{"as_of":"2026-08-21T21:13:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:499539de885345908bb12dd3e29a0dddb3ab7087979f399df68b4899e2eec62a","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":10,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":10,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":10,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T04:28:00.782958Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-07T13:28:22.268414Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","snapshot_observed_at":"2026-08-16T14:30:44.183234Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.00287","snapshot_observed_at":"2026-08-11T15:49:38.125760Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-18T13:08:27.024892Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.125760Z"},"links":{"cited_paper":"/paper/2401.00287","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:7bb28bc48686fb23a6731bb6bb68c0ec09ca5eea62fb2158651f904a6fc97fdd","observation_id":"19caa072-27a4-4f51-85ed-b3d93f458b3a","resolution":{"observed_at":"2026-08-11T15:49:38.125760Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","snapshot_observed_at":"2026-08-16T14:30:44.183234Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.00287","snapshot_observed_at":"2026-08-11T05:02:26.704127Z","title":"The art of defending: A systematic evaluation and analysis of LLM defense strategies on safety and over-defensiveness","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18171","last_updated":"2024-12-25T02:15:50Z","snapshot_observed_at":"2026-08-18T22:47:52.318017Z","submitted_at":"2024-12-24T05:10:02Z","title":"Token Highlighter: Inspecting and Mitigating Jailbreak Prompts for Large Language Models","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T05:02:26.704127Z"},"links":{"cited_paper":"/paper/2401.00287","citing_paper":"/paper/2412.18171"},"observation_digest":"sha256:1169a09b80cfd24ebf5560f1fe24e2d187fda2ea044d937ff91b36be95191dea","observation_id":"c05bef07-2c6a-456a-982d-140b59fd6193","resolution":{"observed_at":"2026-08-11T05:02:26.704127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","snapshot_observed_at":"2026-08-16T14:30:44.183234Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.00287","snapshot_observed_at":"2026-08-10T20:15:54.842752Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.09004","last_updated":"2025-01-15T18:37:08Z","snapshot_observed_at":"2026-08-17T11:41:23.010968Z","submitted_at":"2025-01-15T18:37:08Z","title":"Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrails","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-10T20:15:54.842752Z"},"links":{"cited_paper":"/paper/2401.00287","citing_paper":"/paper/2501.09004"},"observation_digest":"sha256:bb52ac52563c5969ad3ce4f06ffee42bf164a5713baea31b84597bed5c2c4b8a","observation_id":"913e0770-a6b9-4126-8d9c-28046a78c6c2","resolution":{"observed_at":"2026-08-10T20:15:54.842752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","snapshot_observed_at":"2026-08-16T14:30:44.183234Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.00287","snapshot_observed_at":"2026-08-10T13:53:10.980458Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18626","last_updated":"2025-05-31T11:52:11Z","snapshot_observed_at":"2026-08-19T15:38:33.580340Z","submitted_at":"2025-01-27T12:48:47Z","title":"The TIP of the Iceberg: Revealing a Hidden Class of Task-in-Prompt Adversarial Attacks on LLMs","version":4},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-10T13:53:10.980458Z"},"links":{"cited_paper":"/paper/2401.00287","citing_paper":"/paper/2501.18626"},"observation_digest":"sha256:f2215d2abc5341dd1484c64aea297f6b4657b9dbe45399e39925f129df158b2d","observation_id":"01e275ba-f362-444f-95ad-03271447018e","resolution":{"observed_at":"2026-08-10T13:53:10.980458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","snapshot_observed_at":"2026-08-16T14:30:44.183234Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.00287","snapshot_observed_at":"2026-08-09T17:58:57.515461Z","title":"The art of defending: A systematic evaluation and analysis of llm defense strategies on safety and over-defensiveness,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.00735","last_updated":"2025-05-18T07:29:41Z","snapshot_observed_at":"2026-08-17T19:58:14.521711Z","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-09T17:58:57.515461Z"},"links":{"cited_paper":"/paper/2401.00287","citing_paper":"/paper/2502.00735"},"observation_digest":"sha256:47d1c899654e5c0de2cebe19079cdd62fa450f6e8e72d381c00c45cdc2d88f10","observation_id":"4adf32af-18be-409b-94e6-c2ae08f883d5","resolution":{"observed_at":"2026-08-09T17:58:57.515461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","snapshot_observed_at":"2026-08-16T14:30:44.183234Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.00287","snapshot_observed_at":"2026-08-08T17:31:59.882927Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.05911","last_updated":"2025-02-09T14:11:30Z","snapshot_observed_at":"2026-08-18T00:50:00.046974Z","submitted_at":"2025-02-09T14:11:30Z","title":"GRAIT: Gradient-Driven Refusal-Aware Instruction Tuning for Effective Hallucination Mitigation","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-08T17:31:59.882927Z"},"links":{"cited_paper":"/paper/2401.00287","citing_paper":"/paper/2502.05911"},"observation_digest":"sha256:707dcd82ae6fa27b5728ce1e011d63ae69a448e3a2c4953ecad56a5275a9891d","observation_id":"dfe3773f-abb7-4a73-9c47-d90c3ee23680","resolution":{"observed_at":"2026-08-08T17:31:59.882927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","snapshot_observed_at":"2026-08-16T14:30:44.183234Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.00287","snapshot_observed_at":"2026-08-16T04:28:00.782958Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.01177","last_updated":"2025-05-02T10:35:26Z","snapshot_observed_at":"2026-08-16T14:20:05.929905Z","submitted_at":"2025-05-02T10:35:26Z","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","version":1},"reference_index":135,"source":"pdf_text","source_observed_at":"2026-08-16T04:28:00.782958Z"},"links":{"cited_paper":"/paper/2401.00287","citing_paper":"/paper/2505.01177"},"observation_digest":"sha256:d73d8774510bd987daf2e98e6cf6ab5dec185b64a10a09bcf45b874a4fdf6736","observation_id":"0a5407f4-98b3-45da-aef6-3b1e9f8c7124","resolution":{"observed_at":"2026-08-16T04:28:00.782958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","snapshot_observed_at":"2026-08-16T14:30:44.183234Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","version":1},"cited_work":{"arxiv_id":"2401.00287","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.00287","snapshot_observed_at":"2026-08-07T13:28:22.268414Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","venue":"cs.CL","work_id":"0c80993a-06e5-434f-8fce-bdf53bb50a82","year":2023},"citing_paper":{"arxiv_id":"2505.23817","last_updated":"2025-05-27T21:36:27Z","snapshot_observed_at":"2026-08-18T00:33:18.577424Z","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T13:28:18.665210Z"},"links":{"cited_paper":"/paper/2401.00287","citing_paper":"/paper/2505.23817"},"observation_digest":"sha256:d28283a16e1f4c8492d3bf46bf739aa533a596c00b5b652d9156c96a98111a58","observation_id":"20202f5c-7b09-449a-bf81-997ce875bb6f","resolution":{"observed_at":"2026-08-07T13:28:22.318470Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","snapshot_observed_at":"2026-08-16T14:30:44.183234Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.00287","snapshot_observed_at":"2026-08-07T10:17:26.690689Z","title":"The art of defending: A systematic evaluation and analysis of llm defense strategies on safety and over-defensiveness,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.11094","last_updated":"2025-10-30T06:22:33Z","snapshot_observed_at":"2026-08-13T12:53:10.459412Z","submitted_at":"2025-06-06T05:50:50Z","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T10:17:26.690689Z"},"links":{"cited_paper":"/paper/2401.00287","citing_paper":"/paper/2506.11094"},"observation_digest":"sha256:d003842aa0c6b3633e5fe171fb279afbe5c7ce8fabcafc50d695258ff5730dcb","observation_id":"a35ca690-ee7d-4ed1-9390-0c435e34c5e2","resolution":{"observed_at":"2026-08-07T10:17:26.690689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","snapshot_observed_at":"2026-08-16T14:30:44.183234Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.00287","snapshot_observed_at":"2026-08-04T17:46:19.737771Z","title":"The art of defending: A systematic evaluation and analysis of LLM defense strategies on safety and over-defensiveness,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.10682","last_updated":"2025-09-12T20:26:16Z","snapshot_observed_at":"2026-08-21T08:43:25.498819Z","submitted_at":"2025-09-12T20:26:16Z","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","version":1},"reference_index":295,"source":"pdf_text","source_observed_at":"2026-08-04T17:46:19.737771Z"},"links":{"cited_paper":"/paper/2401.00287","citing_paper":"/paper/2509.10682"},"observation_digest":"sha256:81f8cd2f7b5cca1e93b23f148b07cdcee0b3d669eff2335ac2552c758331b0a2","observation_id":"df5d9952-ca8b-4087-abda-50187b3a32d7","resolution":{"observed_at":"2026-08-04T17:46:19.737771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2401.00287/citation-record","integrity":"/paper/2401.00287/integrity","json":"/paper/2401.00287/citation-record.json","paper":"/paper/2401.00287"},"outbound":[],"paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-16T14:30:44.183234Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 10 inbound Pith citation observations for arXiv:2401.00287."}