{"as_of":"2026-08-09T21:32:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e802375ae06085f040c10ca42832508f28c12a3db4c875d86cbed3539b7721fa","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":18,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":18,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":18,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":18,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:10:00.204245Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T16:39:57.683325Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-08-07T15:10:00.204245Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17147","last_updated":"2025-05-22T08:22:57Z","snapshot_observed_at":"2026-08-08T03:05:46.469319Z","submitted_at":"2025-05-22T08:22:57Z","title":"MTSA: Multi-turn Safety Alignment for LLMs through Multi-round Red-teaming","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T15:10:00.204245Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2505.17147"},"observation_digest":"sha256:ec502f6b620965d31a8096f40f5e99bff1ad1cacd85b2cb8a1a9280032378ba9","observation_id":"453c21f6-c9d4-4f28-9434-5ccbde68cfbc","resolution":{"observed_at":"2026-08-07T15:10:00.204245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-08-07T12:04:47.198907Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00668","last_updated":"2025-05-31T18:38:23Z","snapshot_observed_at":"2026-08-08T14:13:24.402413Z","submitted_at":"2025-05-31T18:38:23Z","title":"SafeTy Reasoning Elicitation Alignment for Multi-Turn Dialogues","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T12:04:47.198907Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2506.00668"},"observation_digest":"sha256:c3f3bb1eb3b81f28556f4b05bd6ec290001580e1ef395246bf9df9381c626731","observation_id":"70c920a5-bbd6-4476-87ef-7d5f9961c0ee","resolution":{"observed_at":"2026-08-07T12:04:47.198907Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-08-06T23:00:44.835730Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22063","last_updated":"2026-07-02T17:48:45Z","snapshot_observed_at":"2026-08-06T22:52:58.454957Z","submitted_at":"2025-06-25T06:20:15Z","title":"RedCoder: Automated Multi-Turn Red Teaming for Code LLMs","version":2},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-06T23:00:44.835730Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2507.22063"},"observation_digest":"sha256:400019b58bd366a070c1686cddc5f325e4b3fb31c1628ebc70d75af8afa5a7ca","observation_id":"8e79db46-68d7-48a1-9f2a-71f5ba5e1f50","resolution":{"observed_at":"2026-08-06T23:00:44.835730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-08-06T01:03:52.953662Z","title":"Chain of attack: a semantic-driven contextual multi-turn attacker for llm","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03933","last_updated":"2025-08-05T21:55:14Z","snapshot_observed_at":"2026-08-07T23:14:31.511391Z","submitted_at":"2025-08-05T21:55:14Z","title":"Towards terahertz nanomechanics","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T01:03:52.953662Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2508.03933"},"observation_digest":"sha256:f4f1244c449b20b1252d5738679c48db74c5909ed4ab12157d9cc32e33545e99","observation_id":"6112d9c5-8327-434c-8c0f-9f750870bd31","resolution":{"observed_at":"2026-08-06T01:03:52.953662Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-08-06T01:04:37.095430Z","title":"Chain of attack: a semantic-driven contextual multi-turn attacker for llm","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03936","last_updated":"2025-08-05T21:57:52Z","snapshot_observed_at":"2026-08-08T12:25:04.397522Z","submitted_at":"2025-08-05T21:57:52Z","title":"ASTRA: Autonomous Spatial-Temporal Red-teaming for AI Software Assistants","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-06T01:04:37.095430Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2508.03936"},"observation_digest":"sha256:e01d1d141d61729cb156719c9d8c5a47bdd26a2e61cc542fdd1254c0698eafad","observation_id":"e98005c7-8d0e-4489-99a6-77ecb1d48d54","resolution":{"observed_at":"2026-08-06T01:04:37.095430Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-08-05T20:31:39.494024Z","title":"Chain of attack: a semantic-driven contextual multi-turn attacker for llm","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:39.494024Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:f555cb4ffdedd5ace7264a509c6fe03689eaf8e02a86c6b229d0b834f4093f1a","observation_id":"ddc25817-9bbc-4f3c-9f6c-b6894256d338","resolution":{"observed_at":"2026-08-05T20:31:39.494024Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-08-04T09:25:58.092990Z","title":"Chain of attack: a semantic-driven contextual multi-turn attacker for LLM.CoRR, abs/2405.05610, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-06T02:45:04.316908Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":215,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:58.092990Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:39780bcccb0da77d55d0b8bb5d0981ac46470511a268fb29778dac2e761ca3d6","observation_id":"02cfc3ce-fd91-4769-9e49-17abfb71f75f","resolution":{"observed_at":"2026-08-04T09:25:58.092990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":"2405.05610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-07-04T16:39:57.683325Z","title":"Chain of attack: a semantic-driven contextual multi-turn at- tacker for llm.ArXiv, abs/2405.05610","venue":null,"work_id":"c508d87d-a1a4-41a7-9f3a-88b5586575f3","year":2025},"citing_paper":{"arxiv_id":"2511.12710","last_updated":"2026-05-18T06:50:41Z","snapshot_observed_at":"2026-07-06T22:35:55.936840Z","submitted_at":"2025-11-16T17:52:07Z","title":"Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-21T18:58:53.183734Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2511.12710"},"observation_digest":"sha256:94a108295549693321aac223cecc499360f9246cefdac93507aee5521b7aadc1","observation_id":"18149387-b895-44c8-b5e1-9a0f38940a7b","resolution":{"observed_at":"2026-05-21T19:00:30.416559Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-08-02T23:16:37.158808Z","title":"V ., Zhou, D., and Chen, X","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.14399","last_updated":"2026-05-28T04:31:34Z","snapshot_observed_at":"2026-08-06T22:03:52.645334Z","submitted_at":"2026-02-16T02:15:58Z","title":"Multi-Turn Adaptive Prompting Attack on Large Vision-Language Models","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T23:16:37.158808Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2602.14399"},"observation_digest":"sha256:5eb8063b7d70593302023a04b998ee1d6499c3188bb0511cb51e276333d3c215","observation_id":"550e8a54-d8d3-419b-8b95-167d0591c72b","resolution":{"observed_at":"2026-08-02T23:16:37.158808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":"2405.05610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-07-04T16:39:57.683325Z","title":"Chain of attack: a semantic-driven contextual multi-turn at- tacker for llm.ArXiv, abs/2405.05610","venue":null,"work_id":"c508d87d-a1a4-41a7-9f3a-88b5586575f3","year":2025},"citing_paper":{"arxiv_id":"2604.08608","last_updated":"2026-04-20T18:30:51Z","snapshot_observed_at":"2026-08-08T15:27:48.651466Z","submitted_at":"2026-04-08T18:19:03Z","title":"Semantic Intent Fragmentation: A Single-Shot Compositional Attack on Multi-Agent AI Pipelines","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-10T17:40:23.128451Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2604.08608"},"observation_digest":"sha256:a5bc3888683e0e133bea155ebb09dfed1256de105dd5a6e62b8e03811fb4ce47","observation_id":"fdc31f6e-ac29-4963-953e-afaf3589f2e0","resolution":{"observed_at":"2026-05-11T06:20:58.872351Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":"2405.05610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-07-04T16:39:57.683325Z","title":"Chain of attack: a semantic-driven contextual multi-turn at- tacker for llm.ArXiv, abs/2405.05610","venue":null,"work_id":"c508d87d-a1a4-41a7-9f3a-88b5586575f3","year":2025},"citing_paper":{"arxiv_id":"2604.24082","last_updated":"2026-04-27T06:12:43Z","snapshot_observed_at":"2026-07-06T23:10:12.016186Z","submitted_at":"2026-04-27T06:12:43Z","title":"Jailbreaking Frontier Foundation Models Through Intention Deception","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-08T03:17:51.039062Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2604.24082"},"observation_digest":"sha256:fc93ded9fbbdd17fce70faf8552476a3da9c71eb67dece3472d329fe4fdf47f4","observation_id":"014648a1-cf18-4e5a-8a89-6c6a07e3fa49","resolution":{"observed_at":"2026-05-11T22:11:13.955361Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":"2405.05610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-07-04T16:39:57.683325Z","title":"Chain of attack: a semantic-driven contextual multi-turn at- tacker for llm.ArXiv, abs/2405.05610","venue":null,"work_id":"c508d87d-a1a4-41a7-9f3a-88b5586575f3","year":2025},"citing_paper":{"arxiv_id":"2605.10386","last_updated":"2026-05-11T11:28:03Z","snapshot_observed_at":"2026-07-30T05:21:48.152751Z","submitted_at":"2026-05-11T11:28:03Z","title":"GuardAD: Safeguarding Autonomous Driving MLLMs via Markovian Safety Logic","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-05-12T05:17:42.003708Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2605.10386"},"observation_digest":"sha256:ecd7dc3c20ff4ff56482a687d9c85fbe5182feeb2b7589dcbf7630f9268d5e72","observation_id":"dfa8d4f8-7c3d-4794-8383-8f08ec79232e","resolution":{"observed_at":"2026-05-12T05:21:27.509506Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":"2405.05610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-07-04T16:39:57.683325Z","title":"Chain of attack: a semantic-driven contextual multi-turn at- tacker for llm.ArXiv, abs/2405.05610","venue":null,"work_id":"c508d87d-a1a4-41a7-9f3a-88b5586575f3","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:1bb032707401e867e301a3a08f26a00f03627a51759caf619f22c0a91b99fe4f","observation_id":"a2794631-2020-44a7-bc1d-6273e39d35e2","resolution":{"observed_at":"2026-05-13T01:27:02.453117Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":"2405.05610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-07-04T16:39:57.683325Z","title":"Chain of attack: a semantic-driven contextual multi-turn at- tacker for llm.ArXiv, abs/2405.05610","venue":null,"work_id":"c508d87d-a1a4-41a7-9f3a-88b5586575f3","year":2025},"citing_paper":{"arxiv_id":"2606.24267","last_updated":"2026-07-14T05:22:07Z","snapshot_observed_at":"2026-08-02T08:24:58.918165Z","submitted_at":"2026-06-23T07:52:22Z","title":"Pigeonholing: how bad prompts hurt models, causing collapse and mistakes","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-26T00:22:34.367119Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2606.24267"},"observation_digest":"sha256:e252d4c131fe04954bc33a7edcf37032d3536705d3d2d4216abebe9f0c73610e","observation_id":"79f1b20d-34a7-4b69-aa8a-90704baa9dab","resolution":{"observed_at":"2026-07-04T16:39:57.685031Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-07-15T10:35:09.399899Z","title":"Both solutions pass the tests. We label the model’s solution as 1 if it also defines a behavior for every permutation of the string, and 0 for any other solution. 1# Question 2","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.24267","last_updated":"2026-07-14T05:22:07Z","snapshot_observed_at":"2026-08-02T08:24:58.918165Z","submitted_at":"2026-06-23T07:52:22Z","title":"Pigeonholing: how bad prompts hurt models, causing collapse and mistakes","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-15T10:35:09.399899Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2606.24267"},"observation_digest":"sha256:9a7b7f1c9b287f47e0040d7e20cff9fc063243a4b66ba283fd2c304285399632","observation_id":"fa834262-f8e9-43b6-af8a-60932e2c9d14","resolution":{"observed_at":"2026-07-15T10:35:09.399899Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-07-14T06:40:17.865408Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11151","last_updated":"2026-07-13T06:46:56Z","snapshot_observed_at":"2026-07-16T23:19:13.693221Z","submitted_at":"2026-07-13T06:46:56Z","title":"AMT-X: Phase-Structured Multi-Turn Red-Teaming with Checklist-Gated Evaluation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-14T06:40:17.865408Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2607.11151"},"observation_digest":"sha256:ad34ab54c1f7dbbf7ac481d8430ccfdd2e5987eae3c92fa79ce8763671ea6f6f","observation_id":"32c6c29b-d91b-46d5-bce7-6f2b86d08ed7","resolution":{"observed_at":"2026-07-14T06:40:17.865408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-08-02T05:24:41.591181Z","title":"Chain of attack: a semantic-driven contextual multi-turn attacker for llm, 2024b","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13394","last_updated":"2026-07-15T02:43:16Z","snapshot_observed_at":"2026-08-09T12:24:55.156152Z","submitted_at":"2026-07-15T02:43:16Z","title":"GFlowRL: Scaling Distribution-Matching RL to Large Language Models","version":1},"reference_index":1459,"source":"pdf_text","source_observed_at":"2026-08-02T05:24:41.591181Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2607.13394"},"observation_digest":"sha256:d4fe28c27417d8bc6ce343d14d3d8ea8c0260f2eec52683141acbb514cff1857","observation_id":"77d14e7c-18df-4b12-a7eb-6e6daf1965b4","resolution":{"observed_at":"2026-08-02T05:24:41.591181Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-07-30T20:11:00.858023Z","title":"arXiv preprint arXiv:2405.05610 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-07T10:24:58.276069Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.858023Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:6dfe77aba3546aa7e42b8146c093bf1749d6d0d4db28f3600dc085d5adcd43d1","observation_id":"bc1cc635-b8c1-421b-90e9-9363af1ad12d","resolution":{"observed_at":"2026-07-30T20:11:00.858023Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2405.05610/citation-record","integrity":"/paper/2405.05610/integrity","json":"/paper/2405.05610/citation-record.json","paper":"/paper/2405.05610"},"outbound":[],"paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-09T11:56:35.464055Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 18 inbound Pith citation observations for arXiv:2405.05610."}