{"as_of":"2026-08-09T09:25:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d5956c6a22f1e047601705f27a00a521461886f156e90b23f33bd8603053ecb3","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":6,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":6,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":6,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":6,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T00:50:00.121236Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-18T21:36:52.400424Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.12329","last_updated":"2024-12-07T23:09:49Z","snapshot_observed_at":"2026-08-09T02:17:48.121135Z","submitted_at":"2024-02-19T18:01:36Z","title":"Query-Based Adversarial Prompt Generation","version":2},"cited_work":{"arxiv_id":"2402.12329","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.12329","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2402.12329 (2024)","venue":null,"work_id":"8f36413f-b5f1-4691-bc32-5a2b817e5b7a","year":2024},"citing_paper":{"arxiv_id":"2404.01318","last_updated":"2024-10-31T22:26:40Z","snapshot_observed_at":"2026-08-02T14:59:12.115203Z","submitted_at":"2024-03-28T02:44:02Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","version":5},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-05-15T06:08:05.386345Z"},"links":{"cited_paper":"/paper/2402.12329","citing_paper":"/paper/2404.01318"},"observation_digest":"sha256:930aad69e3f370f4014af192ae14d90c206b523703cc3c3651fbaf4a0a413eab","observation_id":"3d40c8bc-92e7-45af-9a9b-13b4450f0166","resolution":{"observed_at":"2026-05-15T06:08:05.586412Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12329","last_updated":"2024-12-07T23:09:49Z","snapshot_observed_at":"2026-08-09T02:17:48.121135Z","submitted_at":"2024-02-19T18:01:36Z","title":"Query-Based Adversarial Prompt Generation","version":2},"cited_work":{"arxiv_id":"2402.12329","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.12329","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2402.12329 (2024)","venue":null,"work_id":"8f36413f-b5f1-4691-bc32-5a2b817e5b7a","year":2024},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2402.12329","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:5c7299791bc194a9a4626af30c3524753f1925197619b6e362af9cb51a492cac","observation_id":"80093366-54a8-45b7-b350-685c1f5e0241","resolution":{"observed_at":"2026-05-15T02:20:44.663347Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12329","last_updated":"2024-12-07T23:09:49Z","snapshot_observed_at":"2026-08-09T02:17:48.121135Z","submitted_at":"2024-02-19T18:01:36Z","title":"Query-Based Adversarial Prompt Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12329","snapshot_observed_at":"2026-08-09T00:50:00.121236Z","title":"Available: https://arxiv.org/abs/2402.12329","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05224","last_updated":"2025-02-06T04:43:05Z","snapshot_observed_at":"2026-08-09T05:58:57.244749Z","submitted_at":"2025-02-06T04:43:05Z","title":"A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluations","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-09T00:50:00.121236Z"},"links":{"cited_paper":"/paper/2402.12329","citing_paper":"/paper/2502.05224"},"observation_digest":"sha256:15ba4d641aac8b216d1fc03afe342e1e9281819e6a4781471b8a340ad09d5b1e","observation_id":"dfca1312-4a99-4fa1-9f63-8aa6bb4ddcd6","resolution":{"observed_at":"2026-08-09T00:50:00.121236Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12329","last_updated":"2024-12-07T23:09:49Z","snapshot_observed_at":"2026-08-09T02:17:48.121135Z","submitted_at":"2024-02-19T18:01:36Z","title":"Query-Based Adversarial Prompt Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12329","snapshot_observed_at":"2026-08-07T12:34:34.809699Z","title":"Query- based adversarial prompt generation.arXiv preprint arXiv:2402.12329, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24232","last_updated":"2025-05-30T05:48:50Z","snapshot_observed_at":"2026-08-09T05:32:27.316840Z","submitted_at":"2025-05-30T05:48:50Z","title":"From Hallucinations to Jailbreaks: Rethinking the Vulnerability of Large Foundation Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T12:34:34.809699Z"},"links":{"cited_paper":"/paper/2402.12329","citing_paper":"/paper/2505.24232"},"observation_digest":"sha256:42df4cfd0f9c0a7c17c9ddc1216d8e7624119cf5ede7c93e4dc606f81f602e77","observation_id":"cc291607-87bc-4601-8fff-56431417bdf9","resolution":{"observed_at":"2026-08-07T12:34:34.809699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12329","last_updated":"2024-12-07T23:09:49Z","snapshot_observed_at":"2026-08-09T02:17:48.121135Z","submitted_at":"2024-02-19T18:01:36Z","title":"Query-Based Adversarial Prompt Generation","version":2},"cited_work":{"arxiv_id":"2402.12329","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.12329","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2402.12329 (2024)","venue":null,"work_id":"8f36413f-b5f1-4691-bc32-5a2b817e5b7a","year":2024},"citing_paper":{"arxiv_id":"2508.20325","last_updated":"2026-05-11T14:12:43Z","snapshot_observed_at":"2026-07-06T22:19:48.389341Z","submitted_at":"2025-08-28T00:07:10Z","title":"GUARD: Guideline Upholding Test through Adaptive Role-play and Jailbreak Diagnostics for LLMs","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-18T21:34:51.665401Z"},"links":{"cited_paper":"/paper/2402.12329","citing_paper":"/paper/2508.20325"},"observation_digest":"sha256:04a4d44e5ffa2763054618685c1cb2fa03bdbedd5fbe33c30c4c55b2b6dbfdca","observation_id":"de79b5a9-c7fc-4908-8bde-64d2917fcd92","resolution":{"observed_at":"2026-05-18T21:36:52.402868Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12329","last_updated":"2024-12-07T23:09:49Z","snapshot_observed_at":"2026-08-09T02:17:48.121135Z","submitted_at":"2024-02-19T18:01:36Z","title":"Query-Based Adversarial Prompt Generation","version":2},"cited_work":{"arxiv_id":"2402.12329","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.12329","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2402.12329 (2024)","venue":null,"work_id":"8f36413f-b5f1-4691-bc32-5a2b817e5b7a","year":2024},"citing_paper":{"arxiv_id":"2604.20994","last_updated":"2026-04-22T18:32:38Z","snapshot_observed_at":"2026-08-02T13:22:16.885289Z","submitted_at":"2026-04-22T18:32:38Z","title":"Breaking MCP with Function Hijacking Attacks: Novel Threats for Function Calling and Agentic Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-10T00:02:35.167281Z"},"links":{"cited_paper":"/paper/2402.12329","citing_paper":"/paper/2604.20994"},"observation_digest":"sha256:67c51dbb38b7900019cf66a5680235cf1a9cc5d22abf81ea15ca6a4cb0aa9300","observation_id":"156d8fa3-11f2-42e5-a6fe-24e5a888c145","resolution":{"observed_at":"2026-05-10T00:29:47.789994Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2402.12329/citation-record","integrity":"/paper/2402.12329/integrity","json":"/paper/2402.12329/citation-record.json","paper":"/paper/2402.12329"},"outbound":[],"paper":{"arxiv_id":"2402.12329","last_updated":"2024-12-07T23:09:49Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-09T02:17:48.121135Z","submitted_at":"2024-02-19T18:01:36Z","title":"Query-Based Adversarial Prompt Generation"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 6 inbound Pith citation observations for arXiv:2402.12329."}