{"as_of":"2026-08-07T15:27:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d06c808f42d7cc79c70261f1da50e246fa89d603e364c1eced8fba8b10c88e6f","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":18,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":18,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":18,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":18,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:23:02.718736Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T15:37:06.720828Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-07T15:23:02.718736Z","title":"Voice Jailbreak Attacks Against GPT-4o // arXiv preprint arXiv:2405.19103","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.15406","last_updated":"2025-05-21T11:47:47Z","snapshot_observed_at":"2026-08-07T15:16:06.018745Z","submitted_at":"2025-05-21T11:47:47Z","title":"Audio Jailbreak: An Open Comprehensive Benchmark for Jailbreaking Large Audio-Language Models","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T15:23:02.718736Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2505.15406"},"observation_digest":"sha256:780c490f31038e1a9700bab52f96c5c67ddda4640491f72eb76bc30b9b7eb586","observation_id":"70fada26-c9f2-497b-be8e-ad7fecc34ae4","resolution":{"observed_at":"2026-08-07T15:23:02.718736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2505.15957","last_updated":"2026-04-26T17:05:53Z","snapshot_observed_at":"2026-07-06T21:28:06.120576Z","submitted_at":"2025-05-21T19:17:29Z","title":"Towards Holistic Evaluation of Large Audio-Language Models: A Comprehensive Survey","version":4},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-22T13:32:57.771753Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2505.15957"},"observation_digest":"sha256:3c46b76e93b62595b3ab42f6ca811647d2bfb790fd06fb6b2aac2ce4b43e36de","observation_id":"2b7c339f-5559-4736-a794-3a0a1bb9be4b","resolution":{"observed_at":"2026-05-22T13:34:53.261884Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-07T14:55:02.131857Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16957","last_updated":"2025-05-22T17:36:33Z","snapshot_observed_at":"2026-08-07T14:50:15.925875Z","submitted_at":"2025-05-22T17:36:33Z","title":"Invisible Prompts, Visible Threats: Malicious Font Injection in External Resources for Large Language Models","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T14:55:02.131857Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2505.16957"},"observation_digest":"sha256:5be10339ef2ae2f9b19d6da5060e74eca93e270ff1a6a681a9a771dda69d61e6","observation_id":"3ed05453-4c27-4690-87b9-58065ff5fdd9","resolution":{"observed_at":"2026-08-07T14:55:02.131857Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-07T14:27:05.448953Z","title":"V oice jailbreak attacks against gpt-4o,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18864","last_updated":"2025-05-24T20:46:36Z","snapshot_observed_at":"2026-08-07T14:22:06.437933Z","submitted_at":"2025-05-24T20:46:36Z","title":"Audio Jailbreak Attacks: Exposing Vulnerabilities in SpeechGPT in a White-Box Framework","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T14:27:05.448953Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2505.18864"},"observation_digest":"sha256:8c84880d15cede59cec4541d55d49efdc6ee927165f811a9aa485e40cdf6dced","observation_id":"410cd221-4ffe-405a-bedf-a2119c9870f6","resolution":{"observed_at":"2026-08-07T14:27:05.448953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-07T05:51:08.260580Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06971","last_updated":"2025-06-12T14:47:31Z","snapshot_observed_at":"2026-08-07T07:20:17.397323Z","submitted_at":"2025-06-08T02:43:46Z","title":"Chain-of-Code Collapse: Reasoning Failures in LLMs via Adversarial Prompting in Code Generation","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T05:51:08.260580Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2506.06971"},"observation_digest":"sha256:619b95fba4ce5b163a45134b89951c8119bfa76dbbe955623fbd38cabacabec1","observation_id":"965cd3c1-0dec-41e0-a7f7-cdc7e40210b8","resolution":{"observed_at":"2026-08-07T05:51:08.260580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-07T04:08:50.912160Z","title":"arXiv preprint arXiv:2405.19103 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.11521","last_updated":"2025-06-13T07:22:36Z","snapshot_observed_at":"2026-08-07T12:06:46.005829Z","submitted_at":"2025-06-13T07:22:36Z","title":"Investigating Vulnerabilities and Defenses Against Audio-Visual Attacks: A Comprehensive Survey Emphasizing Multimodal Models","version":1},"reference_index":96,"source":"arxiv_source","source_observed_at":"2026-08-07T04:08:50.912160Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2506.11521"},"observation_digest":"sha256:30b05bfe966608fdd3247881e3157c0418ea00ac4016be1d992a3027c74e4c38","observation_id":"6baf7137-5bd1-4e5e-aa2d-df76fc0c6270","resolution":{"observed_at":"2026-08-07T04:08:50.912160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-04T17:46:19.679388Z","title":"V oice jailbreak attacks against GPT-4o,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.10682","last_updated":"2025-09-12T20:26:16Z","snapshot_observed_at":"2026-08-04T21:00:53.508626Z","submitted_at":"2025-09-12T20:26:16Z","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","version":1},"reference_index":271,"source":"pdf_text","source_observed_at":"2026-08-04T17:46:19.679388Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2509.10682"},"observation_digest":"sha256:02ca488f053229525a0c3a00cf3e765d22c5a1d1f630b7d7e70af3fd14b6d1f5","observation_id":"b0d5d361-12e8-418f-aab9-59ac1f2a6cca","resolution":{"observed_at":"2026-08-04T17:46:19.679388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-08-03T06:23:43.490072Z","title":"” do anything now”: Characterizing and evaluating in- the-wild jailbreak prompts on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.02557","last_updated":"2026-05-29T23:48:47Z","snapshot_observed_at":"2026-08-06T12:17:33.602297Z","submitted_at":"2026-01-30T14:23:50Z","title":"The Alignment Curse: Modality Alignment Supercharges Audio Attacks via Text Transfer","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T06:23:43.490072Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2602.02557"},"observation_digest":"sha256:97f88d18a7caf20a7a49659396519fd1ecbfad02e876e5c53ab22b59f00ea8f5","observation_id":"0c3ab26a-ad32-4cf4-8c3e-4cdc8e6ff0a7","resolution":{"observed_at":"2026-08-03T06:23:43.490072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2604.11309","last_updated":"2026-04-13T11:12:30Z","snapshot_observed_at":"2026-07-30T17:13:57.164751Z","submitted_at":"2026-04-13T11:12:30Z","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-10T16:07:31.602378Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2604.11309"},"observation_digest":"sha256:1d5c5597a98a9d262deb4a2cfd6806140074999ff07e2fc42ba57ec644d35f6f","observation_id":"08866f49-e05d-4f42-adb9-b37978d0474f","resolution":{"observed_at":"2026-05-11T09:16:04.343350Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-12T20:09:57.922788Z","title":"V oice Jailbreak Attacks Against GPT-4o,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.14603","last_updated":"2026-06-29T06:44:20Z","snapshot_observed_at":"2026-07-12T20:09:54.804124Z","submitted_at":"2026-04-16T04:21:32Z","title":"A Synonymous Variational Perspective on the Rate-Distortion-Perception Tradeoff","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-12T20:09:57.922788Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2604.14603"},"observation_digest":"sha256:b6208e486a6f3177505f0a901bda79b8874abcfbcafd975106b2f74709ba2290","observation_id":"8c116bdc-d90c-40e3-a04b-cfe6b9e286fa","resolution":{"observed_at":"2026-07-12T20:09:57.922788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2604.14604","last_updated":"2026-04-16T04:22:11Z","snapshot_observed_at":"2026-08-01T20:57:25.785838Z","submitted_at":"2026-04-16T04:22:11Z","title":"Hijacking Large Audio-Language Models via Context-Agnostic and Imperceptible Auditory Prompt Injection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-10T11:32:10.126062Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2604.14604"},"observation_digest":"sha256:ead75c3aba6d465fe55ba52d4a99e35f0dd585bd33f63f6f3201d27ee5412668","observation_id":"6e26a09d-a93e-4f42-a798-0a862136b3d8","resolution":{"observed_at":"2026-05-10T11:35:18.907426Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2604.16659","last_updated":"2026-04-17T19:28:07Z","snapshot_observed_at":"2026-07-06T23:03:57.199731Z","submitted_at":"2026-04-17T19:28:07Z","title":"Benign Fine-Tuning Breaks Safety Alignment in Audio LLMs","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-10T08:01:25.938248Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2604.16659"},"observation_digest":"sha256:7d59266b5149a6ff5dd7e0e28a572400021588ac6fd9d7868df714b79a1b23b9","observation_id":"95887362-f0ac-4f9a-aad8-4e89094a2da4","resolution":{"observed_at":"2026-05-10T08:02:24.870743Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2605.18168","last_updated":"2026-05-18T10:10:31Z","snapshot_observed_at":"2026-07-06T23:29:04.241654Z","submitted_at":"2026-05-18T10:10:31Z","title":"Acoustic Interference: A New Paradigm Weaponizing Acoustic Latent Semantic for Universal Jailbreak against Large Audio Language Models","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-05-20T09:48:43.319804Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2605.18168"},"observation_digest":"sha256:a414bbad477bf487e511ada7f82b6bb26ed0b454f53e7258158c0e4b73b3248f","observation_id":"281488dd-40dd-4284-ad84-4a804d9a1652","resolution":{"observed_at":"2026-05-20T09:53:15.983463Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2605.20519","last_updated":"2026-05-21T17:49:53Z","snapshot_observed_at":"2026-07-06T23:31:03.878152Z","submitted_at":"2026-05-19T21:39:52Z","title":"Codec-Robust Attacks on Audio LLMs","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-21T06:43:52.735211Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2605.20519"},"observation_digest":"sha256:47183dcd10b12ff74a9952f2637a02d9b23f70696a3376a65d1089a1a0829103","observation_id":"1883e4af-ae56-4c2c-aad0-fa0d20270566","resolution":{"observed_at":"2026-05-21T06:44:00.660382Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2605.20519","last_updated":"2026-05-21T17:49:53Z","snapshot_observed_at":"2026-07-06T23:31:03.878152Z","submitted_at":"2026-05-19T21:39:52Z","title":"Codec-Robust Attacks on Audio LLMs","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-25T05:44:46.831360Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2605.20519"},"observation_digest":"sha256:752c96620a6616b3bdb53dd0e304a0724fd1196d87007e45c3e2e0a0faa0d016","observation_id":"8c921932-00f4-44db-b64c-e9b33879e2a3","resolution":{"observed_at":"2026-05-25T05:45:23.741364Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2605.30031","last_updated":"2026-05-28T14:53:27Z","snapshot_observed_at":"2026-08-06T21:11:00.357889Z","submitted_at":"2026-05-28T14:53:27Z","title":"Audio Jailbreaks in Large Audio-Language Models: Taxonomy, Attack-Defense Analysis, and Cost-Aware Evaluation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-29T05:44:05.762261Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2605.30031"},"observation_digest":"sha256:0e1a5af2b62f7b407a63d714491412986a310f18d73ca9f03371d493a58ba848","observation_id":"a62f8546-bce1-42e3-b903-202792d0ab9c","resolution":{"observed_at":"2026-06-29T05:53:09.549390Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2606.04483","last_updated":"2026-06-03T06:01:47Z","snapshot_observed_at":"2026-07-06T23:44:37.797802Z","submitted_at":"2026-06-03T06:01:47Z","title":"Off-Distribution Voices: Fanfiction Subgenres as Universal Vernacular Jailbreaks for Aligned LLMs","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-06-28T06:37:51.354823Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2606.04483"},"observation_digest":"sha256:d4958f3b9b731531db396f95fa7614d4fbc0d6bf0c6a786b22fa8b8c60eb5b9c","observation_id":"f40075db-2086-412e-b21c-5049a5f0a90c","resolution":{"observed_at":"2026-07-02T07:46:46.545430Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o","version":1},"cited_work":{"arxiv_id":"2405.19103","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.19103","snapshot_observed_at":"2026-07-02T15:37:06.720828Z","title":"V oice jailbreak attacks against gpt-4o","venue":null,"work_id":"44816201-2362-4fca-af49-324ece1cc860","year":2022},"citing_paper":{"arxiv_id":"2606.06037","last_updated":"2026-06-08T08:49:38Z","snapshot_observed_at":"2026-08-03T09:38:32.203749Z","submitted_at":"2026-06-04T11:31:38Z","title":"SpeechJBB: Probing Safety Alignment and Comprehension in Large Audio Language Models under Code-Switched Speech","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-27T23:44:42.188662Z"},"links":{"cited_paper":"/paper/2405.19103","citing_paper":"/paper/2606.06037"},"observation_digest":"sha256:c4cc232fb73477e4bac942c0d05b472c08b851f5e1c259e0f07abf94e5e031b7","observation_id":"e41e2630-4f6f-4b15-8d84-b5e362eb1c17","resolution":{"observed_at":"2026-07-02T15:37:06.722323Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2405.19103/citation-record","integrity":"/paper/2405.19103/integrity","json":"/paper/2405.19103/citation-record.json","paper":"/paper/2405.19103"},"outbound":[],"paper":{"arxiv_id":"2405.19103","last_updated":"2024-05-29T14:07:44Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T18:22:01.301152Z","submitted_at":"2024-05-29T14:07:44Z","title":"Voice Jailbreak Attacks Against GPT-4o"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 18 inbound Pith citation observations for arXiv:2405.19103."}