{"as_of":"2026-08-08T00:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:03a2d1971f19ddeae27d1e0546ea0550c396753c935d423290c11f77f625654f","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":9,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":9,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:14:39.266507Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-11T09:16:04.179995Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.09177","last_updated":"2024-10-02T10:43:07Z","snapshot_observed_at":"2026-08-01T16:03:38.510223Z","submitted_at":"2024-02-14T13:45:19Z","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09177","snapshot_observed_at":"2026-08-06T23:25:46.504076Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.18213","last_updated":"2025-06-23T00:19:27Z","snapshot_observed_at":"2026-08-07T10:41:05.932475Z","submitted_at":"2025-06-23T00:19:27Z","title":"A Conceptual Framework for AI Capability Evaluations","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-06T23:25:46.504076Z"},"links":{"cited_paper":"/paper/2402.09177","citing_paper":"/paper/2506.18213"},"observation_digest":"sha256:f3967abfc8e6d44a3083d3481f125cf7cd7c65d68b4b02b8bc5eeae2c08781d0","observation_id":"072e7f91-91c7-413b-861d-bd6feb78d302","resolution":{"observed_at":"2026-08-06T23:25:46.504076Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09177","last_updated":"2024-10-02T10:43:07Z","snapshot_observed_at":"2026-08-01T16:03:38.510223Z","submitted_at":"2024-02-14T13:45:19Z","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09177","snapshot_observed_at":"2026-08-06T21:27:34.886612Z","title":"Leverag- ing the context through multi-round interactions for jailbreaking attacks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.00239","last_updated":"2025-06-30T20:13:49Z","snapshot_observed_at":"2026-08-06T21:18:19.412178Z","submitted_at":"2025-06-30T20:13:49Z","title":"Linearly Decoding Refused Knowledge in Aligned Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T21:27:34.886612Z"},"links":{"cited_paper":"/paper/2402.09177","citing_paper":"/paper/2507.00239"},"observation_digest":"sha256:65c0a1ab7df4b40516c8a89ed0630320adf63c3fbe1ef6ead593e241c634cb45","observation_id":"eefa3a7d-cae6-4863-a024-f84dc69db856","resolution":{"observed_at":"2026-08-06T21:27:34.886612Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09177","last_updated":"2024-10-02T10:43:07Z","snapshot_observed_at":"2026-08-01T16:03:38.510223Z","submitted_at":"2024-02-14T13:45:19Z","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09177","snapshot_observed_at":"2026-08-05T20:31:39.012270Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-07T14:42:27.926127Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:39.012270Z"},"links":{"cited_paper":"/paper/2402.09177","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:c0a34996e0301db78d0dd551f8a6cb9efb31581c2f0f11b4b24196c6181bb27f","observation_id":"d301f50f-4848-491b-b0b0-448c66818f48","resolution":{"observed_at":"2026-08-05T20:31:39.012270Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09177","last_updated":"2024-10-02T10:43:07Z","snapshot_observed_at":"2026-08-01T16:03:38.510223Z","submitted_at":"2024-02-14T13:45:19Z","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09177","snapshot_observed_at":"2026-08-04T09:25:38.087372Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-06T02:45:04.316908Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:38.087372Z"},"links":{"cited_paper":"/paper/2402.09177","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:cb5ced4d71b82e93c06ce57a9a548ab0b125bfb9ec93430f6658b3e692b2375f","observation_id":"50577956-3357-40d7-a052-48ca48250d2a","resolution":{"observed_at":"2026-08-04T09:25:38.087372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09177","last_updated":"2024-10-02T10:43:07Z","snapshot_observed_at":"2026-08-01T16:03:38.510223Z","submitted_at":"2024-02-14T13:45:19Z","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks","version":2},"cited_work":{"arxiv_id":"2402.09177","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.09177","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Leveraging the context through multi-round interactions for jailbreaking attacks","venue":null,"work_id":"48acfa7a-b673-469e-9cad-2f743b9297b4","year":2024},"citing_paper":{"arxiv_id":"2604.11309","last_updated":"2026-04-13T11:12:30Z","snapshot_observed_at":"2026-07-30T17:13:57.164751Z","submitted_at":"2026-04-13T11:12:30Z","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-10T16:07:31.602378Z"},"links":{"cited_paper":"/paper/2402.09177","citing_paper":"/paper/2604.11309"},"observation_digest":"sha256:ecc0c499d35082c54ffa4e6a766c6605e6f75157479706e4c2e1bfbb587650a1","observation_id":"1448b788-4463-4277-b1a8-444a6b949704","resolution":{"observed_at":"2026-05-11T09:16:04.192808Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09177","last_updated":"2024-10-02T10:43:07Z","snapshot_observed_at":"2026-08-01T16:03:38.510223Z","submitted_at":"2024-02-14T13:45:19Z","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09177","snapshot_observed_at":"2026-08-02T13:17:49.447850Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20472","last_updated":"2026-05-24T05:49:14Z","snapshot_observed_at":"2026-08-03T18:29:39.542542Z","submitted_at":"2026-05-24T05:49:14Z","title":"Robust Critics: Defending LLMs Against Multi-Turn Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T13:17:49.447850Z"},"links":{"cited_paper":"/paper/2402.09177","citing_paper":"/paper/2607.20472"},"observation_digest":"sha256:20c4de131b534749f48a7792dabb4e608f4f5d1f4d7fcfb8aa338d91c1c24d9d","observation_id":"24f7ead4-dcce-435e-bd82-b4ad6efc0f2a","resolution":{"observed_at":"2026-08-02T13:17:49.447850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09177","last_updated":"2024-10-02T10:43:07Z","snapshot_observed_at":"2026-08-01T16:03:38.510223Z","submitted_at":"2024-02-14T13:45:19Z","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09177","snapshot_observed_at":"2026-08-02T12:39:54.997919Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22569","last_updated":"2026-06-01T04:20:25Z","snapshot_observed_at":"2026-08-05T23:45:32.394636Z","submitted_at":"2026-06-01T04:20:25Z","title":"Execution-Grounded Security Testing for Coding Agents in Software Engineering Pipelines","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T12:39:54.997919Z"},"links":{"cited_paper":"/paper/2402.09177","citing_paper":"/paper/2607.22569"},"observation_digest":"sha256:55219c110f90d5d3b4206cc91fa1ddd5b4caf32ed1f32e861bb6f3184bdb214d","observation_id":"97b61001-2874-4c86-95c6-9253f8f622c9","resolution":{"observed_at":"2026-08-02T12:39:54.997919Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09177","last_updated":"2024-10-02T10:43:07Z","snapshot_observed_at":"2026-08-01T16:03:38.510223Z","submitted_at":"2024-02-14T13:45:19Z","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09177","snapshot_observed_at":"2026-08-06T00:32:01.366073Z","title":"Lever- aging the Context through Multi-Round Interactions for Jailbreaking Attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01117","last_updated":"2026-08-02T09:24:08Z","snapshot_observed_at":"2026-08-06T23:25:36.295333Z","submitted_at":"2026-08-02T09:24:08Z","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T00:32:01.366073Z"},"links":{"cited_paper":"/paper/2402.09177","citing_paper":"/paper/2608.01117"},"observation_digest":"sha256:25a08c51b54ff18f753c16fa98f66c4fadde8d89333606f6c2f2d487d549233e","observation_id":"2f6ab5d0-e13c-4c95-9801-f73d70b71723","resolution":{"observed_at":"2026-08-06T00:32:01.366073Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09177","last_updated":"2024-10-02T10:43:07Z","snapshot_observed_at":"2026-08-01T16:03:38.510223Z","submitted_at":"2024-02-14T13:45:19Z","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09177","snapshot_observed_at":"2026-08-07T00:14:39.266507Z","title":"arXiv preprint arXiv:2402.09177 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-08T00:10:32.296696Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:39.266507Z"},"links":{"cited_paper":"/paper/2402.09177","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:b38bf1209f252e57b7d8439359587d52eadab00026b920c3671205f1df3eec1a","observation_id":"753d0edd-9abe-494a-9623-a18db498bb5f","resolution":{"observed_at":"2026-08-07T00:14:39.266507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2402.09177/citation-record","integrity":"/paper/2402.09177/integrity","json":"/paper/2402.09177/citation-record.json","paper":"/paper/2402.09177"},"outbound":[],"paper":{"arxiv_id":"2402.09177","last_updated":"2024-10-02T10:43:07Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-01T16:03:38.510223Z","submitted_at":"2024-02-14T13:45:19Z","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 9 inbound Pith citation observations for arXiv:2402.09177."}