{"as_of":"2026-08-09T16:21:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a82e2d4cd5445090d71b9902e7dfaf99453f5539bf33d60b0b5afe1c31f35dec","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":29,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":29,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T10:29:50.118656Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T03:59:33.733302Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.16717","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-07-04T03:59:33.733302Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":"49218842-791e-4674-9da4-868d901d2b19","year":2024},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:743078bfa60cb0a65a5cbea369d94c4aca0cb3848abc3a00b1f8319396549c17","observation_id":"48e957ff-ad7e-4ac8-8ac7-6c362570389e","resolution":{"observed_at":"2026-05-15T02:20:44.770114Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-09T10:29:50.118656Z","title":"Codechameleon: Personalized encryp- tion framework for jailbreaking large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.02960","last_updated":"2025-02-05T07:54:07Z","snapshot_observed_at":"2026-08-09T10:25:22.459556Z","submitted_at":"2025-02-05T07:54:07Z","title":"Large Language Model Adversarial Landscape Through the Lens of Attack Objectives","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-09T10:29:50.118656Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2502.02960"},"observation_digest":"sha256:6ae6f62bed91b20301a10957edd10cbfe3cded8083af20f3c96abcaa7755eb4b","observation_id":"40d59864-3713-4dba-b09d-52fe250163c7","resolution":{"observed_at":"2026-08-09T10:29:50.118656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.16717","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-07-04T03:59:33.733302Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":"49218842-791e-4674-9da4-868d901d2b19","year":2024},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:86a9aaf064d7028609a0d963da0d6e9afdc23090bff69d256dfeea67748b094f","observation_id":"6ad69d10-7201-426b-9e20-a90fa9ecd089","resolution":{"observed_at":"2026-05-23T04:42:33.818659Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-09T04:22:00.524554Z","title":"CodeChameleon : Personalized Encryption Framework for Jailbreaking Large Language Models , February 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05223","last_updated":"2025-02-05T21:50:34Z","snapshot_observed_at":"2026-08-09T05:14:54.791831Z","submitted_at":"2025-02-05T21:50:34Z","title":"KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-09T04:22:00.524554Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2502.05223"},"observation_digest":"sha256:5a887ac50c7fdb5939367d2c6db28b09af76c60a7ebb2ba18aabcee56c74b5d9","observation_id":"0471f4b8-458c-4256-81a0-ff339a0b1d2e","resolution":{"observed_at":"2026-08-09T04:22:00.524554Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-07T23:08:02.311644Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09674","last_updated":"2025-05-27T08:40:42Z","snapshot_observed_at":"2026-08-09T02:24:15.276351Z","submitted_at":"2025-02-13T06:39:22Z","title":"The Hidden Dimensions of LLM Alignment: A Multi-Dimensional Analysis of Orthogonal Safety Directions","version":4},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T23:08:02.311644Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2502.09674"},"observation_digest":"sha256:402c21e6802b1ab7486d2fd1611cb5e5c44d2fbf86414cacad1bdb7aa132b5ee","observation_id":"1f6119c0-1d99-4d2a-98ad-af587fc43ac6","resolution":{"observed_at":"2026-08-07T23:08:02.311644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-07T20:46:15.916514Z","title":"Huijie Lv, Xiao Wang, Yuansen Zhang, Caishuang Huang, Shihan Dou, Junjie Ye, Tao Gui, Qi Zhang, and Xuanjing Huang","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09723","last_updated":"2025-05-26T10:35:21Z","snapshot_observed_at":"2026-08-09T04:16:19.111417Z","submitted_at":"2025-02-13T19:13:03Z","title":"QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language","version":3},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T20:46:15.916514Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2502.09723"},"observation_digest":"sha256:dfa15eb575dabea6cae232d2fc2844e7f455f1ee9fb38581f91ff5584ea2d3e2","observation_id":"3e2c2c1e-b689-485a-89c6-2fb4ce74efe6","resolution":{"observed_at":"2026-08-07T20:46:15.916514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-07T15:03:40.894389Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16446","last_updated":"2025-05-22T09:34:47Z","snapshot_observed_at":"2026-08-09T10:27:17.806903Z","submitted_at":"2025-05-22T09:34:47Z","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T15:03:40.894389Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2505.16446"},"observation_digest":"sha256:9d5e8d79ac439a42059e2b0f2078553dc7b7325abcab0106e179561d492e3cf3","observation_id":"aad50d79-e0b8-4ba6-ba97-8ef440c7546a","resolution":{"observed_at":"2026-08-07T15:03:40.894389Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-07T14:48:17.350033Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17598","last_updated":"2025-05-23T08:02:38Z","snapshot_observed_at":"2026-08-08T05:50:23.787611Z","submitted_at":"2025-05-23T08:02:38Z","title":"One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T14:48:17.350033Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2505.17598"},"observation_digest":"sha256:265fff6d01237c4a9aa4e4a8e2f3c45a2d888aad419504ebfc5bad2ec9a0fd62","observation_id":"bf238e03-c2f9-492c-ae66-27c1804f362a","resolution":{"observed_at":"2026-08-07T14:48:17.350033Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-07T11:27:47.338065Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.02442","last_updated":"2025-06-04T05:56:40Z","snapshot_observed_at":"2026-08-09T10:09:11.768287Z","submitted_at":"2025-06-03T05:00:12Z","title":"Should LLM Safety Be More Than Refusing Harmful Instructions?","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T11:27:47.338065Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2506.02442"},"observation_digest":"sha256:467cbc671d193fc1bcad16dc4355c3cd63a4f5076418a63732c69249baa9b77f","observation_id":"b091d066-6201-4946-a08c-2e603dcaceda","resolution":{"observed_at":"2026-08-07T11:27:47.338065Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-07T00:32:36.604717Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models.arXiv preprint arXiv:2402.16717, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13666","last_updated":"2025-06-16T16:24:31Z","snapshot_observed_at":"2026-08-07T00:25:36.770856Z","submitted_at":"2025-06-16T16:24:31Z","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T00:32:36.604717Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2506.13666"},"observation_digest":"sha256:6a1e2a7ade60f2229296f6d76c1e7cda56ade560ddd0abcdfba2dcc6f9bc9b13","observation_id":"f700f20c-b668-4c99-a7fc-334e65e65551","resolution":{"observed_at":"2026-08-07T00:32:36.604717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-06T18:28:43.832596Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.08898","last_updated":"2025-07-17T08:01:44Z","snapshot_observed_at":"2026-08-08T14:51:56.908190Z","submitted_at":"2025-07-11T05:15:35Z","title":"SEALGuard: Safeguarding the Multilingual Conversations in Southeast Asian Languages for LLM Software Systems","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T18:28:43.832596Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2507.08898"},"observation_digest":"sha256:325d9d3aaab0ae88779a15e2f93353ac072933dab5bd087bfd78000312e0d1a6","observation_id":"61b14a6f-4de5-4f05-80b7-11ce224220c8","resolution":{"observed_at":"2026-08-06T18:28:43.832596Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-06T05:43:39.041036Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01306","last_updated":"2025-08-02T10:36:01Z","snapshot_observed_at":"2026-08-09T05:14:53.381606Z","submitted_at":"2025-08-02T10:36:01Z","title":"PUZZLED: Jailbreaking LLMs through Word-Based Puzzles","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-06T05:43:39.041036Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2508.01306"},"observation_digest":"sha256:1ca21d52096673dab703624291357485d43bfad2644e084e5abcbe88d0c5bd81","observation_id":"3dbded75-3cce-4949-a41f-f03d92c62a78","resolution":{"observed_at":"2026-08-06T05:43:39.041036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-06T04:47:25.584775Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":169,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.584775Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:9ab5543c03061f8e1113c4f6be40b69cb8c013c9f0086ab3b6f74c95aca8222c","observation_id":"a2273fce-c95f-4282-9982-e055d93c3dde","resolution":{"observed_at":"2026-08-06T04:47:25.584775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-06T01:03:51.315578Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03933","last_updated":"2025-08-05T21:55:14Z","snapshot_observed_at":"2026-08-07T23:14:31.511391Z","submitted_at":"2025-08-05T21:55:14Z","title":"Towards terahertz nanomechanics","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T01:03:51.315578Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2508.03933"},"observation_digest":"sha256:26e35f43669f4049b6552064f465bcfbb894aee796dcc143fc523448fcc4dc0e","observation_id":"1601a94a-ff15-45b5-8dc0-679c32725b5a","resolution":{"observed_at":"2026-08-06T01:03:51.315578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-06T01:04:35.159503Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03936","last_updated":"2025-08-05T21:57:52Z","snapshot_observed_at":"2026-08-08T12:25:04.397522Z","submitted_at":"2025-08-05T21:57:52Z","title":"ASTRA: Autonomous Spatial-Temporal Red-teaming for AI Software Assistants","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-06T01:04:35.159503Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2508.03936"},"observation_digest":"sha256:64f0f68f3a6a33d051347563623d35d5d6935d5cf5d53df3de3f788d06174fbf","observation_id":"f49c3800-eb52-442e-bc2d-b4d04947b6d3","resolution":{"observed_at":"2026-08-06T01:04:35.159503Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-05T20:31:40.726264Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:40.726264Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:59911fb13b0f102a79723e1de62814cbc361f13750525ca9aea776c86c0e5cfd","observation_id":"7ec4bc9c-2de1-4dc3-b8e1-8a9345ed3384","resolution":{"observed_at":"2026-08-05T20:31:40.726264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.16717","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-07-04T03:59:33.733302Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":"49218842-791e-4674-9da4-868d901d2b19","year":2024},"citing_paper":{"arxiv_id":"2509.10546","last_updated":"2026-04-24T18:29:01Z","snapshot_observed_at":"2026-08-02T04:58:06.974646Z","submitted_at":"2025-09-07T22:35:15Z","title":"Learning to Conceal Risk: Controllable Multi-turn Red Teaming for LLMs in the Financial Domain","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-05-18T17:49:42.112564Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2509.10546"},"observation_digest":"sha256:cbc3c5c91ef08b204b0c94735a2f91fc8864e78b208de650e075feb375911dc5","observation_id":"3be65861-45e2-4b57-94dc-e7ba9772a2a0","resolution":{"observed_at":"2026-05-18T17:51:41.906726Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-04T09:25:49.471194Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models.CoRR, abs/2402.16717, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-06T02:45:04.316908Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":129,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:49.471194Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:49cdf4cbb75e4affc0daf6d822fd5583ac99d7870030ac017bfedc86690642b9","observation_id":"fdb0bf9d-6db4-404a-bdce-49d745054674","resolution":{"observed_at":"2026-08-04T09:25:49.471194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.16717","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-07-04T03:59:33.733302Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":"49218842-791e-4674-9da4-868d901d2b19","year":2024},"citing_paper":{"arxiv_id":"2511.02356","last_updated":"2026-04-20T12:25:45Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-11-04T08:24:22Z","title":"ASTRA: An Automated Framework for Strategy Discovery, Retrieval, and Evolution for Jailbreaking LLMs","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-18T01:54:22.995178Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2511.02356"},"observation_digest":"sha256:1dd4f018b9a7ae801287fdca599d9f7323696ea5434a01e18f7aa81a239a1d10","observation_id":"36e521a4-7449-4de3-8a42-928c19b234c5","resolution":{"observed_at":"2026-05-18T01:55:38.008295Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.16717","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-07-04T03:59:33.733302Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":"49218842-791e-4674-9da4-868d901d2b19","year":2024},"citing_paper":{"arxiv_id":"2604.01444","last_updated":"2026-04-03T15:46:12Z","snapshot_observed_at":"2026-07-06T22:51:35.522923Z","submitted_at":"2026-04-01T22:38:38Z","title":"Cooking Up Risks: Benchmarking and Reducing Food Safety Risks in Large Language Models","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-13T22:02:12.555644Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2604.01444"},"observation_digest":"sha256:376cbae9e512529251283f10c87fe71256101d664fb23d0be51df25d64b089f8","observation_id":"985d49bb-5099-4bfe-ba4e-e90fab9acbd3","resolution":{"observed_at":"2026-05-13T22:03:20.345361Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.16717","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-07-04T03:59:33.733302Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":"49218842-791e-4674-9da4-868d901d2b19","year":2024},"citing_paper":{"arxiv_id":"2604.06247","last_updated":"2026-04-06T16:29:05Z","snapshot_observed_at":"2026-07-06T22:54:48.916799Z","submitted_at":"2026-04-06T16:29:05Z","title":"SALLIE: Safeguarding Against Latent Language & Image Exploits","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-10T19:04:46.426969Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2604.06247"},"observation_digest":"sha256:8369697416967f086c0dc94e56883eaab68c8f34e6daaf9c55d1070a6b611ab2","observation_id":"0a1c00d9-d3a6-49ef-a293-c0529fdb03bd","resolution":{"observed_at":"2026-05-10T23:30:51.208437Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.16717","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-07-04T03:59:33.733302Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":"49218842-791e-4674-9da4-868d901d2b19","year":2024},"citing_paper":{"arxiv_id":"2604.10326","last_updated":"2026-04-11T19:19:05Z","snapshot_observed_at":"2026-07-06T22:59:01.129724Z","submitted_at":"2026-04-11T19:19:05Z","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-05-10T15:19:46.920899Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2604.10326"},"observation_digest":"sha256:2729f1233511a50c9e38a1e735dfaf4f56aa75f66efdc79419b29629be97da6a","observation_id":"833ef549-2caf-469b-9926-b08a46b77f69","resolution":{"observed_at":"2026-05-11T10:46:04.208184Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.16717","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-07-04T03:59:33.733302Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":"49218842-791e-4674-9da4-868d901d2b19","year":2024},"citing_paper":{"arxiv_id":"2604.22427","last_updated":"2026-04-24T10:38:40Z","snapshot_observed_at":"2026-07-06T23:08:51.913995Z","submitted_at":"2026-04-24T10:38:40Z","title":"Automation-Exploit: A Multi-Agent LLM Framework for Adaptive Offensive Security with Digital Twin-Based Risk-Mitigated Exploitation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-08T11:45:21.608035Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2604.22427"},"observation_digest":"sha256:4bbf41aeb391d37a9db8542d305ae7da37c4468089ac0c53495b0883a78c8ae1","observation_id":"9fd793c5-595d-4e2e-a9aa-9915207736a8","resolution":{"observed_at":"2026-05-11T19:31:09.485824Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.16717","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-07-04T03:59:33.733302Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":"49218842-791e-4674-9da4-868d901d2b19","year":2024},"citing_paper":{"arxiv_id":"2605.24817","last_updated":"2026-05-24T02:06:44Z","snapshot_observed_at":"2026-07-06T23:34:52.129354Z","submitted_at":"2026-05-24T02:06:44Z","title":"RouteScan: A Non-Intrusive Approach to Auditing MoE LLMs Safety via Expert Routing Telemetry","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-30T00:33:35.235214Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2605.24817"},"observation_digest":"sha256:e855a348caae7b4f4306fd225eaa836521404fdf3a782578b75af8c619ee400b","observation_id":"66fe95d5-2920-4227-8326-70a74d37a230","resolution":{"observed_at":"2026-06-30T00:34:05.282807Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.16717","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-07-04T03:59:33.733302Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models","venue":null,"work_id":"49218842-791e-4674-9da4-868d901d2b19","year":2024},"citing_paper":{"arxiv_id":"2606.19755","last_updated":"2026-06-18T03:35:32Z","snapshot_observed_at":"2026-07-06T23:55:01.487552Z","submitted_at":"2026-06-18T03:35:32Z","title":"SafeSpec: Fast and Safe LLM via Dynamic Reflective Sampling","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-26T17:23:06.382761Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2606.19755"},"observation_digest":"sha256:b4ddc8a3e2e3c8bf3451128d7bcdbccf7c144fedfcc4d8f03e176696fb007900","observation_id":"bcaf4be0-3cda-4643-b1a0-ac08385766b9","resolution":{"observed_at":"2026-07-04T03:59:33.735238Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models.arXiv preprint arXiv:2402.16717, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:4cf28ed62a3e4eec94301bc469088ce5390f5914e5b6ba030e172ab6c496dd12","observation_id":"c924c766-0fff-4089-bc51-820a0c437c3d","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-02T12:39:56.103421Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.22569","last_updated":"2026-06-01T04:20:25Z","snapshot_observed_at":"2026-08-09T09:01:05.542697Z","submitted_at":"2026-06-01T04:20:25Z","title":"Execution-Grounded Security Testing for Coding Agents in Software Engineering Pipelines","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T12:39:56.103421Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2607.22569"},"observation_digest":"sha256:7583ab30b6fd28060a4d8305d3d3614dfacc553113f04db41b3a0e9502671908","observation_id":"bea9c340-8709-4b74-9e1e-dd09fc3a7810","resolution":{"observed_at":"2026-08-02T12:39:56.103421Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-07-30T20:47:40.968965Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23496","last_updated":"2026-07-26T06:54:28Z","snapshot_observed_at":"2026-08-06T06:12:40.435094Z","submitted_at":"2026-07-26T06:54:28Z","title":"Do LLMs Know Their Vulnerable Scenarios?","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-30T20:47:40.968965Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2607.23496"},"observation_digest":"sha256:40b8dc932244781d3d0c94e95bcbf0c6c7485889f1ffd69dab8f1bdca12e0c96","observation_id":"ee17a69a-9657-44b4-b33a-8bdb70281bc3","resolution":{"observed_at":"2026-07-30T20:47:40.968965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-01T08:37:34.119983Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.27373","last_updated":"2026-07-29T18:25:30Z","snapshot_observed_at":"2026-08-07T20:54:40.976131Z","submitted_at":"2026-07-29T18:25:30Z","title":"RoguePrompt: Dual-Layer Encoding for Self-Reconstruction to Circumvent LLM Moderation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T08:37:34.119983Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2607.27373"},"observation_digest":"sha256:a7da7b30d8e7c12ddf7aecb64f67bb07eea47c0351f89093058ea3df7adb1c50","observation_id":"d5d00b1f-ddaa-4194-9add-684ba077c30d","resolution":{"observed_at":"2026-08-01T08:37:34.119983Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2402.16717/citation-record","integrity":"/paper/2402.16717/integrity","json":"/paper/2402.16717/citation-record.json","paper":"/paper/2402.16717"},"outbound":[],"paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 29 inbound Pith citation observations for arXiv:2402.16717."}