{"as_of":"2026-08-19T14:00:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d8f74eb45413f3858110ea50cabf0b456a6f6e16abb0f37c3d72e05cd6cff38a","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":28,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":28,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":28,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":28,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T05:57:58.326747Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T11:57:03.488334Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.09674","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-07-10T11:57:03.488334Z","title":"Pal: Proxy-guided black-box attack on large language models.arXiv preprint arXiv:2402.09674","venue":"cs.CL","work_id":"62c0dec6-b176-45bd-ba3b-30f2b0507e35","year":2024},"citing_paper":{"arxiv_id":"2404.01318","last_updated":"2024-10-31T22:26:40Z","snapshot_observed_at":"2026-08-11T16:28:21.917686Z","submitted_at":"2024-03-28T02:44:02Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","version":5},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-05-15T06:08:05.386345Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2404.01318"},"observation_digest":"sha256:b66ecc5a0f0dd84d9a21efabb7153d2734df580b8a2cc13e1756ebd0ae600603","observation_id":"efeb32c0-20bc-4c05-ad0c-89ff25a44a81","resolution":{"observed_at":"2026-05-15T06:08:05.491124Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.09674","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-07-10T11:57:03.488334Z","title":"Pal: Proxy-guided black-box attack on large language models.arXiv preprint arXiv:2402.09674","venue":"cs.CL","work_id":"62c0dec6-b176-45bd-ba3b-30f2b0507e35","year":2024},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-12T17:45:10.384900Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:151f81556e96f7dcb289ac535a9ad0dc332d68b14427daee2ff4d44dcc0ce483","observation_id":"4ca240ad-03f0-4bdb-be64-fdbb4e2df369","resolution":{"observed_at":"2026-05-15T02:20:44.829075Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-12T11:03:01.222327Z","title":"Pal: Proxy-guided black-box attack on large language models.arXiv preprint arXiv:2402.09674, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18688","last_updated":"2025-06-14T04:20:06Z","snapshot_observed_at":"2026-08-19T02:50:38.121616Z","submitted_at":"2024-11-27T19:00:10Z","title":"Immune: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment","version":5},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-12T11:03:01.222327Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2411.18688"},"observation_digest":"sha256:80b85a5f25d92e347d99a7983244f18e0a3e5020c4495e13f41fbda5ab99da5e","observation_id":"04b34d31-aae2-4e1c-8588-f591b0453695","resolution":{"observed_at":"2026-08-12T11:03:01.222327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-11T22:41:27.765662Z","title":"Pal: Proxy-guided black-box attack on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.03235","last_updated":"2025-03-25T12:49:43Z","snapshot_observed_at":"2026-08-15T14:32:23.725669Z","submitted_at":"2024-12-04T11:36:37Z","title":"Does Safety Training of LLMs Generalize to Semantically Related Natural Prompts?","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-11T22:41:27.765662Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2412.03235"},"observation_digest":"sha256:3fbcacc9646c021ba25ec756e3c771433b2ab7f9b7f33abaa2eb2bb02ffd3c46","observation_id":"5f759c0e-d78e-4acf-ae46-a22f5a8c85c4","resolution":{"observed_at":"2026-08-11T22:41:27.765662Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-11T20:53:37.881247Z","title":"Pal: Proxy-guided black-box attack on large language models.arXiv preprint arXiv:2402.09674, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.05232","last_updated":"2025-07-03T18:06:35Z","snapshot_observed_at":"2026-08-14T13:58:04.180134Z","submitted_at":"2024-12-06T18:02:59Z","title":"LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds","version":3},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-11T20:53:37.881247Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2412.05232"},"observation_digest":"sha256:a7e4d5e879284f3a517d8fc1bd5bbde9781f42b01eb62b82c377264be8570c48","observation_id":"ac98da78-1312-49dd-b009-17cba532858a","resolution":{"observed_at":"2026-08-11T20:53:37.881247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-11T04:38:36.695356Z","title":"Pal: Proxy-guided black-box attack on large language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.18693","last_updated":"2024-12-24T22:38:46Z","snapshot_observed_at":"2026-08-16T09:30:04.806701Z","submitted_at":"2024-12-24T22:38:46Z","title":"Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T04:38:36.695356Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2412.18693"},"observation_digest":"sha256:9070f2c09bd59dfdf2fc51449c75514729de47b47507a61d98a04f7ca99d12de","observation_id":"1a297fb3-6279-4d64-883d-86c94f074646","resolution":{"observed_at":"2026-08-11T04:38:36.695356Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-10T23:40:19.074950Z","title":", author Mu, N","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.20087","last_updated":"2024-12-28T09:08:37Z","snapshot_observed_at":"2026-08-15T12:46:32.785416Z","submitted_at":"2024-12-28T09:08:37Z","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","version":1},"reference_index":126,"source":"arxiv_source","source_observed_at":"2026-08-10T23:40:19.074950Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2412.20087"},"observation_digest":"sha256:c0499d976965813624bc9f91c4a8baf37ddd78a33c25122a418868c5f7b7a39d","observation_id":"48c1c031-ad95-4aaf-819a-6ec6b509640b","resolution":{"observed_at":"2026-08-10T23:40:19.074950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-10T19:44:46.764390Z","title":"Pal: Proxy- guided black-box attack on large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.09798","last_updated":"2025-05-10T02:36:13Z","snapshot_observed_at":"2026-08-17T19:46:00.323728Z","submitted_at":"2025-01-16T19:01:25Z","title":"Fun-tuning: Characterizing the Vulnerability of Proprietary LLMs to Optimization-based Prompt Injection Attacks via the Fine-Tuning Interface","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T19:44:46.764390Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2501.09798"},"observation_digest":"sha256:74c801ed1cae081839d670ee9dde51b6da5caaa2de3ab47e2915bf88eb01d181","observation_id":"70f2dad5-0b57-4929-a353-aebc6abe5965","resolution":{"observed_at":"2026-08-10T19:44:46.764390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-09T04:22:00.571836Z","title":"PAL : Proxy - Guided Black - Box Attack on Large Language Models , February 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05223","last_updated":"2025-02-05T21:50:34Z","snapshot_observed_at":"2026-08-18T18:29:30.078158Z","submitted_at":"2025-02-05T21:50:34Z","title":"KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-09T04:22:00.571836Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2502.05223"},"observation_digest":"sha256:d0aa0b8c987707c16d149082a8466d8af558c58e178158ba871ed146ee36c846","observation_id":"7f5b80dd-b813-4747-acfb-b42906214420","resolution":{"observed_at":"2026-08-09T04:22:00.571836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-16T05:57:58.326747Z","title":"arXiv:2402.09674 [cs] http://arxiv.org/abs/2402.09674","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.19440","last_updated":"2025-04-28T03:01:51Z","snapshot_observed_at":"2026-08-19T09:22:52.214724Z","submitted_at":"2025-04-28T03:01:51Z","title":"JailbreaksOverTime: Detecting Jailbreak Attacks Under Distribution Shift","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-16T05:57:58.326747Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2504.19440"},"observation_digest":"sha256:4921b09d1ca475913e9f79b81dbc0826eb3f8e107134b609ec566a5cf450f4aa","observation_id":"6134f8b8-b635-44dc-a7aa-71a70786eb96","resolution":{"observed_at":"2026-08-16T05:57:58.326747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-16T00:03:02.592573Z","title":"Pal: Proxy-guided black-box attack on large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.03084","last_updated":"2025-05-06T00:41:16Z","snapshot_observed_at":"2026-08-16T13:40:54.744538Z","submitted_at":"2025-05-06T00:41:16Z","title":"Adversarial Attacks in Multimodal Systems: A Practitioner's Survey","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-16T00:03:02.592573Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2505.03084"},"observation_digest":"sha256:e13ee52d70e1cc5a7a076cdc8ec8d6a2f25a5b68af869f92736d5cd8ba9a36fa","observation_id":"e2e9b6ee-54bb-4ade-ad0d-4e74f7f4ed59","resolution":{"observed_at":"2026-08-16T00:03:02.592573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-07T00:15:03.747220Z","title":"Sitawarin, N","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-13T20:33:14.014427Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:03.747220Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:c094abd910b3b0ad74b240a9a1ff08004eab1814ca81a6e755f861b2ca8f26f1","observation_id":"5ac81ce7-660f-4fef-bd24-e4a98aaac07d","resolution":{"observed_at":"2026-08-07T00:15:03.747220Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-06T23:20:52.222527Z","title":"Pal: Proxy-guided black-box attack on large language models.arXiv preprint arXiv:2402.096742024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.18543","last_updated":"2026-05-25T10:15:56Z","snapshot_observed_at":"2026-08-13T02:33:46.917734Z","submitted_at":"2025-06-23T11:53:31Z","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T23:20:52.222527Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2506.18543"},"observation_digest":"sha256:a899407f48e05c0f8cf56658f16c894aebc33487e052fb58468af377e5713495","observation_id":"2f51017b-8333-451b-9117-773d2e2a4d40","resolution":{"observed_at":"2026-08-06T23:20:52.222527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-06T15:52:56.821563Z","title":"Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Goodfellow, and Rob Fergus","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.14799","last_updated":"2025-07-20T03:10:13Z","snapshot_observed_at":"2026-08-18T03:07:34.267972Z","submitted_at":"2025-07-20T03:10:13Z","title":"Manipulating LLM Web Agents with Indirect Prompt Injection Attack via HTML Accessibility Tree","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T15:52:56.821563Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2507.14799"},"observation_digest":"sha256:ef13356d53fcc477852990431d23ea5ad484b6bbbcc2b848333d60579c4cb6ea","observation_id":"b30ae07a-a659-44d6-bf7e-f39186ebaa49","resolution":{"observed_at":"2026-08-06T15:52:56.821563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-06T01:03:52.185970Z","title":"Pal: Proxy-guided black-box attack on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03933","last_updated":"2025-08-05T21:55:14Z","snapshot_observed_at":"2026-08-13T15:10:41.354749Z","submitted_at":"2025-08-05T21:55:14Z","title":"Towards terahertz nanomechanics","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T01:03:52.185970Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2508.03933"},"observation_digest":"sha256:e5e536a502240f190bee8004078d113c9545e2c805adf5ceb290876c5dc8d7b0","observation_id":"a0c8bda2-c381-4fee-ac02-719defb3dbb7","resolution":{"observed_at":"2026-08-06T01:03:52.185970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-06T01:04:36.335715Z","title":"Pal: Proxy-guided black-box attack on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03936","last_updated":"2025-08-05T21:57:52Z","snapshot_observed_at":"2026-08-08T12:25:04.397522Z","submitted_at":"2025-08-05T21:57:52Z","title":"ASTRA: Autonomous Spatial-Temporal Red-teaming for AI Software Assistants","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-06T01:04:36.335715Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2508.03936"},"observation_digest":"sha256:88609ac1380b55ec394ec4f2a27644f6d73444f36febd360c46e8f2ddeb5588a","observation_id":"6dbccbd1-c913-4925-85b4-3920db2a1035","resolution":{"observed_at":"2026-08-06T01:04:36.335715Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-05T20:31:37.579293Z","title":"Pal: Proxy-guided black-box attack on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-18T11:11:26.991132Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:37.579293Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:f9c531dbd589089261715499458f11ebb43ecc08cb654512d204af00b9ad0ca8","observation_id":"8cd7a346-7dde-45fc-bf34-b6b32029aa32","resolution":{"observed_at":"2026-08-05T20:31:37.579293Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-05T16:00:48.956894Z","title":"Pal: Proxy-guided black-box attack on large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19445","last_updated":"2026-06-16T17:34:06Z","snapshot_observed_at":"2026-08-08T05:25:02.825611Z","submitted_at":"2025-08-26T21:36:45Z","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","version":3},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-08-05T16:00:48.956894Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2508.19445"},"observation_digest":"sha256:d18c3898cd44a8ca63672dd4f8693bacc1c9a3b7a62b1f72975044d751f3f35c","observation_id":"dc7b0358-52d1-4c7d-913a-33040afd5a44","resolution":{"observed_at":"2026-08-05T16:00:48.956894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-05T13:42:43.183386Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.00391","last_updated":"2025-08-30T07:04:29Z","snapshot_observed_at":"2026-08-16T10:01:10.092766Z","submitted_at":"2025-08-30T07:04:29Z","title":"The Resurgence of GCG Adversarial Attacks on Large Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T13:42:43.183386Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2509.00391"},"observation_digest":"sha256:3f219914ee8e3ad59b8650d14929728067acabb67167a500c54a97f3cd7bb068","observation_id":"c527a82b-0926-4edf-b467-e9169c2ecfd7","resolution":{"observed_at":"2026-08-05T13:42:43.183386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-04T09:25:54.008721Z","title":"Wagner, and Alexandre Araujo","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-14T22:20:04.981358Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":170,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:54.008721Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:ef83a4b907013f6362a39bb62428a96b4237d8e92c15c576128aa71c4afc8bde","observation_id":"2afdec0c-ec7b-47c6-88d9-e02135cddd6e","resolution":{"observed_at":"2026-08-04T09:25:54.008721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.09674","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-07-10T11:57:03.488334Z","title":"Pal: Proxy-guided black-box attack on large language models.arXiv preprint arXiv:2402.09674","venue":"cs.CL","work_id":"62c0dec6-b176-45bd-ba3b-30f2b0507e35","year":2024},"citing_paper":{"arxiv_id":"2602.11528","last_updated":"2026-04-18T03:07:48Z","snapshot_observed_at":"2026-08-13T01:24:19.741090Z","submitted_at":"2026-02-12T03:37:50Z","title":"Stop Tracking Me! Proactive Defense Against Attribute Inference Attack in LLMs","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-16T05:22:59.050348Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2602.11528"},"observation_digest":"sha256:0fd323f6b484e5c01f4ad602c21db155feaaea43a006c13facf3b176e03ad31d","observation_id":"57ec1a3d-fe0a-4f4b-b9d1-6d5e664becad","resolution":{"observed_at":"2026-05-16T05:27:23.216512Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.09674","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-07-10T11:57:03.488334Z","title":"Pal: Proxy-guided black-box attack on large language models.arXiv preprint arXiv:2402.09674","venue":"cs.CL","work_id":"62c0dec6-b176-45bd-ba3b-30f2b0507e35","year":2024},"citing_paper":{"arxiv_id":"2604.28157","last_updated":"2026-04-30T17:43:24Z","snapshot_observed_at":"2026-08-13T05:57:14.675241Z","submitted_at":"2026-04-30T17:43:24Z","title":"FlashRT: Towards Computationally and Memory Efficient Red-Teaming for Prompt Injection and Knowledge Corruption","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-07T06:49:56.316472Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2604.28157"},"observation_digest":"sha256:2180b1be19cb76c39e7aa17b33b47ce967e915a8a819d807b37e32effd4551de","observation_id":"53bc9f05-c3d8-4098-826b-763d6ad5da06","resolution":{"observed_at":"2026-05-12T10:16:28.277270Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.09674","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-07-10T11:57:03.488334Z","title":"Pal: Proxy-guided black-box attack on large language models.arXiv preprint arXiv:2402.09674","venue":"cs.CL","work_id":"62c0dec6-b176-45bd-ba3b-30f2b0507e35","year":2024},"citing_paper":{"arxiv_id":"2605.05058","last_updated":"2026-05-06T15:53:17Z","snapshot_observed_at":"2026-07-06T23:17:43.402046Z","submitted_at":"2026-05-06T15:53:17Z","title":"SoK: Robustness in Large Language Models against Jailbreak Attacks","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-05-08T16:42:41.137808Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2605.05058"},"observation_digest":"sha256:8a3a3f6d34237f1b8bcc329c41043e1d2d9baf5d84214189a8a2a1f0f5507a64","observation_id":"63eeb90d-cca1-4bae-a37f-adf7e093f5a5","resolution":{"observed_at":"2026-05-11T18:01:08.816756Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.09674","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-07-10T11:57:03.488334Z","title":"Pal: Proxy-guided black-box attack on large language models.arXiv preprint arXiv:2402.09674","venue":"cs.CL","work_id":"62c0dec6-b176-45bd-ba3b-30f2b0507e35","year":2024},"citing_paper":{"arxiv_id":"2605.08876","last_updated":"2026-08-02T00:52:12Z","snapshot_observed_at":"2026-08-16T06:40:16.705150Z","submitted_at":"2026-05-09T10:55:11Z","title":"OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-12T01:57:22.554881Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2605.08876"},"observation_digest":"sha256:800bc89886744440674d5c8aee74f7939e34ce7226ff38d6884683036ab093e2","observation_id":"7dae81a8-19d0-44f4-8798-af83a6e90b47","resolution":{"observed_at":"2026-05-12T07:46:27.732352Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.09674","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-07-10T11:57:03.488334Z","title":"Pal: Proxy-guided black-box attack on large language models.arXiv preprint arXiv:2402.09674","venue":"cs.CL","work_id":"62c0dec6-b176-45bd-ba3b-30f2b0507e35","year":2024},"citing_paper":{"arxiv_id":"2605.08876","last_updated":"2026-08-02T00:52:12Z","snapshot_observed_at":"2026-08-16T06:40:16.705150Z","submitted_at":"2026-05-09T10:55:11Z","title":"OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-30T22:52:54.684185Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2605.08876"},"observation_digest":"sha256:3752f888590f323616bb4bac94e1aedf3f2ae6bf77a68afe178598d1e7861ebc","observation_id":"8fe79c09-c8f7-4556-ad51-6d22acb2b52b","resolution":{"observed_at":"2026-07-01T13:45:45.470549Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-08-04T05:17:31.236691Z","title":"Pal: Proxy-guided black-box attack on large language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.08876","last_updated":"2026-08-02T00:52:12Z","snapshot_observed_at":"2026-08-16T06:40:16.705150Z","submitted_at":"2026-05-09T10:55:11Z","title":"OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T05:17:31.236691Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2605.08876"},"observation_digest":"sha256:e9e94e0713de70c17a70039f5b63e20d3901d4f024dea23e4e45c55b7fe72819","observation_id":"4ba2924f-1331-42aa-b9cc-af01ca9bbc55","resolution":{"observed_at":"2026-08-04T05:17:31.236691Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.09674","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-07-10T11:57:03.488334Z","title":"Pal: Proxy-guided black-box attack on large language models.arXiv preprint arXiv:2402.09674","venue":"cs.CL","work_id":"62c0dec6-b176-45bd-ba3b-30f2b0507e35","year":2024},"citing_paper":{"arxiv_id":"2605.25073","last_updated":"2026-05-24T13:34:47Z","snapshot_observed_at":"2026-08-12T10:46:42.197962Z","submitted_at":"2026-05-24T13:34:47Z","title":"Security in the Fine-Tuning Lifecycle of Large Language Models: Threats, Defenses,Evaluation, and Future Directions","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-06-29T23:51:05.413122Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2605.25073"},"observation_digest":"sha256:09bda5fe8348371fe1fd326ce258f964bc94a15de42cfbef9a4966f4ea60f48a","observation_id":"a112aa0d-4624-4733-b074-f1a39d29c1c0","resolution":{"observed_at":"2026-06-29T23:54:03.335464Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.09674","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.09674","snapshot_observed_at":"2026-07-10T11:57:03.488334Z","title":"Pal: Proxy-guided black-box attack on large language models.arXiv preprint arXiv:2402.09674","venue":"cs.CL","work_id":"62c0dec6-b176-45bd-ba3b-30f2b0507e35","year":2024},"citing_paper":{"arxiv_id":"2607.08180","last_updated":"2026-07-09T07:27:48Z","snapshot_observed_at":"2026-08-16T06:23:00.417639Z","submitted_at":"2026-07-09T07:27:48Z","title":"Out of Sight: Compression-Aware Content Protection against Agentic Crawlers","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-07-10T11:48:08.491407Z"},"links":{"cited_paper":"/paper/2402.09674","citing_paper":"/paper/2607.08180"},"observation_digest":"sha256:de0292f71827e99bebc5203ea59cebcd4d22895a682322dd917fdf498bc394d4","observation_id":"14368a5e-ca89-425e-9f09-f61fa9440c9d","resolution":{"observed_at":"2026-07-10T11:57:03.491182Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2402.09674/citation-record","integrity":"/paper/2402.09674/integrity","json":"/paper/2402.09674/citation-record.json","paper":"/paper/2402.09674"},"outbound":[],"paper":{"arxiv_id":"2402.09674","last_updated":"2024-02-15T02:54:49Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-16T14:18:26.882413Z","submitted_at":"2024-02-15T02:54:49Z","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 28 inbound Pith citation observations for arXiv:2402.09674."}