{"as_of":"2026-08-13T20:36:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:88e874e47bf1580d7015724601a134eae74b3412c8134cb353064aa63466b577","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":9,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":9,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T21:05:18.293243Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":1,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.16006","last_updated":"2024-06-04T02:59:58Z","snapshot_observed_at":"2026-08-13T18:29:52.111506Z","submitted_at":"2024-02-25T06:46:27Z","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","version":2},"cited_work":{"arxiv_id":"2402.16006","doi":"10.48550/arxiv.2402.16006","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16006","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"From Noise to Clarity: Unraveling the Adversarial Suffix of Large Language Model Attacks via Translation of Text Embeddings","venue":"arXiv (Cornell University)","work_id":"0f8933ea-e319-4ea5-89d4-eef53f3176af","year":2024},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-12T17:45:10.384900Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2402.16006","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:8d4905545033f454adb6f27a747e7c44c398db5be661f2a9835137ee790eca59","observation_id":"b7206e1a-4f1a-41f8-9bec-215d4340cc48","resolution":{"observed_at":"2026-05-15T02:20:44.851517Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16006","last_updated":"2024-06-04T02:59:58Z","snapshot_observed_at":"2026-08-13T18:29:52.111506Z","submitted_at":"2024-02-25T06:46:27Z","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16006","snapshot_observed_at":"2026-08-12T21:05:18.293243Z","title":"From noise to clarity: Unraveling the adver- sarial suffix of large language model attacks via translation of text embeddings","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.09125","last_updated":"2024-11-14T01:48:08Z","snapshot_observed_at":"2026-08-12T20:57:45.470599Z","submitted_at":"2024-11-14T01:48:08Z","title":"DROJ: A Prompt-Driven Attack against Large Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T21:05:18.293243Z"},"links":{"cited_paper":"/paper/2402.16006","citing_paper":"/paper/2411.09125"},"observation_digest":"sha256:59bcb05f2e42b0936df7be31e6c8e87a58630040f447c6c4eb1da58802b92480","observation_id":"76410ec2-e056-4511-b470-3b16c89a2efb","resolution":{"observed_at":"2026-08-12T21:05:18.293243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16006","last_updated":"2024-06-04T02:59:58Z","snapshot_observed_at":"2026-08-13T18:29:52.111506Z","submitted_at":"2024-02-25T06:46:27Z","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16006","snapshot_observed_at":"2026-08-12T11:03:01.238549Z","title":"From noise to clarity: Unraveling the adversarial suffix of large language model attacks via translation of text embeddings.arXiv preprint arXiv:2402.16006, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18688","last_updated":"2025-06-14T04:20:06Z","snapshot_observed_at":"2026-08-12T10:56:39.039288Z","submitted_at":"2024-11-27T19:00:10Z","title":"Immune: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment","version":5},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-12T11:03:01.238549Z"},"links":{"cited_paper":"/paper/2402.16006","citing_paper":"/paper/2411.18688"},"observation_digest":"sha256:a0f69c61d1cfd3048df987a9ccce2f537e8701fee08b977798b9f66cf56339fa","observation_id":"24da3c39-7c32-4762-bf5e-7cd12744f9bc","resolution":{"observed_at":"2026-08-12T11:03:01.238549Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16006","last_updated":"2024-06-04T02:59:58Z","snapshot_observed_at":"2026-08-13T18:29:52.111506Z","submitted_at":"2024-02-25T06:46:27Z","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16006","snapshot_observed_at":"2026-08-11T20:53:38.105128Z","title":"From noise to clarity: Unraveling the adversarial suffix of large language model attacks via translation of text embeddings.arXiv preprint arXiv:2402.16006, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.05232","last_updated":"2025-07-03T18:06:35Z","snapshot_observed_at":"2026-08-11T20:47:12.032904Z","submitted_at":"2024-12-06T18:02:59Z","title":"LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds","version":3},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-11T20:53:38.105128Z"},"links":{"cited_paper":"/paper/2402.16006","citing_paper":"/paper/2412.05232"},"observation_digest":"sha256:24521397a1fee52680fb2a31356b7a96f5e7eda5e4875317ed54aa0e25bf462a","observation_id":"9bce6b90-3008-4ea8-a887-857004b5dd11","resolution":{"observed_at":"2026-08-11T20:53:38.105128Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16006","last_updated":"2024-06-04T02:59:58Z","snapshot_observed_at":"2026-08-13T18:29:52.111506Z","submitted_at":"2024-02-25T06:46:27Z","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16006","snapshot_observed_at":"2026-08-11T13:59:18.932567Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12621","last_updated":"2024-12-17T07:33:41Z","snapshot_observed_at":"2026-08-11T19:01:25.713453Z","submitted_at":"2024-12-17T07:33:41Z","title":"Jailbreaking? One Step Is Enough!","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-11T13:59:18.932567Z"},"links":{"cited_paper":"/paper/2402.16006","citing_paper":"/paper/2412.12621"},"observation_digest":"sha256:ef7fd70ed941e068c6fb7fb26306749b590bacf8c753fc74f129661649212fd5","observation_id":"6f3c9b6d-95ff-4ffb-806a-17092a2d9f4c","resolution":{"observed_at":"2026-08-11T13:59:18.932567Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16006","last_updated":"2024-06-04T02:59:58Z","snapshot_observed_at":"2026-08-13T18:29:52.111506Z","submitted_at":"2024-02-25T06:46:27Z","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16006","snapshot_observed_at":"2026-08-09T04:22:00.586129Z","title":"ASETF : A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings , June 2024 a","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05223","last_updated":"2025-02-05T21:50:34Z","snapshot_observed_at":"2026-08-13T12:13:34.710842Z","submitted_at":"2025-02-05T21:50:34Z","title":"KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-09T04:22:00.586129Z"},"links":{"cited_paper":"/paper/2402.16006","citing_paper":"/paper/2502.05223"},"observation_digest":"sha256:2a2da4b936d3c8dfba3897af5b959ec17285952cc6df0aa9c848b962e9254739","observation_id":"ca68ceff-f619-4d82-9cd6-59b7506b6773","resolution":{"observed_at":"2026-08-09T04:22:00.586129Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16006","last_updated":"2024-06-04T02:59:58Z","snapshot_observed_at":"2026-08-13T18:29:52.111506Z","submitted_at":"2024-02-25T06:46:27Z","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16006","snapshot_observed_at":"2026-08-05T20:31:33.378159Z","title":"Asetf: A novel method for jailbreak attack on llms through translate suffix embeddings","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:33.378159Z"},"links":{"cited_paper":"/paper/2402.16006","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:b35890fb23656b5ee09eaaa7ae99ef6b2aa1b3b76d308f5f9c568388c73396a8","observation_id":"bc76b078-c515-4956-b91d-b93bed59d299","resolution":{"observed_at":"2026-08-05T20:31:33.378159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16006","last_updated":"2024-06-04T02:59:58Z","snapshot_observed_at":"2026-08-13T18:29:52.111506Z","submitted_at":"2024-02-25T06:46:27Z","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16006","snapshot_observed_at":"2026-08-04T09:25:55.955433Z","title":"From noise to clarity: Unraveling the adversarial suffix of large language model attacks via translation of text embeddings.CoRR, abs/2402.16006, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-06T02:45:04.316908Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":185,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:55.955433Z"},"links":{"cited_paper":"/paper/2402.16006","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:089c9415b6f2713306ac404b07f65ea566ffaa483cb4b33645a4e8974182fdb5","observation_id":"f600eca3-38db-47f0-a536-069ff13138bb","resolution":{"observed_at":"2026-08-04T09:25:55.955433Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16006","last_updated":"2024-06-04T02:59:58Z","snapshot_observed_at":"2026-08-13T18:29:52.111506Z","submitted_at":"2024-02-25T06:46:27Z","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","version":2},"cited_work":{"arxiv_id":"2402.16006","doi":"10.48550/arxiv.2402.16006","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16006","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"From Noise to Clarity: Unraveling the Adversarial Suffix of Large Language Model Attacks via Translation of Text Embeddings","venue":"arXiv (Cornell University)","work_id":"0f8933ea-e319-4ea5-89d4-eef53f3176af","year":2024},"citing_paper":{"arxiv_id":"2605.12813","last_updated":"2026-05-31T17:51:51Z","snapshot_observed_at":"2026-07-06T23:24:27.821980Z","submitted_at":"2026-05-12T23:13:50Z","title":"REALISTA: Realistic Latent Adversarial Attacks that Elicit LLM Hallucinations","version":1},"reference_index":184,"source":"arxiv_source","source_observed_at":"2026-05-14T20:13:10.814899Z"},"links":{"cited_paper":"/paper/2402.16006","citing_paper":"/paper/2605.12813"},"observation_digest":"sha256:7d4132ceb6ce83af1b78362def63db9fa2aa81626ff2867d261d68bb1c31138b","observation_id":"8c205295-3a1b-47a3-8154-60512fb294be","resolution":{"observed_at":"2026-05-14T20:17:56.485107Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2402.16006/citation-record","integrity":"/paper/2402.16006/integrity","json":"/paper/2402.16006/citation-record.json","paper":"/paper/2402.16006"},"outbound":[],"paper":{"arxiv_id":"2402.16006","last_updated":"2024-06-04T02:59:58Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-13T18:29:52.111506Z","submitted_at":"2024-02-25T06:46:27Z","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 9 inbound Pith citation observations for arXiv:2402.16006."}