{"as_of":"2026-08-10T07:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:58e8436cfa572c9a768da493ef23851fb71337dcb96d65763a7eaa9cfdfb89dd","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":12,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T00:12:04.826574Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T08:49:42.661881Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2401.06561","last_updated":"2024-12-16T08:43:24Z","snapshot_observed_at":"2026-08-09T02:31:23.206221Z","submitted_at":"2024-01-12T13:15:05Z","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","version":4},"cited_work":{"arxiv_id":"2401.06561","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.06561","snapshot_observed_at":"2026-07-04T08:49:42.661881Z","title":"Intention analysis makes llms a good jailbreak defender","venue":null,"work_id":"e9e9aa70-71dc-41fe-a630-eca9a7e23b72","year":2024},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":113,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2401.06561","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:d1abd271556069ab1fb2fb0816ac5e36f11f1d13b45923943ceb8b8733fa79fa","observation_id":"26d96bb1-0964-4d58-9596-db6cc86c1746","resolution":{"observed_at":"2026-05-15T02:20:44.482569Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06561","last_updated":"2024-12-16T08:43:24Z","snapshot_observed_at":"2026-08-09T02:31:23.206221Z","submitted_at":"2024-01-12T13:15:05Z","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.06561","snapshot_observed_at":"2026-08-10T00:12:04.826574Z","title":"Intention analysis prompting makes large language models a good jailbreak defender","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18280","last_updated":"2025-05-17T04:37:43Z","snapshot_observed_at":"2026-08-10T03:17:04.804861Z","submitted_at":"2025-01-30T11:37:40Z","title":"Jailbreaking LLMs' Safeguard with Universal Magic Words for Text Embedding Models","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T00:12:04.826574Z"},"links":{"cited_paper":"/paper/2401.06561","citing_paper":"/paper/2501.18280"},"observation_digest":"sha256:1194b5872efd5be8dde2893b8ba38dac29b6373d26f2eab22b77a74fa0a9515f","observation_id":"67b2e727-6d7f-4a5d-aad4-97c6220adad5","resolution":{"observed_at":"2026-08-10T00:12:04.826574Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06561","last_updated":"2024-12-16T08:43:24Z","snapshot_observed_at":"2026-08-09T02:31:23.206221Z","submitted_at":"2024-01-12T13:15:05Z","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.06561","snapshot_observed_at":"2026-08-09T20:34:01.367239Z","title":"Intention analysis makes llms a good jailbreak defender","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2501.19358","last_updated":"2025-06-02T16:30:23Z","snapshot_observed_at":"2026-08-09T20:35:40.499093Z","submitted_at":"2025-01-31T18:10:53Z","title":"The Energy Loss Phenomenon in RLHF: A New Perspective on Mitigating Reward Hacking","version":3},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-09T20:34:01.367239Z"},"links":{"cited_paper":"/paper/2401.06561","citing_paper":"/paper/2501.19358"},"observation_digest":"sha256:c7034b32a3211ef94045175365942b4a25bb9653141266e1ef3a065ce73341dd","observation_id":"450b8094-e85b-4522-8286-c6aca43d04d7","resolution":{"observed_at":"2026-08-09T20:34:01.367239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06561","last_updated":"2024-12-16T08:43:24Z","snapshot_observed_at":"2026-08-09T02:31:23.206221Z","submitted_at":"2024-01-12T13:15:05Z","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.06561","snapshot_observed_at":"2026-08-06T04:47:25.668845Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":194,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.668845Z"},"links":{"cited_paper":"/paper/2401.06561","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:6a57e254cb634039360f5cca6d3fb184ee1b07f073f0c82d8324ea5dc576bdb1","observation_id":"92aed184-cfab-427e-8fce-5e874fc9647e","resolution":{"observed_at":"2026-08-06T04:47:25.668845Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06561","last_updated":"2024-12-16T08:43:24Z","snapshot_observed_at":"2026-08-09T02:31:23.206221Z","submitted_at":"2024-01-12T13:15:05Z","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","version":4},"cited_work":{"arxiv_id":"2401.06561","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.06561","snapshot_observed_at":"2026-07-04T08:49:42.661881Z","title":"Intention analysis makes llms a good jailbreak defender","venue":null,"work_id":"e9e9aa70-71dc-41fe-a630-eca9a7e23b72","year":2024},"citing_paper":{"arxiv_id":"2508.04204","last_updated":"2026-05-06T06:58:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-08-06T08:35:10Z","title":"ReasoningGuard: Safeguarding Large Reasoning Models with Inference-time Safety Aha Moments","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-19T01:02:07.088724Z"},"links":{"cited_paper":"/paper/2401.06561","citing_paper":"/paper/2508.04204"},"observation_digest":"sha256:27a03dee3353413f078889405df56f0e229e836d0105f1503b1109b8c7184c01","observation_id":"30fcbd56-952b-4cb9-b339-a5e4c64116e3","resolution":{"observed_at":"2026-05-19T01:02:54.732991Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06561","last_updated":"2024-12-16T08:43:24Z","snapshot_observed_at":"2026-08-09T02:31:23.206221Z","submitted_at":"2024-01-12T13:15:05Z","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.06561","snapshot_observed_at":"2026-08-04T09:25:58.334337Z","title":"Intention analysis prompting makes large language models A good jailbreak defender.CoRR, abs/2401.06561, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-06T02:45:04.316908Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":236,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:58.334337Z"},"links":{"cited_paper":"/paper/2401.06561","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:35e44032fd2081739b591602684dec45c7ee3907ae9933cecc6d30dbb2490774","observation_id":"d25d9615-8e42-4439-a83e-8e2fb962d21f","resolution":{"observed_at":"2026-08-04T09:25:58.334337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06561","last_updated":"2024-12-16T08:43:24Z","snapshot_observed_at":"2026-08-09T02:31:23.206221Z","submitted_at":"2024-01-12T13:15:05Z","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","version":4},"cited_work":{"arxiv_id":"2401.06561","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.06561","snapshot_observed_at":"2026-07-04T08:49:42.661881Z","title":"Intention analysis makes llms a good jailbreak defender","venue":null,"work_id":"e9e9aa70-71dc-41fe-a630-eca9a7e23b72","year":2024},"citing_paper":{"arxiv_id":"2512.21110","last_updated":"2026-04-24T20:27:34Z","snapshot_observed_at":"2026-07-06T22:39:58.137482Z","submitted_at":"2025-12-24T11:15:57Z","title":"Beyond Context: Large Language Models' Failure to Grasp Users' Intent","version":3},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-05-16T20:09:25.827452Z"},"links":{"cited_paper":"/paper/2401.06561","citing_paper":"/paper/2512.21110"},"observation_digest":"sha256:de6e72a64584f4d71df47b2e0be3379817f1489102477d5810ee2376cd7e7dd4","observation_id":"9e431276-2da6-4f1d-a391-df46a9ec04c3","resolution":{"observed_at":"2026-05-16T20:11:13.568587Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06561","last_updated":"2024-12-16T08:43:24Z","snapshot_observed_at":"2026-08-09T02:31:23.206221Z","submitted_at":"2024-01-12T13:15:05Z","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","version":4},"cited_work":{"arxiv_id":"2401.06561","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.06561","snapshot_observed_at":"2026-07-04T08:49:42.661881Z","title":"Intention analysis makes llms a good jailbreak defender","venue":null,"work_id":"e9e9aa70-71dc-41fe-a630-eca9a7e23b72","year":2024},"citing_paper":{"arxiv_id":"2604.18946","last_updated":"2026-04-21T00:50:13Z","snapshot_observed_at":"2026-07-06T23:05:39.724237Z","submitted_at":"2026-04-21T00:50:13Z","title":"Reasoning Structure Matters for Safety Alignment of Reasoning Models","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-05-10T02:36:57.093584Z"},"links":{"cited_paper":"/paper/2401.06561","citing_paper":"/paper/2604.18946"},"observation_digest":"sha256:29c5fba6b545a828bb0a55502428a913b21d9adfa599579874d38fd8f2d950df","observation_id":"a79bab24-dd6a-49b5-ae0c-ce9887ef7d78","resolution":{"observed_at":"2026-05-11T12:56:04.133189Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06561","last_updated":"2024-12-16T08:43:24Z","snapshot_observed_at":"2026-08-09T02:31:23.206221Z","submitted_at":"2024-01-12T13:15:05Z","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","version":4},"cited_work":{"arxiv_id":"2401.06561","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.06561","snapshot_observed_at":"2026-07-04T08:49:42.661881Z","title":"Intention analysis makes llms a good jailbreak defender","venue":null,"work_id":"e9e9aa70-71dc-41fe-a630-eca9a7e23b72","year":2024},"citing_paper":{"arxiv_id":"2604.27861","last_updated":"2026-04-30T13:44:01Z","snapshot_observed_at":"2026-07-30T08:45:44.179299Z","submitted_at":"2026-04-30T13:44:01Z","title":"TwinGate: Stateful Defense against Decompositional Jailbreaks in Untraceable Traffic via Asymmetric Contrastive Learning","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-07T06:12:37.845017Z"},"links":{"cited_paper":"/paper/2401.06561","citing_paper":"/paper/2604.27861"},"observation_digest":"sha256:6741ecd017acc7172ed4f50de61e60c97bd9fc3bfaf768d05a1027204c9aa928","observation_id":"cf241f4c-ed6f-452e-a9eb-b1bc4dc03358","resolution":{"observed_at":"2026-05-12T10:26:29.192339Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06561","last_updated":"2024-12-16T08:43:24Z","snapshot_observed_at":"2026-08-09T02:31:23.206221Z","submitted_at":"2024-01-12T13:15:05Z","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","version":4},"cited_work":{"arxiv_id":"2401.06561","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.06561","snapshot_observed_at":"2026-07-04T08:49:42.661881Z","title":"Intention analysis makes llms a good jailbreak defender","venue":null,"work_id":"e9e9aa70-71dc-41fe-a630-eca9a7e23b72","year":2024},"citing_paper":{"arxiv_id":"2605.24552","last_updated":"2026-05-23T12:39:25Z","snapshot_observed_at":"2026-08-07T01:16:57.528849Z","submitted_at":"2026-05-23T12:39:25Z","title":"Ellipsoid Control: A White-list Jailbreak Defense via Benign Latent Modeling","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-30T13:10:44.728498Z"},"links":{"cited_paper":"/paper/2401.06561","citing_paper":"/paper/2605.24552"},"observation_digest":"sha256:0431dae43b9969668e75ee02bdf1118b1cc088039cf5db600ce91c5f18724977","observation_id":"189a7923-0a41-4483-96b4-d2d9afc73e86","resolution":{"observed_at":"2026-06-30T13:14:40.769734Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06561","last_updated":"2024-12-16T08:43:24Z","snapshot_observed_at":"2026-08-09T02:31:23.206221Z","submitted_at":"2024-01-12T13:15:05Z","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","version":4},"cited_work":{"arxiv_id":"2401.06561","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.06561","snapshot_observed_at":"2026-07-04T08:49:42.661881Z","title":"Intention analysis makes llms a good jailbreak defender","venue":null,"work_id":"e9e9aa70-71dc-41fe-a630-eca9a7e23b72","year":2024},"citing_paper":{"arxiv_id":"2606.22495","last_updated":"2026-06-21T13:34:18Z","snapshot_observed_at":"2026-08-04T03:35:42.142897Z","submitted_at":"2026-06-21T13:34:18Z","title":"Grounded Scaling: Why Agentic AI Needs Deterministic Environments","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-26T10:51:34.720931Z"},"links":{"cited_paper":"/paper/2401.06561","citing_paper":"/paper/2606.22495"},"observation_digest":"sha256:87e7d1d1aebf5d6cc9e480db7d881d5ee2b90f634cb5e4e2611d17bdc0ddfa58","observation_id":"b859a4bb-060c-4128-830f-98a1541d33be","resolution":{"observed_at":"2026-07-04T08:49:42.663653Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06561","last_updated":"2024-12-16T08:43:24Z","snapshot_observed_at":"2026-08-09T02:31:23.206221Z","submitted_at":"2024-01-12T13:15:05Z","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.06561","snapshot_observed_at":"2026-07-31T16:06:06.522729Z","title":"Intention analysis makes llms a good jailbreak defender, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24392","last_updated":"2026-07-27T13:07:52Z","snapshot_observed_at":"2026-08-07T21:49:09.749932Z","submitted_at":"2026-07-27T13:07:52Z","title":"When LLM Defenses Backfire: Characterizing Safety, Performance, and Cost Trade-offs","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-31T16:06:06.522729Z"},"links":{"cited_paper":"/paper/2401.06561","citing_paper":"/paper/2607.24392"},"observation_digest":"sha256:974c1bb92f4c94293cd370893044d9d40794179f45b847d61b2da0b3113f6b35","observation_id":"eb2b5ed2-554b-4b60-913f-271f13795738","resolution":{"observed_at":"2026-07-31T16:06:06.522729Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2401.06561/citation-record","integrity":"/paper/2401.06561/integrity","json":"/paper/2401.06561/citation-record.json","paper":"/paper/2401.06561"},"outbound":[],"paper":{"arxiv_id":"2401.06561","last_updated":"2024-12-16T08:43:24Z","latest_version":4,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-09T02:31:23.206221Z","submitted_at":"2024-01-12T13:15:05Z","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 12 inbound Pith citation observations for arXiv:2401.06561."}