{"as_of":"2026-08-08T09:56:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9d88e0f1e2879fbf95be0924f8d1770cc9c9d28987a726caa6ae5c6008638c03","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":5,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":5,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":5,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T19:46:40.713387Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-18T21:36:52.404748Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2311.09096","last_updated":"2024-06-12T08:28:15Z","snapshot_observed_at":"2026-08-05T11:53:45.759441Z","submitted_at":"2023-11-15T16:42:29Z","title":"Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.09096","snapshot_observed_at":"2026-08-07T19:46:40.713387Z","title":"arXiv preprint arXiv:2311.09096","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.10486","last_updated":"2025-02-14T08:44:43Z","snapshot_observed_at":"2026-08-07T19:39:58.732115Z","submitted_at":"2025-02-14T08:44:43Z","title":"VLM-Guard: Safeguarding Vision-Language Models via Fulfilling Safety Alignment Gap","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T19:46:40.713387Z"},"links":{"cited_paper":"/paper/2311.09096","citing_paper":"/paper/2502.10486"},"observation_digest":"sha256:4b7493378d58354bb5eb7f8493c0ff932fd7248279dd2e5b76d5f7c266269d0a","observation_id":"e011b566-0d7c-43dd-bbdf-ed6e6ad276b1","resolution":{"observed_at":"2026-08-07T19:46:40.713387Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.09096","last_updated":"2024-06-12T08:28:15Z","snapshot_observed_at":"2026-08-05T11:53:45.759441Z","submitted_at":"2023-11-15T16:42:29Z","title":"Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritization","version":2},"cited_work":{"arxiv_id":"2311.09096","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2311.09096","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2311.09096 (2023)","venue":null,"work_id":"f1bd4c15-fdb4-4f0b-8932-1af0f1492759","year":2023},"citing_paper":{"arxiv_id":"2502.18864","last_updated":"2025-02-26T06:17:13Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-26T06:17:13Z","title":"Towards an AI co-scientist","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-05-11T13:02:43.571234Z"},"links":{"cited_paper":"/paper/2311.09096","citing_paper":"/paper/2502.18864"},"observation_digest":"sha256:f9987ded881eeb50dbbbc1e3f601413398b47c9d38f4d8b0200782478f8b432d","observation_id":"5e9e1492-e9a2-44d4-bf15-8c4e4266a8c3","resolution":{"observed_at":"2026-05-11T13:02:44.272813Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.09096","last_updated":"2024-06-12T08:28:15Z","snapshot_observed_at":"2026-08-05T11:53:45.759441Z","submitted_at":"2023-11-15T16:42:29Z","title":"Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.09096","snapshot_observed_at":"2026-08-06T16:24:29.495638Z","title":"Defending large language models against jailbreaking attacks through goal prioritization,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13629","last_updated":"2025-07-18T03:41:18Z","snapshot_observed_at":"2026-08-07T10:03:57.005879Z","submitted_at":"2025-07-18T03:41:18Z","title":"Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T16:24:29.495638Z"},"links":{"cited_paper":"/paper/2311.09096","citing_paper":"/paper/2507.13629"},"observation_digest":"sha256:8fe9e20f5f19f9a414b97612ea487089b60a4030b52909f6e23304904b7bee5e","observation_id":"d7d80884-9021-4501-b489-581405fd11f5","resolution":{"observed_at":"2026-08-06T16:24:29.495638Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.09096","last_updated":"2024-06-12T08:28:15Z","snapshot_observed_at":"2026-08-05T11:53:45.759441Z","submitted_at":"2023-11-15T16:42:29Z","title":"Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.09096","snapshot_observed_at":"2026-08-05T22:24:23.400378Z","title":"Defending large language models against jailbreaking at- tacks through goal prioritization","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.07139","last_updated":"2025-08-10T01:59:07Z","snapshot_observed_at":"2026-08-06T02:11:07.077923Z","submitted_at":"2025-08-10T01:59:07Z","title":"A Real-Time, Self-Tuning Moderator Framework for Adversarial Prompt Detection","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T22:24:23.400378Z"},"links":{"cited_paper":"/paper/2311.09096","citing_paper":"/paper/2508.07139"},"observation_digest":"sha256:d81d927ebbd2b55023e4bbd90ab07b7e34e0d5168f3777cc9950bca293e6d3cf","observation_id":"c9d93443-48d4-44b2-a70e-26cad4fef8f2","resolution":{"observed_at":"2026-08-05T22:24:23.400378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.09096","last_updated":"2024-06-12T08:28:15Z","snapshot_observed_at":"2026-08-05T11:53:45.759441Z","submitted_at":"2023-11-15T16:42:29Z","title":"Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritization","version":2},"cited_work":{"arxiv_id":"2311.09096","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2311.09096","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2311.09096 (2023)","venue":null,"work_id":"f1bd4c15-fdb4-4f0b-8932-1af0f1492759","year":2023},"citing_paper":{"arxiv_id":"2508.20325","last_updated":"2026-05-11T14:12:43Z","snapshot_observed_at":"2026-07-06T22:19:48.389341Z","submitted_at":"2025-08-28T00:07:10Z","title":"GUARD: Guideline Upholding Test through Adaptive Role-play and Jailbreak Diagnostics for LLMs","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-18T21:34:51.665401Z"},"links":{"cited_paper":"/paper/2311.09096","citing_paper":"/paper/2508.20325"},"observation_digest":"sha256:6306999a0bd07f0d9a99f0b6ada8e5acbbdeb90e55647a9e60e53994fdc1d3fb","observation_id":"2b7a8093-461b-4ecc-ba4e-569bd2e286d8","resolution":{"observed_at":"2026-05-18T21:36:52.409545Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2311.09096/citation-record","integrity":"/paper/2311.09096/integrity","json":"/paper/2311.09096/citation-record.json","paper":"/paper/2311.09096"},"outbound":[],"paper":{"arxiv_id":"2311.09096","last_updated":"2024-06-12T08:28:15Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-05T11:53:45.759441Z","submitted_at":"2023-11-15T16:42:29Z","title":"Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritization"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 5 inbound Pith citation observations for arXiv:2311.09096."}