{"as_of":"2026-08-07T19:47:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0ca05a78900395a69c610ec6528737cf90811c80e7bb6f50a7f808a93e364e37","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":21,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":21,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":21,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":21,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:48:16.908261Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":3,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":"2402.16914","doi":"10.48550/arxiv.2402.16914","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2402.16914 (2024)","venue":"arXiv (Cornell University)","work_id":"ea7bde13-246e-40f1-be95-d23e27ab5dc9","year":2024},"citing_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-15T02:20:44.368219Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2407.04295"},"observation_digest":"sha256:f557f92cbf1b4b3c769775f164737344318dbdd153baad60fc44daf4a1718e77","observation_id":"69f8b7c4-46ed-478b-915b-d3aa6d6d92af","resolution":{"observed_at":"2026-05-15T02:20:44.730853Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-07T14:48:16.908261Z","title":"Drattack: Prompt decomposition and reconstruction makes powerful llm jailbreakers","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17598","last_updated":"2025-05-23T08:02:38Z","snapshot_observed_at":"2026-08-07T14:41:55.160539Z","submitted_at":"2025-05-23T08:02:38Z","title":"One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T14:48:16.908261Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2505.17598"},"observation_digest":"sha256:05b4545f0900b979911b01691a3afaa7c2d74a61a03ae0edf811cc8f3cee5b21","observation_id":"9ed957d2-2887-409b-bdcb-8842dc65627e","resolution":{"observed_at":"2026-08-07T14:48:16.908261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-07T12:34:35.024627Z","title":"Drattack: Prompt decomposition and reconstruction makes powerful llm jailbreakers.arXiv preprint arXiv:2402.16914, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24232","last_updated":"2025-05-30T05:48:50Z","snapshot_observed_at":"2026-08-07T12:26:05.850027Z","submitted_at":"2025-05-30T05:48:50Z","title":"From Hallucinations to Jailbreaks: Rethinking the Vulnerability of Large Foundation Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T12:34:35.024627Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2505.24232"},"observation_digest":"sha256:536ccf31f57e9c6674d07db89decdf300e44df8dcbe51931036c10fd636e4c4b","observation_id":"bdcec99b-775e-4fe4-8083-8ac83e1925fc","resolution":{"observed_at":"2026-08-07T12:34:35.024627Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":"2402.16914","doi":"10.48550/arxiv.2402.16914","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2402.16914 (2024)","venue":"arXiv (Cornell University)","work_id":"ea7bde13-246e-40f1-be95-d23e27ab5dc9","year":2024},"citing_paper":{"arxiv_id":"2506.06414","last_updated":"2026-04-20T20:58:30Z","snapshot_observed_at":"2026-08-03T02:03:44.971897Z","submitted_at":"2025-06-06T17:33:33Z","title":"Benchmarking Misuse Mitigation Against Covert Adversaries","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-19T10:29:05.104520Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2506.06414"},"observation_digest":"sha256:da14394938626d936478e24f7322e5f8de8b946dfcbb5ffe0db2f8c959489e9a","observation_id":"6111a5ee-8cf9-4dd6-95c9-dd4bd41c45f8","resolution":{"observed_at":"2026-05-19T10:32:14.751197Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-07T01:02:29.162442Z","title":"Drattack: Prompt decomposition and reconstruction makes powerful llm jailbreakers, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.12274","last_updated":"2025-06-13T23:03:11Z","snapshot_observed_at":"2026-08-07T00:52:06.958006Z","submitted_at":"2025-06-13T23:03:11Z","title":"InfoFlood: Jailbreaking Large Language Models with Information Overload","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T01:02:29.162442Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2506.12274"},"observation_digest":"sha256:9e7d6198e69dfd2608666d29bf8c9bd73858e337213eb7556b2a4999eeb9b4c8","observation_id":"65c9f057-029c-4115-b33d-15030852ea12","resolution":{"observed_at":"2026-08-07T01:02:29.162442Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-06T04:47:25.566053Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-06T15:30:46.727768Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":163,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.566053Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:fff8c6c6c0db22a6a29a950f212ef5f52fdbea187b04ec822711a360a62beca5","observation_id":"63ff88c9-2fe1-477a-bfc4-a26e7a7ff2b1","resolution":{"observed_at":"2026-08-06T04:47:25.566053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-06T01:03:50.785477Z","title":"Drattack: Prompt decomposition and reconstruction makes powerful llm jailbreakers","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03933","last_updated":"2025-08-05T21:55:14Z","snapshot_observed_at":"2026-08-06T01:03:47.654410Z","submitted_at":"2025-08-05T21:55:14Z","title":"Towards terahertz nanomechanics","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T01:03:50.785477Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2508.03933"},"observation_digest":"sha256:b3880cd8265bff8dffe1681a30fcc4a6b6f0e0d8507938cd2240c937e190449e","observation_id":"794a4aee-da99-493c-bdb2-f259682c4ea4","resolution":{"observed_at":"2026-08-06T01:03:50.785477Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-06T01:04:34.437507Z","title":"Drattack: Prompt decomposition and reconstruction makes powerful llm jailbreakers","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03936","last_updated":"2025-08-05T21:57:52Z","snapshot_observed_at":"2026-08-06T01:04:15.739216Z","submitted_at":"2025-08-05T21:57:52Z","title":"ASTRA: Autonomous Spatial-Temporal Red-teaming for AI Software Assistants","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-06T01:04:34.437507Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2508.03936"},"observation_digest":"sha256:b33e2e36cd72e8b783552ee3dfa0e1ffe9fcf260d44b5dfbcbbb31bab3612fda","observation_id":"f7dd2d6d-07a6-4e11-bcc4-66ccb503affb","resolution":{"observed_at":"2026-08-06T01:04:34.437507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-05T20:31:40.480555Z","title":"Drattack: Prompt decomposition and reconstruction makes powerful llm jailbreakers","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-07T14:42:27.926127Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:40.480555Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:4734695fdee1f5d44bc702c644af8e6eeb099c26ff4d0f7395c05392b3442693","observation_id":"79ee3035-118a-407b-8085-916f7b3b6269","resolution":{"observed_at":"2026-08-05T20:31:40.480555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":"2402.16914","doi":"10.48550/arxiv.2402.16914","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2402.16914 (2024)","venue":"arXiv (Cornell University)","work_id":"ea7bde13-246e-40f1-be95-d23e27ab5dc9","year":2024},"citing_paper":{"arxiv_id":"2508.20325","last_updated":"2026-05-11T14:12:43Z","snapshot_observed_at":"2026-07-06T22:19:48.389341Z","submitted_at":"2025-08-28T00:07:10Z","title":"GUARD: Guideline Upholding Test through Adaptive Role-play and Jailbreak Diagnostics for LLMs","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-18T21:34:51.665401Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2508.20325"},"observation_digest":"sha256:a2f15c3ae72f17049b3abb85b840e08dd1e8b1f7aa6dff7c88e96fd69eec0279","observation_id":"5c51fca5-3ace-4ed8-aead-76b29948150c","resolution":{"observed_at":"2026-05-18T21:36:52.445155Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-04T09:25:46.386991Z","title":"Drattack: Prompt decomposition and reconstruction makes powerful LLM jailbreakers.CoRR, abs/2402.16914, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-06T02:45:04.316908Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":103,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:46.386991Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:0374787089b3b7b92cfbfd64a224ecbc808ba61dd1331edc88aea4a60b2393f8","observation_id":"05f5aa85-235d-4b43-83a1-80be2b3a3484","resolution":{"observed_at":"2026-08-04T09:25:46.386991Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":"2402.16914","doi":"10.48550/arxiv.2402.16914","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2402.16914 (2024)","venue":"arXiv (Cornell University)","work_id":"ea7bde13-246e-40f1-be95-d23e27ab5dc9","year":2024},"citing_paper":{"arxiv_id":"2511.02356","last_updated":"2026-04-20T12:25:45Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-11-04T08:24:22Z","title":"ASTRA: An Automated Framework for Strategy Discovery, Retrieval, and Evolution for Jailbreaking LLMs","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-18T01:54:22.995178Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2511.02356"},"observation_digest":"sha256:46c83cbc1baf2e0208cf046c17921f22a01cfcb8242c295a7994e14886699c12","observation_id":"1358916c-c128-4aaa-952c-d057c3118ff8","resolution":{"observed_at":"2026-05-18T01:55:38.022340Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":"2402.16914","doi":"10.48550/arxiv.2402.16914","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2402.16914 (2024)","venue":"arXiv (Cornell University)","work_id":"ea7bde13-246e-40f1-be95-d23e27ab5dc9","year":2024},"citing_paper":{"arxiv_id":"2604.01473","last_updated":"2026-05-28T05:44:14Z","snapshot_observed_at":"2026-08-02T17:40:16.491905Z","submitted_at":"2026-04-01T23:29:12Z","title":"SelfGrader: LLM Jailbreak Detection via Anchored Token-Level Logits","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-13T21:43:46.728512Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2604.01473"},"observation_digest":"sha256:b9f60def77d868b8c22bace4dd041acbce40a0ba3ccfda2a6534668c6515d43f","observation_id":"2fdb3514-3a79-4c03-adeb-e4f553ad2c83","resolution":{"observed_at":"2026-05-13T21:48:19.357903Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":"2402.16914","doi":"10.48550/arxiv.2402.16914","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2402.16914 (2024)","venue":"arXiv (Cornell University)","work_id":"ea7bde13-246e-40f1-be95-d23e27ab5dc9","year":2024},"citing_paper":{"arxiv_id":"2604.10326","last_updated":"2026-04-11T19:19:05Z","snapshot_observed_at":"2026-07-06T22:59:01.129724Z","submitted_at":"2026-04-11T19:19:05Z","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-05-10T15:19:46.920899Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2604.10326"},"observation_digest":"sha256:97167a786548c91b6f918369aa2e6f51828374db0633631be33801ce6d6d9389","observation_id":"56618874-883d-450c-bca1-d6ab31f4e38e","resolution":{"observed_at":"2026-05-11T10:46:04.389761Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":"2402.16914","doi":"10.48550/arxiv.2402.16914","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2402.16914 (2024)","venue":"arXiv (Cornell University)","work_id":"ea7bde13-246e-40f1-be95-d23e27ab5dc9","year":2024},"citing_paper":{"arxiv_id":"2605.17971","last_updated":"2026-05-18T07:27:59Z","snapshot_observed_at":"2026-07-31T07:48:29.975390Z","submitted_at":"2026-05-18T07:27:59Z","title":"Babel: Jailbreaking Safety Attention via Obfuscation Distribution Optimized Sampling","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-20T10:08:07.648295Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2605.17971"},"observation_digest":"sha256:a8954272ac8a1cb9940853a733fdbb023430fcee37e3bb9304031a74e24096c3","observation_id":"7f80f370-27fb-45cd-a195-dcbfab3574cb","resolution":{"observed_at":"2026-05-20T10:08:11.950847Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":"2402.16914","doi":"10.48550/arxiv.2402.16914","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2402.16914 (2024)","venue":"arXiv (Cornell University)","work_id":"ea7bde13-246e-40f1-be95-d23e27ab5dc9","year":2024},"citing_paper":{"arxiv_id":"2605.21674","last_updated":"2026-05-20T19:31:07Z","snapshot_observed_at":"2026-07-06T23:32:05.693503Z","submitted_at":"2026-05-20T19:31:07Z","title":"Adversarial Reframing: A Framework for Targeted Generation in Language Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-22T09:35:51.862736Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2605.21674"},"observation_digest":"sha256:414f4e036b79c4e80fcad7e62f24048db0e133a9f300d33f255b92913be6db42","observation_id":"804aa57b-651c-4ab0-9cf5-405387b1f017","resolution":{"observed_at":"2026-05-22T09:36:21.023614Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":"2402.16914","doi":"10.48550/arxiv.2402.16914","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2402.16914 (2024)","venue":"arXiv (Cornell University)","work_id":"ea7bde13-246e-40f1-be95-d23e27ab5dc9","year":2024},"citing_paper":{"arxiv_id":"2605.31593","last_updated":"2026-05-29T17:57:00Z","snapshot_observed_at":"2026-08-06T14:55:00.141524Z","submitted_at":"2026-05-29T17:57:00Z","title":"Stateful Online Monitoring Catches Distributed Agent Attacks","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-06-28T21:54:44.072929Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2605.31593"},"observation_digest":"sha256:42931efb1df68c78fd3b080555b9fcfd1cfb93598867dc8d70e3ea9b1401e718","observation_id":"c0c8629c-bc02-4d69-9b40-8917f8c631d9","resolution":{"observed_at":"2026-06-28T22:02:41.101220Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":"2402.16914","doi":"10.48550/arxiv.2402.16914","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2402.16914 (2024)","venue":"arXiv (Cornell University)","work_id":"ea7bde13-246e-40f1-be95-d23e27ab5dc9","year":2024},"citing_paper":{"arxiv_id":"2606.07335","last_updated":"2026-06-05T14:49:26Z","snapshot_observed_at":"2026-07-06T23:47:00.425715Z","submitted_at":"2026-06-05T14:49:26Z","title":"Defending Jailbreak Attacks on Large Language Models via Manifold Trajectory Kinetics","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-27T21:55:48.561400Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2606.07335"},"observation_digest":"sha256:4db6a2756178f698cc2b726b8a5d6754a9abcdcfe6ad9a73df5fd9cf21d809ce","observation_id":"36b603ad-917a-4335-93e8-65593a4459bf","resolution":{"observed_at":"2026-07-02T17:37:14.898011Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-07-14T06:40:17.865408Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11151","last_updated":"2026-07-13T06:46:56Z","snapshot_observed_at":"2026-07-16T23:19:13.693221Z","submitted_at":"2026-07-13T06:46:56Z","title":"AMT-X: Phase-Structured Multi-Turn Red-Teaming with Checklist-Gated Evaluation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-14T06:40:17.865408Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2607.11151"},"observation_digest":"sha256:fce3dca11ba4bbe8fe46e18348e7791e8739eb85369020c09ab212f8876ea0bc","observation_id":"70d33fdf-3407-4a96-9b21-f4d32dec0fea","resolution":{"observed_at":"2026-07-14T06:40:17.865408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:fbd1ecc803bd985fa339aaf73fb48128e4a8a3dc74bf41566dcc9fddcb2154af","observation_id":"1f1fa684-7095-42ea-8e95-324843271df6","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-08-02T10:20:56.084051Z","title":"arXiv preprint arXiv:2402.16914 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22643","last_updated":"2026-06-24T02:40:49Z","snapshot_observed_at":"2026-08-04T13:06:48.299222Z","submitted_at":"2026-06-24T02:40:49Z","title":"Reason Before You Retrieve: Agentic Planning for Multi-modal RAG","version":1},"reference_index":113,"source":"arxiv_source","source_observed_at":"2026-08-02T10:20:56.084051Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2607.22643"},"observation_digest":"sha256:cdfdd218808ecf46cd91923e75c4722ed8ab35313946e64f40fe793cf4b49f31","observation_id":"1e9e90e8-0057-4eb7-8723-13533a0dad87","resolution":{"observed_at":"2026-08-02T10:20:56.084051Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2402.16914/citation-record","integrity":"/paper/2402.16914/integrity","json":"/paper/2402.16914/citation-record.json","paper":"/paper/2402.16914"},"outbound":[],"paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 21 inbound Pith citation observations for arXiv:2402.16914."}