{"as_of":"2026-08-07T10:28:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:bf818c60af7f2dcc4c45fea155cc22a9bb0b9d69fd14f1b101271f4e4d659a7f","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":16,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":16,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":16,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":16,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:15:01.139782Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T08:06:48.241191Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":"2410.13886","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-07-02T08:06:48.241191Z","title":"Thomas Kuntz, Agatha Duzan, Hao Zhao, Francesco Croce, Zico Kolter, Nicolas Flammarion, and Maksym Andriushchenko","venue":null,"work_id":"cb52e713-1b92-4742-b861-b66f06159bcc","year":2025},"citing_paper":{"arxiv_id":"2501.14249","last_updated":"2026-02-20T04:23:01Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-24T05:27:46Z","title":"Humanity's Last Exam","version":10},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-10T18:40:50.139345Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2501.14249"},"observation_digest":"sha256:d84e315f71dfd0cfb5ca634bd2ac742ee69e84a7b9222cb3daab146a34e180ae","observation_id":"1f5deb70-d016-4da3-993c-b3740f09e8d6","resolution":{"observed_at":"2026-05-10T18:40:50.378768Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":"2410.13886","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-07-02T08:06:48.241191Z","title":"Thomas Kuntz, Agatha Duzan, Hao Zhao, Francesco Croce, Zico Kolter, Nicolas Flammarion, and Maksym Andriushchenko","venue":null,"work_id":"cb52e713-1b92-4742-b861-b66f06159bcc","year":2025},"citing_paper":{"arxiv_id":"2505.10924","last_updated":"2026-04-29T05:56:22Z","snapshot_observed_at":"2026-07-06T21:24:49.058355Z","submitted_at":"2025-05-16T06:56:42Z","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","version":4},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-22T15:22:11.766850Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2505.10924"},"observation_digest":"sha256:576e99bfdec40bbd537c907c36fa7a581c015869589e71bd562bf8c4cce44df9","observation_id":"8b52a7d5-405b-487e-8c8d-cc4f842f5f41","resolution":{"observed_at":"2026-05-22T15:24:57.839929Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-08-07T00:15:01.139782Z","title":"Kumar, E","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14922","last_updated":"2025-06-24T19:55:23Z","snapshot_observed_at":"2026-08-07T04:49:42.432527Z","submitted_at":"2025-06-17T19:08:02Z","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T00:15:01.139782Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2506.14922"},"observation_digest":"sha256:36c9a450684247c9a5a470af48c243fc13878235bdcafe73e967dbf6ab004a8c","observation_id":"8790198c-cfc5-4bb9-84bc-f284d8110a6b","resolution":{"observed_at":"2026-08-07T00:15:01.139782Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-08-06T23:59:57.578866Z","title":"R., Chang, E., Robinson, V ., Hendryx, S., Zhou, S., Fredrik- son, M., et al","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.17318","last_updated":"2025-06-18T14:29:02Z","snapshot_observed_at":"2026-08-06T23:52:05.545407Z","submitted_at":"2025-06-18T14:29:02Z","title":"Context manipulation attacks : Web agents are susceptible to corrupted memory","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T23:59:57.578866Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2506.17318"},"observation_digest":"sha256:e92c75e01813020a7e2c17720c84cb08085802c279900b6077db8ce73c756752","observation_id":"7ab7792c-e789-4154-a3b6-519601f1212d","resolution":{"observed_at":"2026-08-06T23:59:57.578866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-08-06T21:34:43.602465Z","title":"Refusal- trained llms are easily jailbroken as browser agents,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-07T01:32:39.568333Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:43.602465Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:162889412ab920848cb078859eea8969c90d3d8fa943de5dc97fc4aeff066b18","observation_id":"e5d4f524-359c-4948-a729-9195ce0ab1da","resolution":{"observed_at":"2026-08-06T21:34:43.602465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-08-06T21:22:59.013316Z","title":"Refusal-trained llms are easily jailbroken as browser agents","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.02977","last_updated":"2025-06-30T21:37:00Z","snapshot_observed_at":"2026-08-06T21:17:51.075779Z","submitted_at":"2025-06-30T21:37:00Z","title":"LLMs are Capable of Misaligned Behavior Under Explicit Prohibition and Surveillance","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T21:22:59.013316Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2507.02977"},"observation_digest":"sha256:952a5e03c27dd868acebec29137f906ba73123b8c23bfc53ec3e89c88efc097c","observation_id":"caddabb4-294c-48d2-b1e5-78e4f70d6b39","resolution":{"observed_at":"2026-08-06T21:22:59.013316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":"2410.13886","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-07-02T08:06:48.241191Z","title":"Thomas Kuntz, Agatha Duzan, Hao Zhao, Francesco Croce, Zico Kolter, Nicolas Flammarion, and Maksym Andriushchenko","venue":null,"work_id":"cb52e713-1b92-4742-b861-b66f06159bcc","year":2025},"citing_paper":{"arxiv_id":"2510.10073","last_updated":"2026-04-14T02:53:37Z","snapshot_observed_at":"2026-07-06T22:32:22.953630Z","submitted_at":"2025-10-11T07:18:12Z","title":"SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-18T08:14:51.102085Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2510.10073"},"observation_digest":"sha256:72e235bc5c2f9bfc1cb313d2963b5d9fe0a79e68429bb45d65d72db1e97a9ae4","observation_id":"9d841a2f-ec22-4551-9981-9270bd8ee601","resolution":{"observed_at":"2026-05-18T08:16:06.580695Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-08-04T10:16:02.320578Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10943","last_updated":"2026-06-01T06:19:17Z","snapshot_observed_at":"2026-08-04T10:15:59.435150Z","submitted_at":"2025-10-13T02:56:42Z","title":"The Social Cost of Intelligence: Emergence, Propagation, and Amplification of Stereotypical Bias in Multi-Agent Systems","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-04T10:16:02.320578Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2510.10943"},"observation_digest":"sha256:15258892924d36736d4d3be8e2308905d2b88daf38bac6218a0b0bd7c7040fe1","observation_id":"dc631708-1152-4254-a5d9-e407302c48c9","resolution":{"observed_at":"2026-08-04T10:16:02.320578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-08-04T07:06:38.033013Z","title":"Refusal-trained llms are easily jailbroken as browser agents.arXiv preprint arXiv:2410.13886, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-06T02:11:06.061181Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.033013Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:cfd8756b9d39f396c56d22a5b2c9b753fad2237e3c39429bdc948590d95278e4","observation_id":"c50f0a73-6ec3-451d-93d6-fc8011508c09","resolution":{"observed_at":"2026-08-04T07:06:38.033013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":"2410.13886","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-07-02T08:06:48.241191Z","title":"Thomas Kuntz, Agatha Duzan, Hao Zhao, Francesco Croce, Zico Kolter, Nicolas Flammarion, and Maksym Andriushchenko","venue":null,"work_id":"cb52e713-1b92-4742-b861-b66f06159bcc","year":2025},"citing_paper":{"arxiv_id":"2602.17753","last_updated":"2026-05-06T13:43:46Z","snapshot_observed_at":"2026-08-06T12:13:42.632788Z","submitted_at":"2026-02-19T18:57:43Z","title":"The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systems","version":2},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-05-15T20:41:49.137745Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2602.17753"},"observation_digest":"sha256:269e2a431f47728d342b29214d3cd466cd1abe7cc45afb3d9ee9601359d2d47b","observation_id":"f57a6247-9876-4af1-8268-35de4ccb737b","resolution":{"observed_at":"2026-05-15T20:46:36.186400Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-08-02T18:10:38.060471Z","title":"Refusal-trained LLMs are easily jailbroken as browser agents.arXiv preprint arXiv:2410.13886, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2603.15727","last_updated":"2026-07-16T04:17:50Z","snapshot_observed_at":"2026-08-06T07:26:31.059854Z","submitted_at":"2026-03-16T17:55:43Z","title":"AgentWorm: Self-Propagating Attacks Across LLM Agent Ecosystems","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-02T18:10:38.060471Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2603.15727"},"observation_digest":"sha256:406f626d2f99ea4bc1dcb2a244d03ee58276a8267481cf20c992111eeac82474","observation_id":"d7802825-59ec-4bb1-9b3c-187c789e5b4f","resolution":{"observed_at":"2026-08-02T18:10:38.060471Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":"2410.13886","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-07-02T08:06:48.241191Z","title":"Thomas Kuntz, Agatha Duzan, Hao Zhao, Francesco Croce, Zico Kolter, Nicolas Flammarion, and Maksym Andriushchenko","venue":null,"work_id":"cb52e713-1b92-4742-b861-b66f06159bcc","year":2025},"citing_paper":{"arxiv_id":"2604.04759","last_updated":"2026-04-06T15:27:05Z","snapshot_observed_at":"2026-07-06T22:53:37.357996Z","submitted_at":"2026-04-06T15:27:05Z","title":"Your Agent, Their Asset: A Real-World Safety Analysis of OpenClaw","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-10T19:20:52.845052Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2604.04759"},"observation_digest":"sha256:caa71ee65e489c0b9170871f820be14524b14f065a6ea4d0259e32ba3d71a547","observation_id":"38f9d78d-96bd-4d95-a5fc-19938868ad31","resolution":{"observed_at":"2026-05-10T23:05:49.008995Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":"2410.13886","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-07-02T08:06:48.241191Z","title":"Thomas Kuntz, Agatha Duzan, Hao Zhao, Francesco Croce, Zico Kolter, Nicolas Flammarion, and Maksym Andriushchenko","venue":null,"work_id":"cb52e713-1b92-4742-b861-b66f06159bcc","year":2025},"citing_paper":{"arxiv_id":"2606.05233","last_updated":"2026-06-03T01:21:59Z","snapshot_observed_at":"2026-08-03T04:28:49.622809Z","submitted_at":"2026-06-03T01:21:59Z","title":"Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-28T06:22:03.848058Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2606.05233"},"observation_digest":"sha256:d1556c32396b82d14e49a5ff0d8a2302d807e24e93b584f55463c7185e83319a","observation_id":"cc48aef2-9002-442e-b1c0-0a439ee6f23e","resolution":{"observed_at":"2026-07-02T08:06:48.242777Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-07-11T22:40:37.839133Z","title":"Refusal-trained llms are easily jailbroken as browser agents, 2024,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.03968","last_updated":"2026-07-09T20:41:05Z","snapshot_observed_at":"2026-07-15T23:17:49.591501Z","submitted_at":"2026-07-04T17:57:05Z","title":"Refused in Chat, Written in Code: Workflow-Level Jailbreak Construction in IDE Coding Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-11T22:40:37.839133Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2607.03968"},"observation_digest":"sha256:5b3488994cb3035c4dfa063a1b4a656de71796c01c4c54b59c8240dd3190e74c","observation_id":"a428daee-0475-4eda-9ca2-16350193fbf6","resolution":{"observed_at":"2026-07-11T22:40:37.839133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-07-13T07:01:49.222325Z","title":"Refusal-trained llms are easily jailbroken as browser agents, 2024,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.03968","last_updated":"2026-07-09T20:41:05Z","snapshot_observed_at":"2026-07-15T23:17:49.591501Z","submitted_at":"2026-07-04T17:57:05Z","title":"Refused in Chat, Written in Code: Workflow-Level Jailbreak Construction in IDE Coding Agents","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-13T07:01:49.222325Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2607.03968"},"observation_digest":"sha256:07b5ae08f2e643f4d2947fe7542623ed157ce23b97cda3f9e8350c7b6db7bad1","observation_id":"1e38be30-be24-4324-9734-978f2d789f73","resolution":{"observed_at":"2026-07-13T07:01:49.222325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13886","snapshot_observed_at":"2026-08-02T02:35:37.029971Z","title":"R., Chang, E., Robinson, V ., Hendryx, S., Zhou, S., Fredrik- son, M., et al","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14285","last_updated":"2026-07-15T18:48:49Z","snapshot_observed_at":"2026-08-02T07:29:05.818671Z","submitted_at":"2026-07-15T18:48:49Z","title":"ToolAlignBench: Investigating Alignment Conflicts in Tool-Calling Enabled LLMs","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-02T02:35:37.029971Z"},"links":{"cited_paper":"/paper/2410.13886","citing_paper":"/paper/2607.14285"},"observation_digest":"sha256:3ceb5cce6bd4a49fa88a1ad2d4473816338a9396d92a5b0db52862ac8f68f0dc","observation_id":"06c5071e-9eaf-4bc1-8498-5c5b9cf01bf6","resolution":{"observed_at":"2026-08-02T02:35:37.029971Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2410.13886/citation-record","integrity":"/paper/2410.13886/integrity","json":"/paper/2410.13886/citation-record.json","paper":"/paper/2410.13886"},"outbound":[],"paper":{"arxiv_id":"2410.13886","last_updated":"2024-10-21T18:06:58Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T19:35:30.732080Z","submitted_at":"2024-10-11T06:54:12Z","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 16 inbound Pith citation observations for arXiv:2410.13886."}