16:01.040236Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2605.20654"},"observation_digest":"sha256:9465da8b37324b3ef9e3d9a563118af943048035607c691ea09f6f8b00b16f1c","observation_id":"01b7e409-86ee-42d2-b193-e61671e04b3a","resolution":{"observed_at":"2026-05-21T06:19:41.952350Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":"2311.08268","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-07-04T19:50:11.224071Z","title":"arXiv preprint arXiv:2311.08268 (2023)","venue":null,"work_id":"dc102118-d85b-44e9-87d4-6094b6295e9b","year":2023},"citing_paper":{"arxiv_id":"2605.21674","last_updated":"2026-05-20T19:31:07Z","snapshot_observed_at":"2026-07-06T23:32:05.693503Z","submitted_at":"2026-05-20T19:31:07Z","title":"Adversarial Reframing: A Framework for Targeted Generation in Language Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-22T09:35:51.862736Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2605.21674"},"observation_digest":"sha256:128339747da1c72081d4c53da4dbb9cd8aac9d4d85793a2bad20d0f63abbb12b","observation_id":"8930cbfb-96f3-4e25-a5e9-30ea1418bd6e","resolution":{"observed_at":"2026-05-22T09:36:20.964826Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":"2311.08268","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-07-04T19:50:11.224071Z","title":"arXiv preprint arXiv:2311.08268 (2023)","venue":null,"work_id":"dc102118-d85b-44e9-87d4-6094b6295e9b","year":2023},"citing_paper":{"arxiv_id":"2606.05609","last_updated":"2026-06-04T02:31:29Z","snapshot_observed_at":"2026-08-01T16:36:38.393160Z","submitted_at":"2026-06-04T02:31:29Z","title":"SlotGCG: Exploiting the Positional Vulnerability in LLMs for Jailbreak Attacks","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-06-28T01:16:07.252429Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2606.05609"},"observation_digest":"sha256:37e680f0c734dd4eb598c0a186b5fb8c44c1e21dda41f1b57095eaab04024a4d","observation_id":"8b166a43-a119-463f-a447-010273a0cf67","resolution":{"observed_at":"2026-07-02T13:26:59.294421Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":"2311.08268","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-07-04T19:50:11.224071Z","title":"arXiv preprint arXiv:2311.08268 (2023)","venue":null,"work_id":"dc102118-d85b-44e9-87d4-6094b6295e9b","year":2023},"citing_paper":{"arxiv_id":"2606.25476","last_updated":"2026-07-21T11:09:35Z","snapshot_observed_at":"2026-08-02T10:16:34.720247Z","submitted_at":"2026-06-24T07:00:53Z","title":"A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-06-25T20:58:53.119386Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2606.25476"},"observation_digest":"sha256:d8072440281bd3fd08e78599979f2bb9fa425c1c29de64081f643b8b81ee33ea","observation_id":"1b11814a-bfde-4c97-91e4-7bbd1f2de244","resolution":{"observed_at":"2026-07-04T19:50:11.225447Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.08268","snapshot_observed_at":"2026-08-02T10:16:41.802399Z","title":"arXiv preprint arXiv:2311.08268 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.25476","last_updated":"2026-07-21T11:09:35Z","snapshot_observed_at":"2026-08-02T10:16:34.720247Z","submitted_at":"2026-06-24T07:00:53Z","title":"A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-02T10:16:41.802399Z"},"links":{"cited_paper":"/paper/2311.08268","citing_paper":"/paper/2606.25476"},"observation_digest":"sha256:ebfd99c941ed13e8f6c53d447cb77c1d94c495f9c8605fbf3e6b4bb72e1139ba","observation_id":"f9afee8a-eeed-4da2-b3a9-d17411814311","resolution":{"observed_at":"2026-08-02T10:16:41.802399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2311.08268/citation-record","integrity":"/paper/2311.08268/integrity","json":"/paper/2311.08268/citation-record.json","paper":"/paper/2311.08268"},"outbound":[],"paper":{"arxiv_id":"2311.08268","last_updated":"2024-04-07T03:04:10Z","latest_version":4,"primary_category":"cs.CL","snapshot_observed_at":"2026-07-06T16:47:24.765597Z","submitted_at":"2023-11-14T16:02:16Z","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 12 inbound Pith citation observations for arXiv:2311.08268."}