{"as_of":"2026-08-19T06:54:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9cc386019794c9c8c8d81838ad4bbe3b282acf364b5bbfd5422db8ef474104e4","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":13,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":13,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":13,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":13,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T11:34:05.990799Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T03:59:33.724943Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","snapshot_observed_at":"2026-08-16T13:31:54.315862Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","version":6},"cited_work":{"arxiv_id":"2407.16205","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2407.16205","snapshot_observed_at":"2026-07-04T03:59:33.724943Z","title":"Llms can be dangerous reasoners: Analyzing-based jailbreak attack on large language models","venue":null,"work_id":"05e6d8a8-206a-463d-9663-27cf7130a2a2","year":2024},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-08-18T22:44:13.666151Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2407.16205","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:0d7f2ff71791783f7b66a240e487e96e84c20b1f539114917c70c62df9d607ed","observation_id":"62e381a7-d7ac-4001-a4b1-173b4eacfd10","resolution":{"observed_at":"2026-05-23T04:42:33.756304Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","snapshot_observed_at":"2026-08-16T13:31:54.315862Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.16205","snapshot_observed_at":"2026-08-16T11:34:05.990799Z","title":"arXiv preprint arXiv:2407.16205 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.00010","last_updated":"2025-04-21T16:54:35Z","snapshot_observed_at":"2026-08-18T20:49:22.036588Z","submitted_at":"2025-04-21T16:54:35Z","title":"Jailbreak Detection in Clinical Training LLMs Using Feature-Based Predictive Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-16T11:34:05.990799Z"},"links":{"cited_paper":"/paper/2407.16205","citing_paper":"/paper/2505.00010"},"observation_digest":"sha256:4c6b1523e1170bd23129909b91aa97e071881b1a18b5f0a8cb02160023cf2e9f","observation_id":"a0768a78-8f61-48a5-96e8-71df50420631","resolution":{"observed_at":"2026-08-16T11:34:05.990799Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","snapshot_observed_at":"2026-08-16T13:31:54.315862Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.16205","snapshot_observed_at":"2026-08-16T04:33:06.331926Z","title":"Figure it out: Analyzing-based jailbreak attack on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.00976","last_updated":"2025-05-02T03:37:52Z","snapshot_observed_at":"2026-08-18T14:37:59.707738Z","submitted_at":"2025-05-02T03:37:52Z","title":"Attack and defense techniques in large language models: A survey and new perspectives","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-16T04:33:06.331926Z"},"links":{"cited_paper":"/paper/2407.16205","citing_paper":"/paper/2505.00976"},"observation_digest":"sha256:390b7ee11c1ccd8e64f286c84e5a1867538de74e6ce746c17a5b907857e362f1","observation_id":"8e69b909-4b90-43a4-b48f-d95eb8043776","resolution":{"observed_at":"2026-08-16T04:33:06.331926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","snapshot_observed_at":"2026-08-16T13:31:54.315862Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.16205","snapshot_observed_at":"2026-08-07T00:57:13.739840Z","title":"Figure it out: Analyzing-based jailbreak attack on large language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.12430","last_updated":"2025-07-11T02:01:54Z","snapshot_observed_at":"2026-08-17T15:28:10.749198Z","submitted_at":"2025-06-14T10:03:17Z","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T00:57:13.739840Z"},"links":{"cited_paper":"/paper/2407.16205","citing_paper":"/paper/2506.12430"},"observation_digest":"sha256:85cee54480afe6e16f9a213e9a33ae9b4d4ea48ca0df08373150bdda32edccb0","observation_id":"8e69c3d7-c8e4-4647-9ce5-9575afcc51e9","resolution":{"observed_at":"2026-08-07T00:57:13.739840Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","snapshot_observed_at":"2026-08-16T13:31:54.315862Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.16205","snapshot_observed_at":"2026-08-15T19:45:09.884636Z","title":"Figure it out: Analyzing-based jailbreak attack on large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.15170","last_updated":"2025-08-01T10:42:39Z","snapshot_observed_at":"2026-08-16T15:33:53.252333Z","submitted_at":"2025-06-18T06:33:19Z","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","version":3},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-15T19:45:09.884636Z"},"links":{"cited_paper":"/paper/2407.16205","citing_paper":"/paper/2506.15170"},"observation_digest":"sha256:de9576de3fce99305a1f69368bd7a9d8af8ea0950dfd8dd4a36c59b5b1105563","observation_id":"b4870ba2-6428-4aa8-a4ed-43cac6505500","resolution":{"observed_at":"2026-08-15T19:45:09.884636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","snapshot_observed_at":"2026-08-16T13:31:54.315862Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.16205","snapshot_observed_at":"2026-08-06T04:47:25.569012Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-15T06:04:21.097898Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":164,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.569012Z"},"links":{"cited_paper":"/paper/2407.16205","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:337e3a1de432974ed148c91648781ecd19ac6e8c3ccf00cc20346be814b0921a","observation_id":"15df08a3-0d60-4721-a34c-f1373d27ad13","resolution":{"observed_at":"2026-08-06T04:47:25.569012Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","snapshot_observed_at":"2026-08-16T13:31:54.315862Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.16205","snapshot_observed_at":"2026-08-05T20:31:41.015324Z","title":"Fig- ure it out: Analyzing-based jailbreak attack on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-18T11:11:26.991132Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:41.015324Z"},"links":{"cited_paper":"/paper/2407.16205","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:8af515689c0f0a7e8eb45f0794ee0a7731df556df85b01aaeb10366033b6b21a","observation_id":"5062fa6e-774e-4d32-9460-93e018b24fd0","resolution":{"observed_at":"2026-08-05T20:31:41.015324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","snapshot_observed_at":"2026-08-16T13:31:54.315862Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.16205","snapshot_observed_at":"2026-08-05T13:11:20.512876Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.00918","last_updated":"2025-08-31T16:04:02Z","snapshot_observed_at":"2026-08-17T07:44:34.867746Z","submitted_at":"2025-08-31T16:04:02Z","title":"PREE: Towards Harmless and Adaptive Fingerprint Editing in Large Language Models via Knowledge Prefix Enhancement","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-05T13:11:20.512876Z"},"links":{"cited_paper":"/paper/2407.16205","citing_paper":"/paper/2509.00918"},"observation_digest":"sha256:c2d860cce51e35962713595d4fa0aee6b5f238cd0dfa16f8e74fe94219079558","observation_id":"b41c7ee3-1bf3-41a8-a6d1-b759011756af","resolution":{"observed_at":"2026-08-05T13:11:20.512876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","snapshot_observed_at":"2026-08-16T13:31:54.315862Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.16205","snapshot_observed_at":"2026-08-04T17:46:19.463818Z","title":"Figure it out: Analyzing-based jailbreak attack on large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.10682","last_updated":"2025-09-12T20:26:16Z","snapshot_observed_at":"2026-08-18T22:31:48.171780Z","submitted_at":"2025-09-12T20:26:16Z","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","version":1},"reference_index":184,"source":"pdf_text","source_observed_at":"2026-08-04T17:46:19.463818Z"},"links":{"cited_paper":"/paper/2407.16205","citing_paper":"/paper/2509.10682"},"observation_digest":"sha256:31a4de2638a0339005415853043baf290c2271f7a0bdd3bf504d0d40f28ef015","observation_id":"5d4ede41-a89c-47ec-9f15-20327f702cef","resolution":{"observed_at":"2026-08-04T17:46:19.463818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","snapshot_observed_at":"2026-08-16T13:31:54.315862Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.16205","snapshot_observed_at":"2026-08-04T09:25:47.079044Z","title":"Figure it out: Analyzing-based jailbreak attack on large language models.CoRR, abs/2407.16205, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-14T22:20:04.981358Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"reference_index":109,"source":"pdf_text","source_observed_at":"2026-08-04T09:25:47.079044Z"},"links":{"cited_paper":"/paper/2407.16205","citing_paper":"/paper/2510.15476"},"observation_digest":"sha256:76fbbe28ad82eb5ac227080da05dcb88e6524afbe457171c2b105c55190fd917","observation_id":"252c28f0-96b8-4524-9e30-297406ecffa3","resolution":{"observed_at":"2026-08-04T09:25:47.079044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","snapshot_observed_at":"2026-08-16T13:31:54.315862Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","version":6},"cited_work":{"arxiv_id":"2407.16205","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2407.16205","snapshot_observed_at":"2026-07-04T03:59:33.724943Z","title":"Llms can be dangerous reasoners: Analyzing-based jailbreak attack on large language models","venue":null,"work_id":"05e6d8a8-206a-463d-9663-27cf7130a2a2","year":2024},"citing_paper":{"arxiv_id":"2606.19755","last_updated":"2026-06-18T03:35:32Z","snapshot_observed_at":"2026-08-15T16:37:02.214477Z","submitted_at":"2026-06-18T03:35:32Z","title":"SafeSpec: Fast and Safe LLM via Dynamic Reflective Sampling","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-26T17:23:06.382761Z"},"links":{"cited_paper":"/paper/2407.16205","citing_paper":"/paper/2606.19755"},"observation_digest":"sha256:a35526af4721ffc1bfb0057ac45685cd9f8a7d0aa1ee220af7f66a891b12e2e2","observation_id":"ad3d1759-fda7-4e84-8f05-d9e000b89a1e","resolution":{"observed_at":"2026-07-04T03:59:33.726538Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","snapshot_observed_at":"2026-08-16T13:31:54.315862Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.16205","snapshot_observed_at":"2026-07-30T20:11:00.934085Z","title":"arXiv preprint arXiv:2407.16205 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-13T00:52:31.605575Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":104,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.934085Z"},"links":{"cited_paper":"/paper/2407.16205","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:03e1420d3a0c14ded7c437fb068a6ad239b0cc6583896b08caa034e3a1f5bcc3","observation_id":"7c6a2151-4ae2-41bf-b554-84ba6e4f3f47","resolution":{"observed_at":"2026-07-30T20:11:00.934085Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","snapshot_observed_at":"2026-08-16T13:31:54.315862Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.16205","snapshot_observed_at":"2026-07-30T19:40:13.837826Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.26836","last_updated":"2026-07-29T12:26:41Z","snapshot_observed_at":"2026-08-19T04:17:08.807255Z","submitted_at":"2026-07-29T12:26:41Z","title":"Before Agents Speak: Pre-hoc Failure Risk Inference in Multi-Agent Systems","version":1},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-07-30T19:40:13.837826Z"},"links":{"cited_paper":"/paper/2407.16205","citing_paper":"/paper/2607.26836"},"observation_digest":"sha256:c5d497a07340c4881bda0497cd67e54eee33d4e5525cdbddea076ac95f966608","observation_id":"82a81742-335d-4720-b986-e11b2b8fb417","resolution":{"observed_at":"2026-07-30T19:40:13.837826Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2407.16205/citation-record","integrity":"/paper/2407.16205/integrity","json":"/paper/2407.16205/citation-record.json","paper":"/paper/2407.16205"},"outbound":[],"paper":{"arxiv_id":"2407.16205","last_updated":"2025-06-18T02:41:56Z","latest_version":6,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T13:31:54.315862Z","submitted_at":"2024-07-23T06:14:41Z","title":"LLMs can be Dangerous Reasoners: Analyzing-based Jailbreak Attack on Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 13 inbound Pith citation observations for arXiv:2407.16205."}