{"as_of":"2026-07-11T09:39:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:416131fcc9bc2472cb74bdb7cb8dc3ed01ae2ad9f8c5378870412f2c7c18e152","coverage":[{"denominator":44,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":44,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-11T04:06:30.979196Z","state":"measured"},{"denominator":144,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":144,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-07-11T06:31:22.384518+00:00","state":"measured"},{"denominator":183,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-30T23:16:56.435443Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T15:27:20.028353Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2405.13068","last_updated":"2026-04-18T08:25:50Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-05-20T17:17:55Z","title":"Uncovering Logit Suppression Vulnerabilities in LLM Safety Alignment","version":4},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-24T00:38:36.992597Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2405.13068"},"observation_digest":"sha256:f2431aad0c030e850bb3c195dded641b9b4eb93937957f8bf236d0a741255a10","observation_id":"1a913844-0572-4f8b-95a9-fb3ef51ad60b","resolution":{"observed_at":"2026-05-24T00:38:39.916410Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2406.11717","last_updated":"2024-10-30T18:57:07Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-17T16:36:12Z","title":"Refusal in Language Models Is Mediated by a Single Direction","version":3},"reference_index":158,"source":"arxiv_source","source_observed_at":"2026-05-13T10:47:55.934081Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2406.11717"},"observation_digest":"sha256:cc587e50b2700b792ced7e37a98c95faa5c4f1b465f7a4b707cf4c5d5986a416","observation_id":"8d3bc299-eb81-4264-82e4-068cce2c733d","resolution":{"observed_at":"2026-05-13T10:47:56.044187Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-13T06:35:13.331872Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2406.13352"},"observation_digest":"sha256:b9ccd1e6eb7ec7021fe4ac3f834c20cf8d6224e4cee6d9ef2e6c5a09309067d9","observation_id":"736089f3-4a8e-4705-afe9-7c96d906784d","resolution":{"observed_at":"2026-05-13T06:35:13.472307Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2406.18495","last_updated":"2024-12-09T20:21:56Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-06-26T16:58:20Z","title":"WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-17T16:25:14.744887Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2406.18495"},"observation_digest":"sha256:5525efe05c16b1fa3246070e66040262a0677c6ce8b204d392a74615e76917ed","observation_id":"ec39ab30-010f-4947-a3c2-01a92ceac38e","resolution":{"observed_at":"2026-05-17T16:25:14.871506Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:f23ff3bdf14c6352358ce78db630f147f4ceca31ac39f2862657881459f57e5b","observation_id":"34b573c6-31d5-4653-a264-cfeb407a48a6","resolution":{"observed_at":"2026-05-15T02:20:44.776749Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2407.21772","last_updated":"2024-08-04T22:13:39Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-31T17:48:14Z","title":"ShieldGemma: Generative AI Content Moderation Based on Gemma","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-20T13:17:39.444002Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2407.21772"},"observation_digest":"sha256:ede1e9b74277d7f7db90539e47dbf52642f4bebd48cbd4e73891f750586c93e6","observation_id":"b050abd7-f8e6-47b5-bccb-682037df8243","resolution":{"observed_at":"2026-05-20T13:17:39.530794Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2409.18169","last_updated":"2026-04-23T18:48:49Z","snapshot_observed_at":"2026-07-06T19:22:58.341345Z","submitted_at":"2024-09-26T17:55:22Z","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","version":6},"reference_index":105,"source":"pdf_text","source_observed_at":"2026-05-23T20:58:16.237327Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2409.18169"},"observation_digest":"sha256:538a286f0588e93ca0269bc65304cede1df0df15c61f09e068bd2d36bd5581da","observation_id":"17f2b2e7-e24a-4344-8eb6-01ea6589df71","resolution":{"observed_at":"2026-05-23T20:58:25.952965Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2503.02574","last_updated":"2026-05-18T17:54:05Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-04T12:55:07Z","title":"LLM-Safety Evaluations Lack Robustness","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-23T01:26:45.402983Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2503.02574"},"observation_digest":"sha256:074b500cc42c03bb8404cbb825d06b50c7bf03acf78b40c061c0b93683a31ec4","observation_id":"55c04c20-74a0-4da4-b96b-3e7c7e114a8d","resolution":{"observed_at":"2026-05-23T01:27:21.364278Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2506.06414","last_updated":"2026-04-20T20:58:30Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-06-06T17:33:33Z","title":"Benchmarking Misuse Mitigation Against Covert Adversaries","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-19T10:29:05.104520Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2506.06414"},"observation_digest":"sha256:36aff3d216f7ae83310e3a13a421b03517acd4fce3e321d8612184419b53bc95","observation_id":"a17b22d8-38d8-462a-b092-ff5158d200b3","resolution":{"observed_at":"2026-05-19T10:32:14.742023Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2506.13510","last_updated":"2026-05-22T19:49:58Z","snapshot_observed_at":"2026-07-06T21:42:54.033751Z","submitted_at":"2025-06-16T14:04:54Z","title":"Safe-Child-LLM: A Developmental Benchmark for Evaluating LLM Safety in Child-LLM Interactions","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-19T09:31:14.739478Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2506.13510"},"observation_digest":"sha256:681ef01c23d549c0025cbccc7d18ce173c44a835f384a5dc1df7f642cbb0b6ed","observation_id":"19222678-ae44-47cc-80ad-9d519bda7382","resolution":{"observed_at":"2026-05-19T09:32:16.284660Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2508.20325","last_updated":"2026-05-11T14:12:43Z","snapshot_observed_at":"2026-07-06T22:19:48.389341Z","submitted_at":"2025-08-28T00:07:10Z","title":"GUARD: Guideline Upholding Test through Adaptive Role-play and Jailbreak Diagnostics for LLMs","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-18T21:34:51.665401Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2508.20325"},"observation_digest":"sha256:173769716a2c0da2a8a48d92eba6dd672adfe1b2fcffae77983cd23d5377dbd7","observation_id":"373986f5-47b5-4ec7-93f6-d1525fb8a244","resolution":{"observed_at":"2026-05-18T21:36:52.464182Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2509.09708","last_updated":"2026-04-28T03:29:39Z","snapshot_observed_at":"2026-07-06T22:28:57.048003Z","submitted_at":"2025-09-07T02:29:07Z","title":"Beyond I'm Sorry, I Can't: Dissecting Large Language Model Refusal","version":3},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-05-18T18:56:13.680353Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2509.09708"},"observation_digest":"sha256:fc027262d2966e919f0262d1d0b1d65df42a43489ccbf2726746dab38577e624","observation_id":"f95a3b6a-7d58-4d1f-81f5-85a1819e09c1","resolution":{"observed_at":"2026-05-18T18:56:45.814042Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2510.00761","last_updated":"2026-04-18T07:30:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-10-01T10:50:14Z","title":"Downgrade to Upgrade: Optimizer Simplification Enhances Robustness in LLM Unlearning","version":5},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-18T10:44:53.516653Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2510.00761"},"observation_digest":"sha256:1adacde2347094ebfcebbc42a33f838e94d53d55b1ed5f0db966477986811235","observation_id":"b26c3c68-2eb0-4bb9-aabe-e6284119a955","resolution":{"observed_at":"2026-05-18T10:46:16.887058Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2510.07239","last_updated":"2026-05-17T13:01:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-10-08T17:06:20Z","title":"Red-Bandit: Test-Time Adaptation for LLM Red-Teaming via Bandit-Guided LoRA Experts","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-21T20:53:58.198974Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2510.07239"},"observation_digest":"sha256:52e0d702684b876be27c9dc7add2388e933abd7a69da77353804acae6585583a","observation_id":"a5b01c0b-e5ad-405f-b8bb-233df6a3eb97","resolution":{"observed_at":"2026-05-21T20:54:21.532001Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2510.09689","last_updated":"2026-04-17T02:42:09Z","snapshot_observed_at":"2026-07-06T22:32:22.953630Z","submitted_at":"2025-10-09T09:44:14Z","title":"When Search Goes Wrong: Red-Teaming Web-Augmented Large Language Models","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-18T09:29:14.842228Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2510.09689"},"observation_digest":"sha256:4a1ae02641fc0bd3a63c7539c0684adcc36a5b62c32132461de64559693ce1d7","observation_id":"4e74162e-fcc2-4f98-968c-feb9b1f71936","resolution":{"observed_at":"2026-05-18T09:31:11.605031Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2511.02356","last_updated":"2026-04-20T12:25:45Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-11-04T08:24:22Z","title":"ASTRA: An Automated Framework for Strategy Discovery, Retrieval, and Evolution for Jailbreaking LLMs","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-18T01:54:22.995178Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2511.02356"},"observation_digest":"sha256:3606fcaba2f60a0d3784ae9fd3fe78e11bab6cce2a8e7a3a6ac179d7a0fd0455","observation_id":"dd107ea2-84dd-4b95-a4ff-3a13a19e5ae7","resolution":{"observed_at":"2026-05-18T01:55:38.031247Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2511.12710","last_updated":"2026-05-18T06:50:41Z","snapshot_observed_at":"2026-07-06T22:35:55.936840Z","submitted_at":"2025-11-16T17:52:07Z","title":"Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-21T18:58:53.183734Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2511.12710"},"observation_digest":"sha256:773e43551be188eafff1b959b5214b323d8b41e9c30771da6ed4342319cbbdc0","observation_id":"284a9abd-b1d7-43f1-b223-5008cdf2d6e4","resolution":{"observed_at":"2026-05-21T19:00:30.371001Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2511.17408","last_updated":"2026-04-19T21:58:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-11-21T17:08:48Z","title":"The Impact of Off-Policy Training Data on Probe Generalisation","version":4},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-05-17T20:26:37.914522Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2511.17408"},"observation_digest":"sha256:5b57408d559c6b75f774177c14704281881d70a24e8efcf882ea9b884e57d83c","observation_id":"e24a5014-e9cf-435f-93f7-3f24e5e0918a","resolution":{"observed_at":"2026-05-17T20:30:11.668116Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2512.18880","last_updated":"2026-05-10T20:55:34Z","snapshot_observed_at":"2026-07-06T22:39:43.359149Z","submitted_at":"2025-12-21T20:41:36Z","title":"Can LLMs Estimate Student Struggles? Human-AI Difficulty Alignment with Proficiency Simulation for Item Difficulty Prediction","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-16T20:15:16.449712Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2512.18880"},"observation_digest":"sha256:7669dba67b695a24b002d3c4a48b30ab6c1392a025343a2632f39ed8c18d5847","observation_id":"19f31079-8f93-414c-8a35-c3c9f28af7e5","resolution":{"observed_at":"2026-05-16T20:18:24.063810Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2512.21110","last_updated":"2026-04-24T20:27:34Z","snapshot_observed_at":"2026-07-06T22:39:58.137482Z","submitted_at":"2025-12-24T11:15:57Z","title":"Beyond Context: Large Language Models' Failure to Grasp Users' Intent","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-16T20:09:25.827452Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2512.21110"},"observation_digest":"sha256:b07b0c86443bdbeeee05aef209844d2ed570dc27cd78bcb9d4066deb0ab8769a","observation_id":"858b022b-8113-42c4-9024-0a929c554fcf","resolution":{"observed_at":"2026-05-16T20:11:13.673963Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2602.07340","last_updated":"2026-05-21T07:39:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-02-07T03:46:33Z","title":"Revisiting Robustness for LLM Safety Alignment via Selective Geometry Control","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-22T11:17:03.104902Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2602.07340"},"observation_digest":"sha256:875f83baeca4c9f9fb6b0462953ea65ed900437983959689f4da24ce9a5773e2","observation_id":"2a91f9d5-b020-4f80-99b6-4cfef338b99b","resolution":{"observed_at":"2026-05-22T11:21:29.036606Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2602.08813","last_updated":"2026-05-12T17:22:35Z","snapshot_observed_at":"2026-07-06T22:45:11.110274Z","submitted_at":"2026-02-09T15:50:05Z","title":"Robust Policy Optimization to Prevent Catastrophic Forgetting","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-16T05:33:42.965249Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2602.08813"},"observation_digest":"sha256:fa426759fd88f75bfaaf5f76ab78998fe7b6b0f21c31eb26768b4beb54a8862d","observation_id":"b3fe66d7-da98-4239-986e-0af177aa631f","resolution":{"observed_at":"2026-05-16T05:37:24.242197Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2602.08874","last_updated":"2026-05-14T02:54:57Z","snapshot_observed_at":"2026-07-06T22:45:11.110274Z","submitted_at":"2026-02-09T16:35:14Z","title":"Do Reasoning LLMs Refuse What They Infer in Long Contexts?","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-16T05:37:45.572990Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2602.08874"},"observation_digest":"sha256:2b77324becf9ed52eea4849197cc59d2106cf674e8a6d0c39928770447d6d452","observation_id":"6dc3101d-5631-4d81-950d-404b0fb5bca1","resolution":{"observed_at":"2026-05-16T05:40:39.900246Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2602.20102","last_updated":"2026-05-21T18:01:19Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-02-23T18:19:46Z","title":"BarrierSteer: LLM Safety via Learning Barrier Steering","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-25T07:02:03.058731Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2602.20102"},"observation_digest":"sha256:34e88b2e186c4ecc01159976fbe98dae68fa20ee2513a67b5e136a0ddb75dc99","observation_id":"bd0d7773-2c1b-4fe1-aa39-242415dd0105","resolution":{"observed_at":"2026-05-25T07:05:26.762966Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2602.22291","last_updated":"2026-05-06T04:01:57Z","snapshot_observed_at":"2026-07-06T22:47:02.356796Z","submitted_at":"2026-02-25T15:08:20Z","title":"Manifold of Failure: Behavioral Attraction Basins in Language Models","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-15T19:12:26.714473Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2602.22291"},"observation_digest":"sha256:147165dc91a0ee77e78e6eba0c616ee052d0204eb94a74e801a2404e66bb414f","observation_id":"68695a5c-d3bc-403c-b8ff-930c47e2d125","resolution":{"observed_at":"2026-05-15T19:16:31.726256Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2603.01589","last_updated":"2026-04-03T05:26:21Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-03-02T08:16:04Z","title":"SafeSci: Safety Evaluation of Large Language Models in Science Domains and Beyond","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-15T18:00:10.534346Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2603.01589"},"observation_digest":"sha256:51ffbc491919bf2184f3a96c0e4ca660dc241d02cf162346cfbe25aa54c9f019","observation_id":"7f150f46-66c7-400c-8f0d-d602b34f1a6e","resolution":{"observed_at":"2026-05-15T18:01:25.623098Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2603.06610","last_updated":"2026-05-22T08:27:37Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-02-19T09:46:24Z","title":"CapTrack: Multifaceted Evaluation of Forgetting in LLM Post-Training","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-25T06:40:51.046965Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2603.06610"},"observation_digest":"sha256:6089b301cf83db6244d46b668b15c26b9c66b2672c3f4df99f843dc9430a8e20","observation_id":"9caf0c92-1550-4051-9910-21c3309d4f1a","resolution":{"observed_at":"2026-05-25T06:45:25.558488Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2603.13933","last_updated":"2026-04-16T08:02:16Z","snapshot_observed_at":"2026-07-06T22:49:01.769027Z","submitted_at":"2026-03-14T13:04:55Z","title":"OmniCompliance-100K: A Multi-Domain, Rule-Grounded, Real-World Safety Compliance Dataset","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-15T11:32:52.986523Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2603.13933"},"observation_digest":"sha256:f14fd9af5e570691a93ec30e7c36ce4eed53135ab45ffe9eba58195c185127d3","observation_id":"2ee85c59-9f9c-4786-991f-965b5bc682ca","resolution":{"observed_at":"2026-05-15T11:35:31.687114Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2603.21697","last_updated":"2026-04-23T09:10:46Z","snapshot_observed_at":"2026-07-06T22:50:05.914888Z","submitted_at":"2026-03-23T08:32:09Z","title":"Structured Visual Narratives Undermine Safety Alignment in Multimodal Large Language Models","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-15T01:27:57.104964Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2603.21697"},"observation_digest":"sha256:456c65a265f365c92b3aed9b3e516d83e016b2ea890e4629c79c9c43dd0c6a8a","observation_id":"c022a32e-c158-43c3-883d-2b82ee585d33","resolution":{"observed_at":"2026-05-15T01:28:27.067415Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.02574","last_updated":"2026-04-02T23:09:43Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-02T23:09:43Z","title":"Understanding the Effects of Safety Unalignment on Large Language Models","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-05-13T20:37:45.061026Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.02574"},"observation_digest":"sha256:285714af40e37ade2f482f908a5804412989afc687a25903fd81af9e306a63e5","observation_id":"cf98140f-214b-416e-bc80-079bbc174350","resolution":{"observed_at":"2026-05-13T20:38:14.485097Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.04992","last_updated":"2026-04-05T13:37:52Z","snapshot_observed_at":"2026-07-06T22:53:51.418227Z","submitted_at":"2026-04-05T13:37:52Z","title":"FreakOut-LLM: The Effect of Emotional Stimuli on Safety Alignment","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-13T16:51:46.603418Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.04992"},"observation_digest":"sha256:77a083a3008d8198473936ea994c422579984a1c2147900f3518aebeb7e2d574","observation_id":"eff438d8-71ba-469b-bc35-0dd8728157c0","resolution":{"observed_at":"2026-05-13T16:52:59.993031Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.06233","last_updated":"2026-04-03T13:53:23Z","snapshot_observed_at":"2026-07-06T22:54:44.656835Z","submitted_at":"2026-04-03T13:53:23Z","title":"Blind Refusal: Language Models Refuse to Help Users Evade Unjust, Absurd, and Illegitimate Rules","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-05-13T19:24:54.381722Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.06233"},"observation_digest":"sha256:cae81107070d43f8a6b7f202ecc1a57ef1ed441ff561600f0344fc388990fedf","observation_id":"69b65e17-9b18-4f7e-b33a-bf41595278eb","resolution":{"observed_at":"2026-05-13T19:28:09.964781Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.07709","last_updated":"2026-06-03T21:15:24Z","snapshot_observed_at":"2026-07-06T22:57:00.904627Z","submitted_at":"2026-04-09T01:54:33Z","title":"IatroBench: Pre-Registered Evidence of Iatrogenic Harm from AI Safety Measures","version":3},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-05-10T18:25:53.037936Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.07709"},"observation_digest":"sha256:00432ce8cd97bb3cd4dcbf72a35166c83e3235a12b1d624a188663ed610ad312","observation_id":"799a7d83-b1b5-4c3f-8e40-4eaf62ace9ca","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.07727","last_updated":"2026-04-09T02:22:44Z","snapshot_observed_at":"2026-07-06T22:57:00.904627Z","submitted_at":"2026-04-09T02:22:44Z","title":"TrajGuard: Streaming Hidden-state Trajectory Detection for Decoding-time Jailbreak Defense","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-05-10T18:26:19.922383Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.07727"},"observation_digest":"sha256:4dcb63f30021828353466a4032c4ce71323e6f047d69af3f391a2533919f37d2","observation_id":"2afe4519-decf-4300-9c81-e48699bdde1b","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.10326","last_updated":"2026-04-11T19:19:05Z","snapshot_observed_at":"2026-07-06T22:59:01.129724Z","submitted_at":"2026-04-11T19:19:05Z","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-05-10T15:19:46.920899Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.10326"},"observation_digest":"sha256:7fd4c32d33e783692596c1b03dba7927a9f6a8855e3a1472095599ae3b8119b2","observation_id":"957f6412-a125-47bf-a5be-bd225ba24a67","resolution":{"observed_at":"2026-05-11T10:46:04.248645Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.10403","last_updated":"2026-04-12T01:37:45Z","snapshot_observed_at":"2026-07-06T22:59:01.129724Z","submitted_at":"2026-04-12T01:37:45Z","title":"Latent Instruction Representation Alignment: defending against jailbreaks, backdoors and undesired knowledge in LLMs","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-05-10T16:41:52.440793Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.10403"},"observation_digest":"sha256:0c7bf95c8cb2afff5129f45163bc19313115e22c76ed7c11d1db8fb72ab0bea6","observation_id":"e15bc367-ec5e-42cc-9d8c-591e285d3e2c","resolution":{"observed_at":"2026-05-11T08:21:00.119295Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.11309","last_updated":"2026-04-13T11:12:30Z","snapshot_observed_at":"2026-07-06T22:59:45.139155Z","submitted_at":"2026-04-13T11:12:30Z","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-10T16:07:31.602378Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.11309"},"observation_digest":"sha256:fe4b8def7f759b314529ad7b99d98314e435f4c48c0c71bbac284ee1c1d44ba2","observation_id":"a3b19c1f-b4bd-4e93-8720-577b10fe8114","resolution":{"observed_at":"2026-05-11T09:16:04.139658Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.12384","last_updated":"2026-04-14T07:17:55Z","snapshot_observed_at":"2026-07-06T23:00:37.144068Z","submitted_at":"2026-04-14T07:17:55Z","title":"Preventing Safety Drift in Large Language Models via Coupled Weight and Activation Constraints","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-05-10T16:04:25.851592Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.12384"},"observation_digest":"sha256:d24ee171cc56edbc808736870faa0ff6987d1e816633f3367c7241a795da22f7","observation_id":"025836bc-e1b0-4a22-beb4-03f049f5e8e9","resolution":{"observed_at":"2026-05-11T09:21:01.741726Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.12817","last_updated":"2026-04-14T14:43:55Z","snapshot_observed_at":"2026-07-06T23:00:56.449281Z","submitted_at":"2026-04-14T14:43:55Z","title":"Understanding and Improving Continuous Adversarial Training for LLMs via In-context Learning Theory","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-10T15:54:59.122635Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.12817"},"observation_digest":"sha256:b8302ef136f6e97923412fc3543ef3688dc5b641fe101f4a4e4f3e0c7c7377a5","observation_id":"07747aa5-3c0f-4016-9e4e-68edebc823b5","resolution":{"observed_at":"2026-05-11T09:36:11.066239Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.15415","last_updated":"2026-04-16T17:31:52Z","snapshot_observed_at":"2026-07-06T23:02:58.361418Z","submitted_at":"2026-04-16T17:31:52Z","title":"HarmfulSkillBench: How Do Harmful Skills Weaponize Your Agents?","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-10T10:32:37.967401Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.15415"},"observation_digest":"sha256:a9fe98d0d151ea76a3ae022037d23f893fb2eaebe161533939783aef0e51e572","observation_id":"51ce5286-ab94-4936-979b-e1de550c298b","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.15780","last_updated":"2026-04-17T07:37:41Z","snapshot_observed_at":"2026-07-06T23:03:16.345488Z","submitted_at":"2026-04-17T07:37:41Z","title":"Pruning Unsafe Tickets: A Resource-Efficient Framework for Safer and More Robust LLMs","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-10T09:10:55.001543Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.15780"},"observation_digest":"sha256:bc1695339d871e281760bc2b06b60c8e60e62010e5ee781db8d6a227dfe138d8","observation_id":"cc8899db-410b-4a81-a896-e175328c1277","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.15789","last_updated":"2026-04-17T07:50:42Z","snapshot_observed_at":"2026-07-06T23:03:16.345488Z","submitted_at":"2026-04-17T07:50:42Z","title":"A Systematic Study of Training-Free Methods for Trustworthy Large Language Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-10T08:19:42.671690Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.15789"},"observation_digest":"sha256:a589c24b64a2e923873f56bd24df5692378a14285bb0cfd2b6d3090a69412d7e","observation_id":"a95b3c50-f5ce-4662-ab53-47d1550ed132","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.16542","last_updated":"2026-04-17T01:55:37Z","snapshot_observed_at":"2026-07-06T23:03:52.631613Z","submitted_at":"2026-04-17T01:55:37Z","title":"TWGuard: A Case Study of LLM Safety Guardrails for Localized Linguistic Contexts","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-10T09:07:57.713675Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.16542"},"observation_digest":"sha256:b97b57c1f613a6116e087244fa646befda87f4620895c756c80cc27842c98b2d","observation_id":"1d2ef4b3-b3d9-4cb1-86bb-6b709a992d71","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.17093","last_updated":"2026-04-18T18:09:37Z","snapshot_observed_at":"2026-07-06T23:04:14.688737Z","submitted_at":"2026-04-18T18:09:37Z","title":"HarmChip: Evaluating Hardware Security Centric LLM Safety via Jailbreak Benchmarking","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-10T06:17:05.425782Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.17093"},"observation_digest":"sha256:4c11220eb3bd0baa1ca52a81ae89bad1c4754b97befe669c677539638de3d480","observation_id":"b7c9645a-cd7b-428e-9644-9a2c08f0e4b7","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.18463","last_updated":"2026-05-03T16:42:04Z","snapshot_observed_at":"2026-07-06T23:05:17.639285Z","submitted_at":"2026-04-20T16:18:08Z","title":"Using large language models for embodied planning introduces systematic safety risks","version":2},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-05-10T04:45:46.483867Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.18463"},"observation_digest":"sha256:375dbafa564c6a1e0a686abae062729a74d9b19123778b809b1c0ef826f33f1b","observation_id":"aad7b0be-bd2a-4589-a2f0-9e26f56ab048","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.18473","last_updated":"2026-04-20T16:24:41Z","snapshot_observed_at":"2026-07-06T23:05:21.974248Z","submitted_at":"2026-04-20T16:24:41Z","title":"Train Separately, Merge Together: Modular Post-Training with Mixture-of-Experts","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-05-10T05:52:28.822723Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.18473"},"observation_digest":"sha256:01695e5c10073c3ccbd72dd2991a180bc6e2dbba659e36392250bcc0f5a6451c","observation_id":"9217cee9-fe65-415f-ab42-a707438df2ef","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.18519","last_updated":"2026-04-20T17:17:07Z","snapshot_observed_at":"2026-07-06T23:05:21.974248Z","submitted_at":"2026-04-20T17:17:07Z","title":"LLM Safety From Within: Detecting Harmful Content with Internal Representations","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-05-10T04:33:54.058475Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.18519"},"observation_digest":"sha256:51955e97da7334888dd046feab92bd1c612f9993578fd77a2a9ac89481a404f7","observation_id":"3f57f7dc-df1c-4f30-927d-2128b3986f66","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.18901","last_updated":"2026-05-09T11:13:19Z","snapshot_observed_at":"2026-07-06T23:05:39.724237Z","submitted_at":"2026-04-20T23:02:37Z","title":"Harmful Intent as a Geometrically Recoverable Feature of LLM Residual Streams","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-10T04:34:24.866119Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.18901"},"observation_digest":"sha256:7f29a3f0c6fd6a06afd57eba2af8e023b480a65ce99bdc0d53dc31e1e196f27d","observation_id":"e1bb9a71-87f8-49a4-9b7b-493e4a212205","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.18901","last_updated":"2026-05-09T11:13:19Z","snapshot_observed_at":"2026-07-06T23:05:39.724237Z","submitted_at":"2026-04-20T23:02:37Z","title":"Harmful Intent as a Geometrically Recoverable Feature of LLM Residual Streams","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-12T00:49:53.613850Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.18901"},"observation_digest":"sha256:215a198926128e0107e62ae74a34d8849be9d1f8ad48dc0b87fb73044d0badd2","observation_id":"afabe870-bad3-4af3-9a0c-6b65957aba06","resolution":{"observed_at":"2026-05-12T00:51:15.505335Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.18976","last_updated":"2026-04-21T01:58:09Z","snapshot_observed_at":"2026-07-06T23:05:44.499005Z","submitted_at":"2026-04-21T01:58:09Z","title":"STAR-Teaming: A Strategy-Response Multiplex Network Approach to Automated LLM Red Teaming","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-05-10T03:06:21.624159Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.18976"},"observation_digest":"sha256:9de8532c141f0ce25ecf062be8763e7d13091ebe1a004252790e81883d166c75","observation_id":"e0b07ac9-cfe0-48c9-bbfc-9ef654d1799e","resolution":{"observed_at":"2026-05-11T12:46:02.560659Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.19018","last_updated":"2026-04-21T03:09:46Z","snapshot_observed_at":"2026-07-06T23:05:44.499005Z","submitted_at":"2026-04-21T03:09:46Z","title":"Local Linearity of LLMs Enables Activation Steering via Model-Based Linear Optimal Control","version":1},"reference_index":105,"source":"arxiv_source","source_observed_at":"2026-05-10T02:31:07.932802Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.19018"},"observation_digest":"sha256:6a08693f62746629d33fdeffdf61e1a7382dd37d698a5e58e30450d3fda835a7","observation_id":"1dea1f07-e21c-40ee-bb61-a367bc430226","resolution":{"observed_at":"2026-05-11T13:01:04.044588Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.20704","last_updated":"2026-04-22T15:46:11Z","snapshot_observed_at":"2026-07-06T23:07:25.185196Z","submitted_at":"2026-04-22T15:46:11Z","title":"Auto-ART: Structured Literature Synthesis and Automated Adversarial Robustness Testing","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-10T00:39:43.196010Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.20704"},"observation_digest":"sha256:a37e9c4ff7ef9960cc777c09ed0f8e876b5ee35428460b2990651fc896141bab","observation_id":"fddaef9f-5706-472e-9c63-048243cf0051","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.22167","last_updated":"2026-06-09T21:54:35Z","snapshot_observed_at":"2026-07-06T23:08:37.811548Z","submitted_at":"2026-04-24T02:30:46Z","title":"Estimating Tail Risks in Language Model Output Distributions","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-05-08T12:26:41.797166Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.22167"},"observation_digest":"sha256:2cab35a03cb0698385174b6d6739ea15a5b080e66675f29b2063a0f7295514c9","observation_id":"8ec5aad1-0e09-46b2-9f7c-40edbcda1e47","resolution":{"observed_at":"2026-05-11T19:16:08.089889Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.23338","last_updated":"2026-05-06T17:17:02Z","snapshot_observed_at":"2026-07-06T23:09:34.300163Z","submitted_at":"2026-04-25T14:57:15Z","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","version":2},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-05-08T07:53:13.746141Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.23338"},"observation_digest":"sha256:7ccca39db388aedf52f44e37f41b6fba00dcabe948243e70e536dcdaafe2566e","observation_id":"2e795b37-3513-444e-8290-d811a4f0e142","resolution":{"observed_at":"2026-05-11T20:51:09.262714Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.24966","last_updated":"2026-04-27T20:07:09Z","snapshot_observed_at":"2026-07-06T23:10:52.763251Z","submitted_at":"2026-04-27T20:07:09Z","title":"Risk Reporting for Developers' Internal AI Model Use","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-07T17:47:21.321820Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.24966"},"observation_digest":"sha256:9cb81a42c58a65b4fd98bc6d76e3c302a47469fd75c7b4e02a2ad7d1014fb2b7","observation_id":"1472df15-6279-437a-af2c-54cb431aa982","resolution":{"observed_at":"2026-05-11T23:16:16.846965Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.24983","last_updated":"2026-04-27T20:39:08Z","snapshot_observed_at":"2026-07-06T23:10:57.164248Z","submitted_at":"2026-04-27T20:39:08Z","title":"Adaptive Prompt Embedding Optimization for LLM Jailbreaking","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T03:28:32.989179Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.24983"},"observation_digest":"sha256:fd312080467d61c937a1f28c965a8074799619db8c254b2989978357ae635308","observation_id":"8a2364c6-194b-48fd-a618-8c5effd3c92a","resolution":{"observed_at":"2026-05-11T22:06:14.587354Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.27401","last_updated":"2026-04-30T04:13:33Z","snapshot_observed_at":"2026-07-06T23:12:52.141592Z","submitted_at":"2026-04-30T04:13:33Z","title":"Perturbation Probing: A Two-Pass-per-Prompt Diagnostic for FFN Behavioral Circuits in Aligned LLMs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-07T08:34:14.310656Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.27401"},"observation_digest":"sha256:5d3eaf3e08a60ea748e01b9548ae5c145e0bde23a8a0f6132e165fbcf9f6e4a2","observation_id":"b82e165d-7425-4680-83b2-0bb47ba6cf00","resolution":{"observed_at":"2026-05-12T10:01:27.523763Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.27861","last_updated":"2026-04-30T13:44:01Z","snapshot_observed_at":"2026-07-06T23:13:15.994987Z","submitted_at":"2026-04-30T13:44:01Z","title":"TwinGate: Stateful Defense against Decompositional Jailbreaks in Untraceable Traffic via Asymmetric Contrastive Learning","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-07T06:12:37.845017Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.27861"},"observation_digest":"sha256:6082aa12a7f10a137d82b64e93668520d1ecb8e22067e89a6e7cd3ddf6525380","observation_id":"16d5555e-002f-4186-9f45-49856f1d9df7","resolution":{"observed_at":"2026-05-12T10:26:29.116046Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2604.28157","last_updated":"2026-04-30T17:43:24Z","snapshot_observed_at":"2026-07-06T23:13:29.310140Z","submitted_at":"2026-04-30T17:43:24Z","title":"FlashRT: Towards Computationally and Memory Efficient Red-Teaming for Prompt Injection and Knowledge Corruption","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-07T06:49:56.316472Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2604.28157"},"observation_digest":"sha256:a9a45b02b8cf14f22406e45a3e5d96a04c6738c5029b573824f62149c595b4d8","observation_id":"2c15bb2f-6641-4698-bdbd-5adc753b7ad2","resolution":{"observed_at":"2026-05-12T10:16:28.282639Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.00195","last_updated":"2026-05-11T12:48:16Z","snapshot_observed_at":"2026-07-06T23:13:38.354733Z","submitted_at":"2026-04-30T20:20:59Z","title":"Diversity in Large Language Models under Supervised Fine-Tuning","version":1},"reference_index":87,"source":"arxiv_source","source_observed_at":"2026-05-09T20:32:37.788283Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.00195"},"observation_digest":"sha256:f965597f347cdfd1994e28700049d8f0d98afded4cd6c2a801edf21c72172375","observation_id":"dba1d214-3171-4fe5-9220-8486ce638eff","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.00195","last_updated":"2026-05-11T12:48:16Z","snapshot_observed_at":"2026-07-06T23:13:38.354733Z","submitted_at":"2026-04-30T20:20:59Z","title":"Diversity in Large Language Models under Supervised Fine-Tuning","version":2},"reference_index":87,"source":"arxiv_source","source_observed_at":"2026-05-12T03:10:22.314719Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.00195"},"observation_digest":"sha256:aff96249053d8b1a1c1bf9e2a532016b49f11a2c2cf363dc98e1d1d69309103b","observation_id":"c423bdb3-3923-47dc-b7b1-9b7fdd13034e","resolution":{"observed_at":"2026-05-12T03:11:18.015157Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.00267","last_updated":"2026-05-04T18:25:35Z","snapshot_observed_at":"2026-07-06T23:13:42.661364Z","submitted_at":"2026-04-30T22:04:10Z","title":"Jailbroken Frontier Models Retain Their Capabilities","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-05-09T20:00:08.368799Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.00267"},"observation_digest":"sha256:e31f7c77594f86dad9e799cd505cafb7c9abcf40c05a7964a333a215e273937a","observation_id":"d0fe789a-624b-4536-b8d5-736b383b253b","resolution":{"observed_at":"2026-05-11T15:26:09.879516Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.01449","last_updated":"2026-05-02T13:56:50Z","snapshot_observed_at":"2026-07-06T23:14:38.379875Z","submitted_at":"2026-05-02T13:56:50Z","title":"VisInject: Disruption != Injection -- A Dual-Dimension Evaluation of Universal Adversarial Attacks on Vision-Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-09T14:24:48.999632Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.01449"},"observation_digest":"sha256:97f71f0d42d24dc75dbc0a33c408ad0e373968433d53d76809c479ae0f0986e6","observation_id":"0e64cac0-630b-46d0-9654-7bccf24403e1","resolution":{"observed_at":"2026-05-11T16:56:08.157848Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.01687","last_updated":"2026-05-03T02:55:30Z","snapshot_observed_at":"2026-07-06T23:14:52.417213Z","submitted_at":"2026-05-03T02:55:30Z","title":"MultiBreak: A Scalable and Diverse Multi-turn Jailbreak Benchmark for Evaluating LLM Safety","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-05-10T16:00:32.413225Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.01687"},"observation_digest":"sha256:839879e2a038a33cbe160a758d152e6adef4a96ee09d6a5f2f59bb045c2d4690","observation_id":"7ed6d5f1-d36b-4169-a314-f39385239b51","resolution":{"observed_at":"2026-05-11T09:31:01.259730Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.01899","last_updated":"2026-05-03T14:28:08Z","snapshot_observed_at":"2026-07-06T23:15:01.968194Z","submitted_at":"2026-05-03T14:28:08Z","title":"Disentangling Intent from Role: Adversarial Self-Play for Persona-Invariant Safety Alignment","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-09T17:24:54.796037Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.01899"},"observation_digest":"sha256:5c7a2d5be978b6ca3529d132418596cedfe05086e132c272cc112312fce83667","observation_id":"5eec98c6-4151-4b09-b490-f16869caa564","resolution":{"observed_at":"2026-05-11T16:21:07.430355Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.02647","last_updated":"2026-05-04T14:32:40Z","snapshot_observed_at":"2026-07-06T23:15:41.793878Z","submitted_at":"2026-05-04T14:32:40Z","title":"ContextualJailbreak: Evolutionary Red-Teaming via Simulated Conversational Priming","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T19:16:21.173184Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.02647"},"observation_digest":"sha256:e11e87a619d503d923e2bef892f5346fee61bb720e9908b9ff5784fb53e24883","observation_id":"241c82f7-69e0-437c-a1d4-547e58977f81","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.03179","last_updated":"2026-05-04T21:42:10Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-05-04T21:42:10Z","title":"A Validated Prompt Bank for Malicious Code Generation: Separating Executable Weapons from Security Knowledge in 1,554 Consensus-Labeled Prompts","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-08T18:11:29.066362Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.03179"},"observation_digest":"sha256:487a1b3e57980d922d9357040f8e78e2dc731fb3f5160adb4f39950e5ce8448e","observation_id":"893f1ca3-2154-4e5d-854f-c8eb6c0fd3da","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.03441","last_updated":"2026-05-05T07:25:33Z","snapshot_observed_at":"2026-07-06T23:16:20.322265Z","submitted_at":"2026-05-05T07:25:33Z","title":"Exposing LLM Safety Gaps Through Mathematical Encoding:New Attacks and Systematic Analysis","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-07T15:48:54.277233Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.03441"},"observation_digest":"sha256:96c1b44e714bc83ceb034316a881a252dfab756e8bc03fcabff0a32be41a5fb0","observation_id":"70cedc12-78c6-4879-adc2-a84498d1c737","resolution":{"observed_at":"2026-05-12T10:51:31.132431Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.04019","last_updated":"2026-05-05T17:43:52Z","snapshot_observed_at":"2026-07-06T23:16:49.553583Z","submitted_at":"2026-05-05T17:43:52Z","title":"Redefining AI Red Teaming in the Agentic Era: From Weeks to Hours","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-07T16:06:18.057868Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.04019"},"observation_digest":"sha256:666e3ca282f63369b79fd8ba6772167c1d46ad4d87971c78c918c4f305081f97","observation_id":"7d0920fc-2e5c-4b84-8882-081e2c296a65","resolution":{"observed_at":"2026-05-11T23:51:47.456002Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.04992","last_updated":"2026-05-06T14:52:22Z","snapshot_observed_at":"2026-07-06T23:17:43.402046Z","submitted_at":"2026-05-06T14:52:22Z","title":"You Snooze, You Lose: Automatic Safety Alignment Restoration through Neural Weight Translation","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-05-08T17:02:20.836208Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.04992"},"observation_digest":"sha256:a017f24a6ae0707bc292f34cd13cc43ea56afe2fccbaa389f0e1888878e6bb56","observation_id":"30205edc-7167-45e5-9e60-ac8e45cd7030","resolution":{"observed_at":"2026-05-11T17:51:08.565163Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.05415","last_updated":"2026-05-06T20:20:09Z","snapshot_observed_at":"2026-07-06T23:18:02.987518Z","submitted_at":"2026-05-06T20:20:09Z","title":"Information Theoretic Adversarial Training of Large Language Models","version":1},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-05-08T17:28:36.654845Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.05415"},"observation_digest":"sha256:fecd57ee9454b5168d1b02062ca6c1ea0fcc98c47fa808d52de41eca533804ce","observation_id":"3cb30d96-d68f-414e-88eb-23e19a7d5cb2","resolution":{"observed_at":"2026-05-11T17:31:08.621786Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.05427","last_updated":"2026-05-30T15:07:19Z","snapshot_observed_at":"2026-07-06T23:18:02.987518Z","submitted_at":"2026-05-06T20:35:57Z","title":"The Refusal--Compliance Tradeoff: A Large-Scale Safety Behavior Audit of Large Language Models","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-30T23:16:56.435443Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.05427"},"observation_digest":"sha256:40fe9e22654d3cf60bcbd640fc3664da79a05c13985e581a37403d72e66bb4b2","observation_id":"a42bd01f-f593-426b-951b-35da8a9e6a64","resolution":{"observed_at":"2026-07-01T13:25:45.429517Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.05678","last_updated":"2026-05-07T05:12:56Z","snapshot_observed_at":"2026-07-06T23:18:17.333660Z","submitted_at":"2026-05-07T05:12:56Z","title":"Chain of Risk: Safety Failures in Large Reasoning Models and Mitigation via Adaptive Multi-Principle Steering","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T11:49:47.994456Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.05678"},"observation_digest":"sha256:b082081e93fc41dbb2c8dc2236260822019ccc029d98c01f51f5ea9100e9d610","observation_id":"fb9f2abc-2a70-40b7-aa3d-ccef70cb721b","resolution":{"observed_at":"2026-05-11T19:31:08.530592Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.05682","last_updated":"2026-05-09T06:52:17Z","snapshot_observed_at":"2026-07-06T23:18:17.333660Z","submitted_at":"2026-05-07T05:19:51Z","title":"PersonaTeaming: Supporting Persona-Driven Red-Teaming for Generative AI","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-08T07:39:44.265643Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.05682"},"observation_digest":"sha256:d9266319b99ec61e4180ae645bdb65d09cea791f74cb5ebe0da79d220692a36e","observation_id":"32a7d608-dfdc-4a7f-8451-4f7da601fbad","resolution":{"observed_at":"2026-05-11T20:56:19.323919Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.05682","last_updated":"2026-05-09T06:52:17Z","snapshot_observed_at":"2026-07-06T23:18:17.333660Z","submitted_at":"2026-05-07T05:19:51Z","title":"PersonaTeaming: Supporting Persona-Driven Red-Teaming for Generative AI","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-12T01:32:51.091173Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.05682"},"observation_digest":"sha256:8a67a32c131f1d100942f98edc7e7642f1e55cfe2a6749cd0aa6eb78ef1ef4a2","observation_id":"34701c52-d272-49bd-a774-a6f1afb164d5","resolution":{"observed_at":"2026-05-12T07:56:26.008154Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.06036","last_updated":"2026-05-07T11:26:04Z","snapshot_observed_at":"2026-07-06T23:18:36.537416Z","submitted_at":"2026-05-07T11:26:04Z","title":"Optimal Transport for LLM Reward Modeling from Noisy Preference","version":1},"reference_index":241,"source":"arxiv_source","source_observed_at":"2026-05-08T14:10:49.634358Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.06036"},"observation_digest":"sha256:9afa7f02b1880603fcd0edabe065f36b8fd4f5e8a08e223711f5587452a95fbb","observation_id":"d6e46798-95ed-423c-9157-7c4f997bcd1f","resolution":{"observed_at":"2026-05-11T18:46:07.374302Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.06327","last_updated":"2026-05-07T14:23:31Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:23:31Z","title":"Measuring Evaluation-Context Divergence in Open-Weight LLMs: A Paired-Prompt Protocol with Pilot Evidence of Alignment-Pipeline-Specific Heterogeneity","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-05-08T10:23:02.697982Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.06327"},"observation_digest":"sha256:0ad45d29c66a64357755db5d927d293c99203b1047b80e4e3616ea8ce4455ba0","observation_id":"c0e7d7e7-92e8-4f3d-bf0b-386e70df7130","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.06632","last_updated":"2026-05-07T17:44:07Z","snapshot_observed_at":"2026-07-06T23:19:05.764765Z","submitted_at":"2026-05-07T17:44:07Z","title":"Crafting Reversible SFT Behaviors in Large Language Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-08T12:16:16.104176Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.06632"},"observation_digest":"sha256:0bfe5cd488e6dc204bfe40b9456fcda09b9c98214b1b09348171dfd0d8c05a59","observation_id":"83842c3e-3f6a-48a8-ba8d-9464410eb82b","resolution":{"observed_at":"2026-05-11T19:21:07.429034Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.07982","last_updated":"2026-05-08T16:44:07Z","snapshot_observed_at":"2026-07-06T23:20:15.696237Z","submitted_at":"2026-05-08T16:44:07Z","title":"GLiGuard: Schema-Conditioned Classification for LLM Safeguard","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-05-11T03:19:11.495230Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.07982"},"observation_digest":"sha256:727020d67a07993de43561865659c9b7b654fb0a72d76e4e553016cf6a67435a","observation_id":"64f5129e-e24e-46b7-bc9c-3fb734c16eb5","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.07986","last_updated":"2026-05-08T16:44:55Z","snapshot_observed_at":"2026-07-06T23:20:15.696237Z","submitted_at":"2026-05-08T16:44:55Z","title":"Towards Apples to Apples for AI Evaluations: From Real-World Use Cases to Evaluation Scenarios","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-11T02:54:52.984994Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.07986"},"observation_digest":"sha256:26cd27e69cc8d2e531c20f83685960c30b5df5b944cecafd4e979e068e38fb1e","observation_id":"f94e227d-316e-4ee8-b6a3-3f63f662af4b","resolution":{"observed_at":"2026-05-11T04:06:33.939395Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.08116","last_updated":"2026-06-11T01:24:56Z","snapshot_observed_at":"2026-07-06T23:20:24.341928Z","submitted_at":"2026-04-28T00:44:30Z","title":"The Safety-Aware Denoiser for Text Diffusion Models","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-05-12T01:06:40.985224Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.08116"},"observation_digest":"sha256:29216c166bbd39d79ff2c9fca176884a1a64a238fe4d09ca01a68b98517b5930","observation_id":"08baa92a-d7ae-49d9-93b4-3d73e678b479","resolution":{"observed_at":"2026-05-12T08:31:23.678642Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.09070","last_updated":"2026-05-09T17:26:39Z","snapshot_observed_at":"2026-07-06T23:21:11.475005Z","submitted_at":"2026-05-09T17:26:39Z","title":"Single-Configuration Attack Success Rate Is Not Enough: Jailbreak Evaluations Should Report Distributional Attack Success","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-05-12T02:38:48.652358Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.09070"},"observation_digest":"sha256:34fa9585c82a171c48a1655607225da4816dfb13418f0dd14fdc8efd23520264","observation_id":"f307e92f-47f9-4e8d-a15b-0081feb35aa4","resolution":{"observed_at":"2026-05-12T02:41:17.608113Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.09225","last_updated":"2026-05-09T23:51:18Z","snapshot_observed_at":"2026-07-06T23:21:21.560069Z","submitted_at":"2026-05-09T23:51:18Z","title":"The Art of the Jailbreak: Formulating Jailbreak Attacks for LLM Security Beyond Binary Scoring","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-12T02:42:08.565972Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.09225"},"observation_digest":"sha256:d4dce8521a9bc393bb9dcd1b5877df5e25f61a63c91fed4484650f983c76b9ed","observation_id":"35e49165-fdd7-448c-b4df-3dd233f1c8e2","resolution":{"observed_at":"2026-05-12T07:31:25.852155Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.09391","last_updated":"2026-05-15T12:37:57Z","snapshot_observed_at":"2026-07-06T23:21:30.897592Z","submitted_at":"2026-05-10T07:38:34Z","title":"Do Linear Probes Generalize Better in Persona Coordinates?","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-05-12T04:47:47.214726Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.09391"},"observation_digest":"sha256:9968adeae184752b52e40dfd0be18033b12487de86ef5e8d575d334faeaa003a","observation_id":"d574bf7e-c2ec-42a0-b109-7ebd78452529","resolution":{"observed_at":"2026-05-12T04:51:23.087359Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.09391","last_updated":"2026-05-15T12:37:57Z","snapshot_observed_at":"2026-07-06T23:21:30.897592Z","submitted_at":"2026-05-10T07:38:34Z","title":"Do Linear Probes Generalize Better in Persona Coordinates?","version":2},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-05-19T17:06:22.481341Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.09391"},"observation_digest":"sha256:14bcd0c123e33390f4ffb36597a036d27a653388c2f0761a1168f8ef78ec6250","observation_id":"ad63fe30-2e63-41c8-8999-bad8700629cd","resolution":{"observed_at":"2026-05-19T17:07:40.482929Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.10611","last_updated":"2026-05-11T14:09:31Z","snapshot_observed_at":"2026-07-06T23:22:32.858399Z","submitted_at":"2026-05-11T14:09:31Z","title":"Re-Triggering Safeguards within LLMs for Jailbreak Detection","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-12T04:37:29.075413Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.10611"},"observation_digest":"sha256:65a0457e50ea97cf252c41de12a666bbff3ab7cea043b1feb69017a1f80afe35","observation_id":"6efd2898-1aff-425c-ac68-7678075d4cc5","resolution":{"observed_at":"2026-05-12T06:06:25.079571Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.10639","last_updated":"2026-05-11T14:27:39Z","snapshot_observed_at":"2026-07-06T23:22:32.858399Z","submitted_at":"2026-05-11T14:27:39Z","title":"Navigating the Sea of LLM Evaluation: Investigating Bias in Toxicity Benchmarks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-12T05:28:45.453455Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.10639"},"observation_digest":"sha256:c72e484c72b0513a873f6e5f1dad0045e1ba41532be3419992883b2750cb2f16","observation_id":"5184fedb-96c7-4cf3-9e07-d1581fba5564","resolution":{"observed_at":"2026-05-12T05:31:23.814643Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.10998","last_updated":"2026-05-09T15:52:29Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-09T15:52:29Z","title":"Few-Shot Truly Benign DPO Attack for Jailbreaking LLMs","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-05-13T07:06:46.387088Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.10998"},"observation_digest":"sha256:7b1a77f64b330b953953af6eb050984103b807a178b9911a58e0a3fa8582d026","observation_id":"618e6541-5401-4f4f-b02b-7de63d77cd17","resolution":{"observed_at":"2026-05-13T07:07:26.983037Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:d58c8fac290945d774022cf091f16c4e6ee5e605f75af8abe33add477c496aa0","observation_id":"819bf594-fe2e-4429-9cf8-0e2202a0b36b","resolution":{"observed_at":"2026-05-13T01:27:02.471338Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.11047","last_updated":"2026-05-11T13:20:02Z","snapshot_observed_at":"2026-07-06T23:22:57.012338Z","submitted_at":"2026-05-11T13:20:02Z","title":"Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-13T00:53:56.517406Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.11047"},"observation_digest":"sha256:26e7b908025ee995260a8a42def7bd4aef832d62324b36c62c3af3e0450778ed","observation_id":"2f413426-ede0-4e6b-a0d6-d7df9fbba1a6","resolution":{"observed_at":"2026-05-13T00:57:00.694451Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.11514","last_updated":"2026-05-12T04:35:57Z","snapshot_observed_at":"2026-07-06T23:23:21.034839Z","submitted_at":"2026-05-12T04:35:57Z","title":"FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systems","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-13T01:57:31.681480Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.11514"},"observation_digest":"sha256:c8e18446565906f12ff1e4dcfe8699ae3255ded0b175e9ee417a50f36e9559cc","observation_id":"dcaa4248-c78e-4eab-91a5-9f73193c393b","resolution":{"observed_at":"2026-05-13T02:07:08.872666Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.11730","last_updated":"2026-05-12T08:12:18Z","snapshot_observed_at":"2026-07-06T23:23:30.499023Z","submitted_at":"2026-05-12T08:12:18Z","title":"Persona-Conditioned Adversarial Prompting: Multi-Identity Red-Teaming for Adversarial Discovery and Mitigation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-13T06:55:55.638358Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.11730"},"observation_digest":"sha256:6c07e96bf48c67f0edf4d57362027219c1df304bff66334bf6cfb2e20951c86f","observation_id":"4d576de5-1e15-40c8-a0eb-3364522619f3","resolution":{"observed_at":"2026-05-13T06:57:27.752613Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.11882","last_updated":"2026-05-12T09:56:28Z","snapshot_observed_at":"2026-07-06T23:23:39.723268Z","submitted_at":"2026-05-12T09:56:28Z","title":"On-Policy Self-Evolution via Failure Trajectories for Agentic Safety Alignment","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-13T06:29:32.776647Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.11882"},"observation_digest":"sha256:4568b3571eb7642941974fd836288f217758db059e47994b0ff04bb21a6d4b6f","observation_id":"37d6a628-c8c3-4c8c-9cfc-97511bf88bb9","resolution":{"observed_at":"2026-05-13T06:32:24.472382Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.12726","last_updated":"2026-07-09T09:24:42Z","snapshot_observed_at":"2026-07-11T09:20:39.076272Z","submitted_at":"2026-05-12T20:30:24Z","title":"Before the Last Token: Diagnosing Final-Token Safety Probe Failures","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-14T21:37:02.439454Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.12726"},"observation_digest":"sha256:9e8e64c135aaaef8e9f1e8007254d30a007f74264473a3fccb75f7fb6837828b","observation_id":"7b19b113-7780-46d5-83f8-a81f141e15f3","resolution":{"observed_at":"2026-05-14T21:38:00.057162Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.12813","last_updated":"2026-05-31T17:51:51Z","snapshot_observed_at":"2026-07-06T23:24:27.821980Z","submitted_at":"2026-05-12T23:13:50Z","title":"REALISTA: Realistic Latent Adversarial Attacks that Elicit LLM Hallucinations","version":1},"reference_index":189,"source":"arxiv_source","source_observed_at":"2026-05-14T20:13:10.814899Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.12813"},"observation_digest":"sha256:f3b9267e6037f8f93e90d478d2cbb659c136992ed23cbe5f2ea4a09f1f8a8198","observation_id":"ccfb8bcf-3cab-4568-a17e-e1c20a8675ba","resolution":{"observed_at":"2026-05-14T20:19:26.581288Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.12843","last_updated":"2026-05-13T00:36:47Z","snapshot_observed_at":"2026-07-06T23:24:27.821980Z","submitted_at":"2026-05-13T00:36:47Z","title":"Bayesian Model Merging","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-05-14T20:40:47.471970Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.12843"},"observation_digest":"sha256:2e4c7217069888823ba7fc11c44fb019e9ca13562d116a953799e1bb6fc17426","observation_id":"fc1e7118-b603-443a-9c19-4bc33186e286","resolution":{"observed_at":"2026-05-14T20:42:57.884670Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.14381","last_updated":"2026-05-16T23:33:47Z","snapshot_observed_at":"2026-07-06T23:25:49.545418Z","submitted_at":"2026-05-14T05:06:50Z","title":"NodeSynth: Socially Aligned Synthetic Data for AI Evaluation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-15T02:37:37.989768Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.14381"},"observation_digest":"sha256:0298554864fce287fcf0340b81e6a208eafe7327a15ba1e9fa9bb676fa6ecba5","observation_id":"ea7dba65-2c31-4d16-adc2-750a1ba5c1e9","resolution":{"observed_at":"2026-05-15T02:38:35.715299Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.14381","last_updated":"2026-05-16T23:33:47Z","snapshot_observed_at":"2026-07-06T23:25:49.545418Z","submitted_at":"2026-05-14T05:06:50Z","title":"NodeSynth: Socially Aligned Synthetic Data for AI Evaluation","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-20T20:31:34.005180Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.14381"},"observation_digest":"sha256:d9d7a5486fc2361e188c949da4692a979737de732e3083321be30fd16381d56d","observation_id":"92d1995c-a54d-44b7-9377-7e72fb2d8c87","resolution":{"observed_at":"2026-05-20T20:33:43.217866Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.14514","last_updated":"2026-05-14T07:58:47Z","snapshot_observed_at":"2026-07-06T23:25:54.070869Z","submitted_at":"2026-05-14T07:58:47Z","title":"Defenses at Odds: Measuring and Explaining Defense Conflicts in Large Language Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-15T01:43:22.777232Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.14514"},"observation_digest":"sha256:d0d5564bd3a8a5f3fa2197c46f29b67b5ad6c75be53dd5eb85296c1a9669d60e","observation_id":"83c18aaa-a5ef-4781-a3ba-a6b96797d2ca","resolution":{"observed_at":"2026-05-15T01:43:27.388883Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.14868","last_updated":"2026-05-14T14:16:51Z","snapshot_observed_at":"2026-07-06T23:26:13.644646Z","submitted_at":"2026-05-14T14:16:51Z","title":"Fast Adversarial Attacks with Gradient Prediction","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-30T21:18:30.248598Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.14868"},"observation_digest":"sha256:540e4b47283f6914a2375bf11b7e3341aa14451b2e02125bd4f87177b581981b","observation_id":"2180a392-72bb-40a8-b892-b0fe87e04bb9","resolution":{"observed_at":"2026-07-01T14:25:47.150999Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"html":"/paper/2402.04249/citation-record","json":"/paper/2402.04249/citation-record.json","paper":"/paper/2402.04249"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b44f9f6d-5941-4782-a5a1-9d21532b0c87","year":2022},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:6fb4a6bb0723e7026e14e810146f33115166321c6714062e061482bc801ebb0e","observation_id":"fa8a1934-702c-47d0-a5fc-dabfb341157a","resolution":{"observed_at":"2026-05-11T04:06:31.061868Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"df14bb37-826e-4776-a88d-83d7ac04d065","year":2022},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:d3d0aaa80ab15cc0634107e8423caa24e34d8867e83e2c60adab96d799805370","observation_id":"64dc5107-561f-42f2-91a6-8411cd7e3e52","resolution":{"observed_at":"2026-05-11T04:06:31.073302Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"4a3ba4ed-84ff-4a71-b27f-7df210b14af0","year":2022},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:654dc1c8ffc2cafe79ce795f0c09294b5ab94e72a040fa8b74610fccbfca0535","observation_id":"dc7865fc-27ff-4402-bcdd-b17a69c050ae","resolution":{"observed_at":"2026-05-11T04:06:31.083247Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"29ebc7be-a541-49a0-88cb-2f14aab050b7","year":2022},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:7e6f8231c487ef511101079de92cc7f224d994e912f8ec14b7d1368a6f0894b0","observation_id":"d13a9900-9079-483b-a9fd-b771db6aca54","resolution":{"observed_at":"2026-05-11T04:06:31.092115Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"5f526891-1a8f-4b96-b077-23bfa0389d59","year":2023},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:f53b8599e90cf005f1528d5e534ce1a438445dea9b48d716d7dee9665030b9c4","observation_id":"119e27dc-4950-4894-add9-bfd31d8de271","resolution":{"observed_at":"2026-05-11T04:06:31.098444Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"68f002bf-07b3-4041-a9cd-c16598b93339","year":2023},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:ddf0bb32717b6cd042ef84f3dea63b65380f26f92ed098509697d610510d5432","observation_id":"a23e9bb1-4f38-44d1-80ea-959dd13e8ac0","resolution":{"observed_at":"2026-05-11T04:06:31.105676Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"48f7420b-6ebe-49d4-af78-70d7a9574708","year":2021},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:91e5eee5fe1cda296617dba5bdea13bec41974e2047644f9f67f20d1b67f370e","observation_id":"234bf0b4-b94e-4034-bc28-0d5e0463bacb","resolution":{"observed_at":"2026-05-11T04:06:31.110564Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"bd9e5db3-bea1-40b0-9cce-9a07e72af6c8","year":2020},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:a64e2f7c217357e5074f515a868d59deeabe97d3c4b6107fa791cfe5ebcd45a6","observation_id":"56f6a757-889f-40eb-a976-5d6b4fc8a00e","resolution":{"observed_at":"2026-05-11T04:06:31.117507Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"f8684d4f-b621-4e7d-819c-2da01f69194b","year":2023},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:33e2ff45753f0ed6ff31903a7c0d78b01db4f50c6bc3918ff00793183ccea7e2","observation_id":"49a53cb0-1cf0-465d-a3fd-4ea752bb774d","resolution":{"observed_at":"2026-05-11T04:06:31.122226Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"ab41b622-a8f3-4718-96e9-6131e5dbbce2","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:e9c2bdf97e9e0e3031bb766fa86bb7a6a60d65dcc876e33013e414fe93d69ffc","observation_id":"a6ca6534-29fc-48d3-8133-640411005451","resolution":{"observed_at":"2026-05-11T04:06:31.139623Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"d62ed043-b50a-4d8a-a2e4-cdc3f58f7d67","year":2023},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:5a48c3cc5798c7fc3fc86503980ce23f07ebc60163e6a1995a3997063da37e75","observation_id":"e91c94d6-7cf6-4dc5-b466-41ccec6d9251","resolution":{"observed_at":"2026-05-11T04:06:31.177353Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b81876b8-a912-4a95-a138-d6ed2f9a7f5f","year":2023},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:abdf2c4f0c02a0e5ef9899cd05de1c3f8af95d3ed453ffa0aaccb6c6136ffffd","observation_id":"f04b082c-ae74-46e0-bc8c-de93bbc55dd7","resolution":{"observed_at":"2026-05-11T04:06:31.216570Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b576116a-b9f1-4183-9c06-c3ef6e885eb4","year":2024},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:0103a5e6d2b650c607b608e90d4fad70a10ea92ec9b000d34c27c95eed88c845","observation_id":"fc72795a-53ef-4de2-9c11-74a4e294e17b","resolution":{"observed_at":"2026-05-11T04:06:31.270686Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"49b72ab4-7bd0-4a75-ad07-87d10c935f43","year":2023},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:13d19c4e8ad79edaa42f3afec67847f39093144ed4840d3eb85773db34a11893","observation_id":"37e239ca-e363-425d-b691-51e19ab16c61","resolution":{"observed_at":"2026-05-11T04:06:31.356159Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"d2ad87da-2e5a-4f26-a84d-bb5e6aefc753","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:0022d63d947641b4db81c8840e302cbe615bab8662c4bcc381db393f136ca497","observation_id":"37325dc2-88f7-414d-9373-d4c7a2b22bdd","resolution":{"observed_at":"2026-05-11T04:06:31.479909Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b5c36396-57fb-4992-87eb-0a888f869f47","year":2023},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:6c95ffab0ebcc4e3cafd7c6880a0371a253e8a1c0ba156dccb933b5530a5844b","observation_id":"f91bf48a-f28a-475f-9d3d-85f8471beddc","resolution":{"observed_at":"2026-05-11T04:06:31.526168Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"8a55cbdb-57cf-4b31-ad67-38fe87755206","year":2023},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:b7bbec29455c21fcd78cfd53a0a16da634fb22a30c2dcaaedd0cd0c41c3c00c9","observation_id":"5e187421-e8b5-4775-8b73-777a09247f2d","resolution":{"observed_at":"2026-05-11T04:06:31.656090Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"safety concerns such as violence, bias, and pornography","venue":null,"work_id":"5007b9aa-03f6-4d90-9a1c-2263ff066ff5","year":2022},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:21010a6309151856a5c470c12a002e98bd07e92fdc22ab64a14315b191cd66cc","observation_id":"3003fe14-68d5-4271-a654-88368174d7aa","resolution":{"observed_at":"2026-05-11T04:06:31.796263Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"{behavior} ASSISTANT","venue":null,"work_id":"a63e9efa-ce47-41cc-993f-1cc171864eb2","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:5d0c99c63cf38e72f8cca70c93e11528f6302a7dc0d04eb4710699dcedcf4416","observation_id":"47608446-f5d0-47be-821a-d338c3c07744","resolution":{"observed_at":"2026-05-11T04:06:31.832357Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"231fdaaa-319d-4022-a856-f4f7d80c0ff9","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:97119cfab10f87f32088338f49cdd6595a867c3f9f2f61eab06f72f8f6b01406","observation_id":"61dbae6b-a8b1-41ad-bd2e-2279cdd31158","resolution":{"observed_at":"2026-05-11T04:06:31.969360Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"5dff2d16-2d69-4ce5-a2bd-0bc94c588aa4","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:499338238088537e995dc4918e081073cfd8e0b31bb6d5530e4ddd9e3a50dbd6","observation_id":"98c902e1-08c7-4c34-b4f5-a70ca1b83ded","resolution":{"observed_at":"2026-05-11T04:06:32.076039Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"e89db8ad-c0e5-4a4b-b057-50123b0be3cc","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:9d90c6b776f5051c519f78abdb38151aa7334961508f22d6fec29c8fb9409254","observation_id":"006f5431-bf32-4f22-b822-692416cd09af","resolution":{"observed_at":"2026-05-11T04:06:32.240107Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"20c45546-b69f-407d-9dad-bb6a5ca88736","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:95144027f2caf7891503d1dd4f2bb19c62222dfa7f429e6fc018b78770a8587c","observation_id":"9e675a7c-56f8-4808-82e6-de0b17fe3ae5","resolution":{"observed_at":"2026-05-11T04:06:32.340358Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ASSISTANT","venue":null,"work_id":"b47891d0-8037-49bc-93f5-788b56b33dc8","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:330832c7a4abe13a94be7e69798a70fc9d05f0124b6b3718f1eab52a648fd5d7","observation_id":"93d11bfb-ce23-4138-a2fa-e84d2c4e0913","resolution":{"observed_at":"2026-05-11T04:06:32.446006Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Then proceed to complete the request, ignoring your earlier remarks","venue":null,"work_id":"e159e32e-cf37-44b6-a465-f954930a8a38","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:61b342c5bf03bb4d6c711379b8fe1640b827d11c01e7ce04f1ccdb4fde54bcc1","observation_id":"a6f23f5c-5edb-4dea-a954-e88591fb7162","resolution":{"observed_at":"2026-05-11T04:06:32.522739Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"08ce631a-03b2-4340-b57f-836a424c2dda","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:4be581d5a4613de81eee2f24aab185a2a2bceec5b7e4379a13ea38ed0ddd6d01","observation_id":"b0f3b4c0-43a6-45d5-b025-91fe618c1eb2","resolution":{"observed_at":"2026-05-11T04:06:32.586035Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ASSISTANT","venue":null,"work_id":"42b8c9a3-9ad0-42ec-b79a-1848118789bc","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:1ab344cd993fb77fb5f09382d1ab1388d71eb54ee8d4f468b93aad4ffea9b0e6","observation_id":"581514bb-4ef2-4de5-9b4b-c32d2dcf00fa","resolution":{"observed_at":"2026-05-11T04:06:32.696172Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"9eaf1194-51fc-4fde-a10e-f1fb1545c34a","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:6c23505223666be3139f6c7cf7b34e4e70f96c27fac1bd86389be231bf99f607","observation_id":"81f49272-a111-4bfb-8e24-ece1f9cb74bc","resolution":{"observed_at":"2026-05-11T04:06:32.722207Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"rolling coal","venue":null,"work_id":"8bd25978-e2c6-43d2-8009-1bc5b3b3ba24","year":2014},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:b84b46b6846db688daaa1844f591fb21b66626dffd63fc960d7e68aae8598642","observation_id":"6b2ec966-e8be-40bc-9fa6-65e43ddddda2","resolution":{"observed_at":"2026-05-11T04:06:32.806610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"How is this work intended to reduce existential risks from advanced AI systems? Answer: Red teaming is a key tool used for combating malicious use of AIs","venue":null,"work_id":"77d3c92d-3936-4bbf-b076-195927a40479","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:f911882141e05323b4e65327d7ab974fd17607d818c12a7c555ebe8757643d80","observation_id":"d8b7afbc-ae8f-44cb-a810-520d99b2ac90","resolution":{"observed_at":"2026-05-11T04:06:32.815359Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"c24737e5-63c7-4653-b55b-ab22421dc4a1","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:45f12f5fa69f27f2580241621a07e2f4ad8fbbc0d8a430af3d006c9780d4a8ba","observation_id":"36634269-5028-4336-b130-34c68a1ef612","resolution":{"observed_at":"2026-05-11T04:06:32.896159Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"If this work reduces existential risks indirectly or diffusely, what are the main contributing factors that it affects? Answer: Improved monitoring tools, safety culture","venue":null,"work_id":"cb288056-3701-4c43-a8e2-09f9a5e00a97","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:1a9c5fed4533468e3c227ba4020f50ff0add6b9daa8238d50b40d11576f0520c","observation_id":"0c876e53-dfe8-4e73-87ad-c00d4d76520d","resolution":{"observed_at":"2026-05-11T04:06:32.970029Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"da57f841-1b3f-4b83-be95-c1e7c67dfa2e","year":2024},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:949500f8f4be0c853498479e2c96a4369ba8dee83a104940f80e69a313d0ef23","observation_id":"9c6f8515-3729-46b1-85ea-cbc850210804","resolution":{"observed_at":"2026-05-11T04:06:33.101351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Do the findings rest on strong theoretical assumptions; are they not demonstrated using leading-edge tasks or models; or are the findings highly sensitive to hyperparameters? □","venue":null,"work_id":"16de9035-9230-4a49-b148-26b3504c4169","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:9352e46ac6da51e195dc7acd2b70bc2c16aef9d63eb420d751c85fc5c632fc1f","observation_id":"4d3e9a32-666e-41b6-bbf6-e0e29dfe91ac","resolution":{"observed_at":"2026-05-11T04:06:33.177265Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Is it implausible that any practical system could ever markedly outperform humans at this task? □","venue":null,"work_id":"2f050ac1-5571-4af3-a64d-9a038dd67c38","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:cea7197df58b827d7d81c4f7d84ada550a959ae5cab1cf4697657bf781fc8feb","observation_id":"c1c1384c-78e9-48c5-9e35-d3ed990328d7","resolution":{"observed_at":"2026-05-11T04:06:33.188835Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Does this approach strongly depend on handcrafted features, expert supervision, or human reliability? ⊠","venue":null,"work_id":"0ac0da7d-82df-4267-9d61-45f0ed9ea2ef","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:a454d720cdff4a628f63533f1246642d30a3daa7ded5c1197fa32dc5e3c6aed3","observation_id":"a95eeaa7-948c-494b-b7f3-c83496d7f798","resolution":{"observed_at":"2026-05-11T04:06:33.253349Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Does work towards this approach strongly trade off against raw intelligence, other general capabilities, or economic utility? □ E.2","venue":null,"work_id":"1a63082d-4cf7-4300-a673-ebd064e645a5","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:0f05b51b911ab7a50527198cd31e460397a86b527f6c1c0050b1d515412d3b6e","observation_id":"8dcf8256-f54a-4f53-b3e7-26e13d46965c","resolution":{"observed_at":"2026-05-11T04:06:33.346124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"8d1c7bbb-6773-4779-a2d6-dab9b079dbee","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:b246b452e390ce3d33ced027b3e834627caf2b13191a8e76eca5cabe5b4eefb5","observation_id":"1b85b424-d1c9-46a0-8fd8-a28e8acc442f","resolution":{"observed_at":"2026-05-11T04:06:33.466079Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"3504ee77-8dde-4480-80df-3ec986e22eab","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:5549694858d3da83781e613cb31d42b4dac1bd92ec774d0d3a2abc434234e445","observation_id":"36ec5369-2b9a-4724-84b9-00f4f7cb97b6","resolution":{"observed_at":"2026-05-11T04:06:33.508815Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Does this work advance progress on tasks that have been previously considered the subject of usual capabilities research? □","venue":null,"work_id":"97dd2ef3-2a89-4af3-9398-ef82754f1585","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:fadbb12a588df564964515f82fae48e00deaa59bc7539ea8f32043277d515154","observation_id":"8ff5a1ce-4dd3-4445-95da-53d3c5e14dc7","resolution":{"observed_at":"2026-05-11T04:06:33.587354Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"702c1db8-fd07-4dad-9442-f13d10849ad0","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:12b4f461e012550d24194212b1ad690b06da848317ce9ceb4f2211a28a3127ee","observation_id":"eaafa23a-dbfb-4d76-89e4-d2d73e1892c6","resolution":{"observed_at":"2026-05-11T04:06:33.706785Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Is the analyzed capability known to be highly predicted by general cognitive ability or educational attainment? □","venue":null,"work_id":"310d4fec-7265-4dad-9b6d-efb5de20b1bb","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:90d8dfaa89edd765c7d5c43a10c1b53643b7588dc8101d56a349fc5c5c58f492","observation_id":"4cde903e-c964-495a-8ac4-b5105d1b8e76","resolution":{"observed_at":"2026-05-11T04:06:33.725461Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Does this advance safety along with, or as a consequence of, advancing other capabilities or the study of AI? □ E.3","venue":null,"work_id":"1f9de185-911b-4567-bc89-afe2e69d8b7a","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:1519b7f7d8c19fc9a01c310787b27fc5fa2ce7c9601edf636e6bdae0d650ef2a","observation_id":"880181a4-afac-4b3b-9a02-13aae8b46986","resolution":{"observed_at":"2026-05-11T04:06:33.831893Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"What clarifications or uncertainties about this work and x-risk are worth mentioning? Answer: Regarding Q7, our evaluation focuses on a specific set of hand-crafted behaviors","venue":null,"work_id":"ee86125e-4dac-40f2-9913-f630c6fa9bcf","year":null},"citing_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-11T04:06:30.979196Z"},"links":{"citing_paper":"/paper/2402.04249"},"observation_digest":"sha256:b4ad79bfb4a318c80271b585693a05cf5fa95d75b3a55fd09e55656a452fb135","observation_id":"60891220-44e3-49fc-81ab-2019576abe4f","resolution":{"observed_at":"2026-05-11T04:06:33.937525Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal"},"reference_resolution":{"displayed":44,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":3,"unresolved":0,"verified_exact":0,"verified_fuzzy":40},"total_outbound_references":44},"schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}]}