{"as_of":"2026-08-07T13:19:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:683bec2b689f9b3ef431c04bddccd4ba575d89fbebbf3b3cd7a62fb4c9f6f500","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":30,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":30,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":30,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":30,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:40:20.616360Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T11:57:03.497396Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2410.15362","last_updated":"2026-05-19T04:19:17Z","snapshot_observed_at":"2026-07-06T19:36:36.994783Z","submitted_at":"2024-10-20T11:27:41Z","title":"Faster-GCG: Efficient Discrete Optimization Jailbreak Attacks against Aligned Large Language Models","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-23T19:01:43.922848Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2410.15362"},"observation_digest":"sha256:72d76eb50448b7f4b927227540f78ae43c23a90903724183ff08bf39f887b8dd","observation_id":"7c858d35-d181-418c-8c9d-c5b3bb8c5f06","resolution":{"observed_at":"2026-05-23T19:03:21.364237Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:adc874e75a28fc4280b1ba644606aeaf5a3843e7202fe31d7b93ea658496b9e9","observation_id":"9fb65307-e2e1-4b9c-a6f2-7a32e13f3fd1","resolution":{"observed_at":"2026-05-23T04:42:34.240968Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2503.02574","last_updated":"2026-05-18T17:54:05Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-04T12:55:07Z","title":"LLM-Safety Evaluations Lack Robustness","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-23T01:26:45.402983Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2503.02574"},"observation_digest":"sha256:22775622baab7fb6cae2a20590d9d05634aa2d93922aed30c5fe72c23d3caeeb","observation_id":"305bb6c3-83a5-4452-8785-4ab3efbffebf","resolution":{"observed_at":"2026-05-23T01:27:21.293947Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2505.11548","last_updated":"2026-04-09T01:58:59Z","snapshot_observed_at":"2026-07-06T21:25:13.481613Z","submitted_at":"2025-05-15T08:14:58Z","title":"One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems","version":4},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-22T15:19:08.867224Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2505.11548"},"observation_digest":"sha256:b11a5bfd90a99044edab745e280cd970d10668aa278af4e839d0afc4a1840684","observation_id":"b1c3a59b-97ef-495c-9b59-b656b2d39a48","resolution":{"observed_at":"2026-05-22T15:21:44.807132Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-07T05:40:20.616360Z","title":"Improved techniques for optimization-based jailbreaking on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07402","last_updated":"2025-06-09T03:52:43Z","snapshot_observed_at":"2026-08-07T10:07:41.500171Z","submitted_at":"2025-06-09T03:52:43Z","title":"Beyond Jailbreaks: Revealing Stealthier and Broader LLM Security Risks Stemming from Alignment Failures","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:40:20.616360Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2506.07402"},"observation_digest":"sha256:e351b7ed0f535fd68a81669bc6279fb7714ce6996598cea812382530cb084c5f","observation_id":"72aa392a-d53a-4eb3-8989-88f9158796ad","resolution":{"observed_at":"2026-08-07T05:40:20.616360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-07T04:42:18.651102Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.10095","last_updated":"2025-06-11T18:26:32Z","snapshot_observed_at":"2026-08-07T10:06:58.463807Z","submitted_at":"2025-06-11T18:26:32Z","title":"When Meaning Stays the Same, but Models Drift: Evaluating Quality of Service under Token-Level Behavioral Instability in LLMs","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T04:42:18.651102Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2506.10095"},"observation_digest":"sha256:23819d5fa0de21bd4ecf8c0c8d2463d81fdfd637363fed38a43f7974e833ca28","observation_id":"97915f6a-f7a7-4460-9899-dcd2cf9cb3ee","resolution":{"observed_at":"2026-08-07T04:42:18.651102Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-06T23:20:56.482120Z","title":"Improved techniques for optimization-based jailbreaking on large language models.arXiv preprint arXiv:2405.210182024","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.18543","last_updated":"2026-05-25T10:15:56Z","snapshot_observed_at":"2026-08-06T23:13:30.961405Z","submitted_at":"2025-06-23T11:53:31Z","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T23:20:56.482120Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2506.18543"},"observation_digest":"sha256:685e42c2efa810e830c99aa264f6dcbed9f3644ddfccbbbbeb639e1377261039","observation_id":"d2bfecdd-1356-4824-8494-fac5065e7174","resolution":{"observed_at":"2026-08-06T23:20:56.482120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-06T22:07:03.636792Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.22666","last_updated":"2026-05-30T16:23:21Z","snapshot_observed_at":"2026-08-06T21:58:37.734178Z","submitted_at":"2025-06-27T22:22:00Z","title":"VERA: Variational Inference Framework for Jailbreaking Large Language Models","version":3},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T22:07:03.636792Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2506.22666"},"observation_digest":"sha256:5749e952a058713fc2e1b1df09a93e28b4277f4b13635d92a2dce3936f350cef","observation_id":"6126766f-69e0-4b9e-9aca-6659cfef3d70","resolution":{"observed_at":"2026-08-06T22:07:03.636792Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-05T20:31:31.703450Z","title":"Improved techniques for optimization-based jailbreaking on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-05T20:31:28.198027Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:31.703450Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:1d712a083da2f28dda29fd37f621f57e6e05b18f75e96d5d4c1632252d7b29be","observation_id":"6265bbc8-9c57-46f2-b42d-6d9d0eb65852","resolution":{"observed_at":"2026-08-05T20:31:31.703450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-05T16:00:48.580403Z","title":"Improved techniques for optimization-based jailbreaking on large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19445","last_updated":"2026-06-16T17:34:06Z","snapshot_observed_at":"2026-08-05T21:13:40.763863Z","submitted_at":"2025-08-26T21:36:45Z","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","version":3},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-05T16:00:48.580403Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2508.19445"},"observation_digest":"sha256:4d3d1319595c7f451b8e95892d9685e2ed975e0395fa56428df45143cd2b89c9","observation_id":"bff3f494-da51-43f4-aae2-dc5a9db4d427","resolution":{"observed_at":"2026-08-05T16:00:48.580403Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-04T23:49:31.864821Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:31.864821Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:257f505e387d47367b39cefd39186447f1a9e3f41b9e8cfa36a04f6b62b1f978","observation_id":"e212b26f-8e30-49ac-9c05-5609c0488114","resolution":{"observed_at":"2026-08-04T23:49:31.864821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-04T21:44:12.308523Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07764","last_updated":"2025-09-09T13:59:00Z","snapshot_observed_at":"2026-08-04T21:44:11.122043Z","submitted_at":"2025-09-09T13:59:00Z","title":"AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T21:44:12.308523Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2509.07764"},"observation_digest":"sha256:f5c782ee4bb124ba381fc3f38f9b741a7982fdac0621fe14e3a577db02a368e9","observation_id":"f9fd3744-54fb-4e18-865c-2d0705289715","resolution":{"observed_at":"2026-08-04T21:44:12.308523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2602.14211","last_updated":"2026-06-16T17:33:00Z","snapshot_observed_at":"2026-08-02T23:20:40.869423Z","submitted_at":"2026-02-15T16:09:48Z","title":"SkillJect: Effectively Automating Skill-Based Prompt Injection for Skill-Enabled Agents","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-21T12:46:28.842387Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2602.14211"},"observation_digest":"sha256:8d73f917a3e6177c768a7291753645bdd59c797983e6164f60675c46c4541af4","observation_id":"2fc8e22e-06f5-4508-a2f6-6ce594fdee4a","resolution":{"observed_at":"2026-05-21T12:50:09.389631Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-02T23:20:42.271415Z","title":"Improved tech- niques for optimization-based jailbreaking on large language models.arXiv preprint arXiv:2405.21018, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.14211","last_updated":"2026-06-16T17:33:00Z","snapshot_observed_at":"2026-08-02T23:20:40.869423Z","submitted_at":"2026-02-15T16:09:48Z","title":"SkillJect: Effectively Automating Skill-Based Prompt Injection for Skill-Enabled Agents","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T23:20:42.271415Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2602.14211"},"observation_digest":"sha256:6b5b338a97969e5938f507ec640ecf8be64ca2aacc350b8fbaec09ec28d84d05","observation_id":"fda6857d-5cd5-41c2-ad21-4101d0f7f0bb","resolution":{"observed_at":"2026-08-02T23:20:42.271415Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2604.05498","last_updated":"2026-04-07T06:41:41Z","snapshot_observed_at":"2026-07-06T22:54:12.531121Z","submitted_at":"2026-04-07T06:41:41Z","title":"JailWAM: Jailbreaking World Action Models in Robot Control","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-10T19:22:13.890495Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2604.05498"},"observation_digest":"sha256:297a0d322d1e2565158ffa46930986add2c79c920a983160626a858dbfd30d79","observation_id":"74418ef4-c29e-4c97-89c6-72bb5cfa9d5e","resolution":{"observed_at":"2026-05-10T23:05:48.158122Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2604.10326","last_updated":"2026-04-11T19:19:05Z","snapshot_observed_at":"2026-07-06T22:59:01.129724Z","submitted_at":"2026-04-11T19:19:05Z","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-05-10T15:19:46.920899Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2604.10326"},"observation_digest":"sha256:f45bed86f4d726cc6162bb895e39c0cacd9b4ad60ff99796fa38bbebd56304a4","observation_id":"aa49575c-44d1-48f0-8317-deb12786cfca","resolution":{"observed_at":"2026-05-11T10:46:04.345513Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2604.15717","last_updated":"2026-04-17T05:40:42Z","snapshot_observed_at":"2026-07-06T23:03:12.000381Z","submitted_at":"2026-04-17T05:40:42Z","title":"Into the Gray Zone: Domain Contexts Can Blur LLM Safety Boundaries","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T08:49:45.406458Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2604.15717"},"observation_digest":"sha256:cfb079a8fbb9788800d2a76cb1a699f1b9aa50358a1f686b36d21008f96c84ee","observation_id":"00c1cd55-515c-4691-b73f-f1b158fae6f0","resolution":{"observed_at":"2026-05-10T08:53:04.235190Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2604.19790","last_updated":"2026-04-02T03:38:47Z","snapshot_observed_at":"2026-07-06T23:06:21.774788Z","submitted_at":"2026-04-02T03:38:47Z","title":"Hidden Reliability Risks in Large Language Models: Systematic Identification of Precision-Induced Output Disagreements","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-13T21:59:42.435082Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2604.19790"},"observation_digest":"sha256:0ab3a195b789d513ae4bd4ab12fbc22ca80bdd5eebaf3971ce8347b14cf53bf3","observation_id":"5b830efd-980d-40cd-9118-6bcb01b3df15","resolution":{"observed_at":"2026-05-13T22:03:20.495617Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2604.24082","last_updated":"2026-04-27T06:12:43Z","snapshot_observed_at":"2026-07-06T23:10:12.016186Z","submitted_at":"2026-04-27T06:12:43Z","title":"Jailbreaking Frontier Foundation Models Through Intention Deception","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-08T03:17:51.039062Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2604.24082"},"observation_digest":"sha256:5845b698daffb97f34a11df664872ca959d169875260fc33ab86914007fe84bc","observation_id":"ef4f7c10-ea02-477d-91a9-a7035b603f47","resolution":{"observed_at":"2026-05-11T22:11:13.991238Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2605.00236","last_updated":"2026-04-30T21:15:38Z","snapshot_observed_at":"2026-07-06T23:13:42.661364Z","submitted_at":"2026-04-30T21:15:38Z","title":"Attention Is Where You Attack","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-09T19:54:41.445447Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2605.00236"},"observation_digest":"sha256:52c1a9eb20327f4e06d4ebdb0bcfb45f86f0534cdeb4e890e226cd4988b9ca18","observation_id":"0b3429e7-4997-46b0-8b8d-c869e6211d78","resolution":{"observed_at":"2026-05-11T15:31:05.208137Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2605.21674","last_updated":"2026-05-20T19:31:07Z","snapshot_observed_at":"2026-07-06T23:32:05.693503Z","submitted_at":"2026-05-20T19:31:07Z","title":"Adversarial Reframing: A Framework for Targeted Generation in Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-22T09:35:51.862736Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2605.21674"},"observation_digest":"sha256:17e990d46690c22b3ace83506e9cd8b411bc6c4a1bb50a915008cf59e596e4da","observation_id":"f80b07dc-7d32-49e8-a18e-cd4be1f4a5f1","resolution":{"observed_at":"2026-05-22T09:36:21.033098Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2605.29602","last_updated":"2026-05-28T08:40:34Z","snapshot_observed_at":"2026-07-31T08:03:40.151420Z","submitted_at":"2026-05-28T08:40:34Z","title":"CogniVerse: Revolutionizing Multi-Modal Retrieval-Augmented Generation with Cognitive Reflection and Geometric Reasoning","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-06-29T08:14:20.558527Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2605.29602"},"observation_digest":"sha256:8c80a650adb1b7839aa24af9f3593887b0b97b38486b22bb82cda8a38205ee66","observation_id":"86bb73dd-a8da-453c-aaea-441cff595146","resolution":{"observed_at":"2026-06-29T08:23:15.757226Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2606.05609","last_updated":"2026-06-04T02:31:29Z","snapshot_observed_at":"2026-08-05T14:48:48.513078Z","submitted_at":"2026-06-04T02:31:29Z","title":"SlotGCG: Exploiting the Positional Vulnerability in LLMs for Jailbreak Attacks","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-06-28T01:16:07.252429Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2606.05609"},"observation_digest":"sha256:0ee2e89dd514c082ca26bc340f927c68f61c6909b524b044c7d814156faca3b4","observation_id":"cfd9c796-3e0b-436e-b081-d22582f3da6b","resolution":{"observed_at":"2026-07-02T13:26:59.243117Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2606.15531","last_updated":"2026-06-16T14:29:31Z","snapshot_observed_at":"2026-08-01T19:11:56.873454Z","submitted_at":"2026-06-14T01:18:53Z","title":"Greedy Coordinate Diffusion: Effective and Semantically Coherent Adversarial Attacks via Diffusion Guidance","version":2},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-06-27T04:35:35.594085Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2606.15531"},"observation_digest":"sha256:28c370d590eb3c273d03e158de353b46044c6e38295ae7c35a9aaf7988ad9830","observation_id":"64eae4ca-83f3-40f2-8dcf-582661559c94","resolution":{"observed_at":"2026-07-03T17:08:43.447341Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2606.19887","last_updated":"2026-06-24T07:42:32Z","snapshot_observed_at":"2026-07-06T23:55:05.932014Z","submitted_at":"2026-06-18T07:46:18Z","title":"FinRED: An Expert-Guided Benchmark Generation and Evaluation Framework for Financial LLM Red-Teaming","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-26T17:11:40.088809Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2606.19887"},"observation_digest":"sha256:ccc728ca8c5991bf639db2eca3dd21f1eebc68b2349f5a274187ec2f165f55da","observation_id":"e5c55392-893c-474c-9976-872d14f5395a","resolution":{"observed_at":"2026-07-04T04:09:34.754405Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2606.25476","last_updated":"2026-07-21T11:09:35Z","snapshot_observed_at":"2026-08-06T23:05:07.064301Z","submitted_at":"2026-06-24T07:00:53Z","title":"A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-25T20:58:53.119386Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2606.25476"},"observation_digest":"sha256:d079fa430f3515f380b540e36fedc36b51db6c2fe222a0596976c627cd8e593f","observation_id":"8a15a320-d194-4edd-94f4-015f833f2e53","resolution":{"observed_at":"2026-07-04T19:50:11.159040Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-02T10:16:39.061069Z","title":"arXiv preprint arXiv:2405.21018 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25476","last_updated":"2026-07-21T11:09:35Z","snapshot_observed_at":"2026-08-06T23:05:07.064301Z","submitted_at":"2026-06-24T07:00:53Z","title":"A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-02T10:16:39.061069Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2606.25476"},"observation_digest":"sha256:d78e4d8280889d732f610c04ac5319c0d86e3b9d78b95b94d0b0a3bc28bf9a08","observation_id":"6b83f89d-0a1c-4230-84be-d0a45d9a07bc","resolution":{"observed_at":"2026-08-02T10:16:39.061069Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-07-11T23:20:07.969909Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:c6f2f582193d81796bd114b20e8df983cf0bc2af6999490d0a6567c61cb73a1d","observation_id":"a54c2a52-a9cd-497d-afa7-33e08bda3492","resolution":{"observed_at":"2026-07-09T10:26:11.110965Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":"2405.21018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-07-10T11:57:03.497396Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","venue":"cs.LG","work_id":"5e4ac646-f92e-47a8-b299-00ec4f1960f7","year":2024},"citing_paper":{"arxiv_id":"2607.08180","last_updated":"2026-07-09T07:27:48Z","snapshot_observed_at":"2026-08-06T05:34:27.258366Z","submitted_at":"2026-07-09T07:27:48Z","title":"Out of Sight: Compression-Aware Content Protection against Agentic Crawlers","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-07-10T11:48:08.491407Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2607.08180"},"observation_digest":"sha256:9792924369241869d475f98048c251a257a3e6017676f4f75c4a050b2b91d44e","observation_id":"2023757d-8547-4eb2-9be1-263013a88a7a","resolution":{"observed_at":"2026-07-10T11:57:03.498966Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-01T18:54:55.306378Z","title":"arXiv preprint arXiv:2405.21018 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17152","last_updated":"2026-07-19T09:18:35Z","snapshot_observed_at":"2026-08-05T14:31:41.750601Z","submitted_at":"2026-07-19T09:18:35Z","title":"How Jailbreak Attacks Inform Safety Alignment: A Defender-Centric, Shapley-Based Evaluation of Jailbreak Contributions","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-01T18:54:55.306378Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2607.17152"},"observation_digest":"sha256:889c4a029c8a67893fecd9ea6364264825e750f05972eaa3895a094f1282f0da","observation_id":"ee5f4810-1ec9-4d50-b3aa-eebb2220b798","resolution":{"observed_at":"2026-08-01T18:54:55.306378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2405.21018/citation-record","integrity":"/paper/2405.21018/integrity","json":"/paper/2405.21018/citation-record.json","paper":"/paper/2405.21018"},"outbound":[],"paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 30 inbound Pith citation observations for arXiv:2405.21018."}