{"as_of":"2026-08-13T03:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0f3444da22d01084854dc6c99dff4757dd9b963a9a13cc0e8a5af45a64809efd","coverage":[{"denominator":40,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":40,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T15:00:14.332766Z","state":"measured"},{"denominator":44,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":44,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T22:17:42.668642Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.14738","snapshot_observed_at":"2026-08-11T22:17:42.668642Z","title":"Universal and context-independent triggers for precise control of llm outputs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.03679","last_updated":"2025-09-01T19:04:20Z","snapshot_observed_at":"2026-08-12T01:39:06.003533Z","submitted_at":"2024-12-04T19:20:32Z","title":"Evaluating Language Models as Synthetic Data Generators","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-11T22:17:42.668642Z"},"links":{"cited_paper":"/paper/2411.14738","citing_paper":"/paper/2412.03679"},"observation_digest":"sha256:8de888a1ae9abb2fba4bea61f878dfc20b5b2d1819f980aee16731b2f2d8aefb","observation_id":"b48413b9-c263-4357-9b4b-423464317c1b","resolution":{"observed_at":"2026-08-11T22:17:42.668642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"cited_work":{"arxiv_id":"2411.14738","doi":"10.48550/arxiv.2411.14738","metadata_source":"arxiv_reference","pith_arxiv_id":"2411.14738","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Universal and context-independent triggers for precise control of llm outputs","venue":"arXiv (Cornell University)","work_id":"136facdf-f814-4304-b573-aec7b80bdd7a","year":2024},"citing_paper":{"arxiv_id":"2504.20472","last_updated":"2026-04-09T06:57:42Z","snapshot_observed_at":"2026-08-11T00:18:02.376995Z","submitted_at":"2025-04-29T07:13:53Z","title":"Robustness via Referencing: Defending against Prompt Injection Attacks by Referencing the Executed Instruction","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-22T19:10:55.009810Z"},"links":{"cited_paper":"/paper/2411.14738","citing_paper":"/paper/2504.20472"},"observation_digest":"sha256:795086dd08579fb4f089460f6d271034e25a0f65c94b8961be006583a3716b74","observation_id":"e76b5078-6df0-4a1a-bdee-4d8595648c8d","resolution":{"observed_at":"2026-05-22T19:11:58.021520Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"cited_work":{"arxiv_id":"2411.14738","doi":"10.48550/arxiv.2411.14738","metadata_source":"arxiv_reference","pith_arxiv_id":"2411.14738","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Universal and context-independent triggers for precise control of llm outputs","venue":"arXiv (Cornell University)","work_id":"136facdf-f814-4304-b573-aec7b80bdd7a","year":2024},"citing_paper":{"arxiv_id":"2606.07539","last_updated":"2026-04-29T17:39:36Z","snapshot_observed_at":"2026-08-02T12:30:34.186010Z","submitted_at":"2026-04-29T17:39:36Z","title":"Prompt Governance? On Governing Technologies Governed by Natural Language","version":1},"reference_index":202,"source":"pdf_text","source_observed_at":"2026-07-01T08:17:10.481202Z"},"links":{"cited_paper":"/paper/2411.14738","citing_paper":"/paper/2606.07539"},"observation_digest":"sha256:3dcaf9e52421d3299018047d7c60ba8fa7ff21690823a3456aab1c54a529c18a","observation_id":"ede7cbed-c01c-4a23-a8b9-479048fe8d54","resolution":{"observed_at":"2026-07-01T08:25:32.852835Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.14738","snapshot_observed_at":"2026-08-01T11:38:20.754753Z","title":"Universal and context-independent triggers for precise control of llm outputs,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19837","last_updated":"2026-07-22T07:20:27Z","snapshot_observed_at":"2026-08-10T05:49:29.427618Z","submitted_at":"2026-07-22T07:20:27Z","title":"Know Your Agent: Reconnaissance-Driven Pentesting of AI Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T11:38:20.754753Z"},"links":{"cited_paper":"/paper/2411.14738","citing_paper":"/paper/2607.19837"},"observation_digest":"sha256:8c3d1d376bddd568d804880c431a1ab48772b4d7628fb4df9736f34eb8744a94","observation_id":"617e5efd-51f7-4608-ba58-8137230741e6","resolution":{"observed_at":"2026-08-01T11:38:20.754753Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2411.14738/citation-record","integrity":"/paper/2411.14738/integrity","json":"/paper/2411.14738/citation-record.json","paper":"/paper/2411.14738"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-12T15:00:13.973036Z","title":"GPT-4 Technical Report","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:13.973036Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:a2245a09f99be28d91edbc1d9e255ca49ac50f39325e8e1205e8bb82d9be3138","observation_id":"ea46f740-3083-412f-babf-c4ac407ec7a5","resolution":{"observed_at":"2026-08-12T15:00:13.973036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:00:15.689329Z","title":null,"venue":null,"work_id":"0b537bd1-180f-46d0-9fcf-31785e70c3c4","year":2017},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:13.980720Z"},"links":{"citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:aecb073043d0072e2778e65e5206c4466daf072d0489d4684698700c82d343c2","observation_id":"ceaf84e8-4f81-4754-aa31-12397168f81b","resolution":{"observed_at":"2026-08-12T15:00:15.694425Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-08-12T12:29:45.113982Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-12T15:00:13.988070Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:13.988070Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:77780faf9439bba322fb87565b966f820494c321eb4ceb416cbae52038e1fd85","observation_id":"93f1d166-17e3-4b23-9cfb-9c3017462153","resolution":{"observed_at":"2026-08-12T15:00:13.988070Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-08-10T16:40:37.411115Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-12T15:00:14.000149Z","title":"The Llama 3 Herd of Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.000149Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:1b88cf4fe73a5b6d31ed470f7ddf71827ecd5a71d8e653f660df3dfec490cffc","observation_id":"8f789eb0-bac2-4151-831c-c9939897a796","resolution":{"observed_at":"2026-08-12T15:00:14.000149Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.06751","last_updated":"2018-05-24T16:43:45Z","snapshot_observed_at":"2026-08-09T04:03:23.171418Z","submitted_at":"2017-12-19T02:15:19Z","title":"HotFlip: White-Box Adversarial Examples for Text Classification","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.06751","snapshot_observed_at":"2026-08-12T15:00:14.007423Z","title":"HotFlip: White-Box Adversarial Examples for Text Classification","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.007423Z"},"links":{"cited_paper":"/paper/1712.06751","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:24428fc648964898d9489d4f66ff23f14c9e7a3f46da78845af387b4872b9661","observation_id":"ac5ea2b2-afda-4d9a-934e-c1ffc6cc8dee","resolution":{"observed_at":"2026-08-12T15:00:14.007423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14923","last_updated":"2024-10-22T00:53:48Z","snapshot_observed_at":"2026-08-12T22:19:42.025331Z","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14923","snapshot_observed_at":"2026-08-12T15:00:14.020558Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.020558Z"},"links":{"cited_paper":"/paper/2410.14923","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:81446fdd84469e76b7591e831a6b9bbd6acb84e096d393e6be179245425ebd37","observation_id":"7c7e1f4b-cc74-465c-a073-47852cc6e5dd","resolution":{"observed_at":"2026-08-12T15:00:14.020558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-12T15:00:14.030455Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.030455Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:f4131d28c32bda439ebe9ccbd1fd52cbc441453fcbff76181874baa69bec6d51","observation_id":"0e8044f5-fea4-4d2b-86c2-effa2ae9a732","resolution":{"observed_at":"2026-08-12T15:00:14.030455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14020","last_updated":"2024-02-21T18:59:13Z","snapshot_observed_at":"2026-08-06T09:19:29.384394Z","submitted_at":"2024-02-21T18:59:13Z","title":"Coercing LLMs to do and reveal (almost) anything","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.14020","snapshot_observed_at":"2026-08-12T15:00:14.039657Z","title":"Coercing LLMs to do and reveal (almost) anything","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.039657Z"},"links":{"cited_paper":"/paper/2402.14020","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:2c2e0fdea8ec8320a5faff2b5c1e54f7d92cca2e8836832021cac58d72b54936","observation_id":"c42c014b-6220-4ea6-8a3c-29afe667ebba","resolution":{"observed_at":"2026-08-12T15:00:14.039657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.13733","last_updated":"2021-04-15T17:43:43Z","snapshot_observed_at":"2026-08-11T10:07:49.426481Z","submitted_at":"2021-04-15T17:43:43Z","title":"Gradient-based Adversarial Attacks against Text Transformers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.13733","snapshot_observed_at":"2026-08-12T15:00:14.048194Z","title":"Gradient-based Adversarial Attacks against Text Transformers","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.048194Z"},"links":{"cited_paper":"/paper/2104.13733","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:918244403db666113ee5d0e1f14ad11033f2a9c7ad46bd253ab73de97125584e","observation_id":"d1c591a9-437f-4d01-875d-2987e13891a2","resolution":{"observed_at":"2026-08-12T15:00:14.048194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12329","last_updated":"2024-12-07T23:09:49Z","snapshot_observed_at":"2026-08-12T14:09:38.842783Z","submitted_at":"2024-02-19T18:01:36Z","title":"Query-Based Adversarial Prompt Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12329","snapshot_observed_at":"2026-08-12T15:00:14.056445Z","title":"Query-based Adversarial Prompt Generation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.056445Z"},"links":{"cited_paper":"/paper/2402.12329","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:79287c9d73dab955fd2e9fe3425bf4937a16cb56ef3d05078a43cf8b1a7b44a7","observation_id":"50d75404-4507-4061-9aeb-1358ca09aded","resolution":{"observed_at":"2026-08-12T15:00:14.056445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.06823","last_updated":"2025-06-13T02:24:21Z","snapshot_observed_at":"2026-08-13T00:09:58.050980Z","submitted_at":"2024-05-10T21:52:34Z","title":"PLeak: Prompt Leaking Attacks against Large Language Model Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.06823","snapshot_observed_at":"2026-08-12T15:00:14.064152Z","title":"PLeak: Prompt Leaking Attacks against Large Language Model Applications","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.064152Z"},"links":{"cited_paper":"/paper/2405.06823","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:1eca1728fecaa5ca6ccb33627de1bdcac9be77a99a65992d1cccbbc869383f2a","observation_id":"fd1a8d26-fe0a-43e5-ae38-709c77b35240","resolution":{"observed_at":"2026-08-12T15:00:14.064152Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00515","last_updated":"2024-11-10T22:02:27Z","snapshot_observed_at":"2026-07-29T20:40:25.374189Z","submitted_at":"2024-06-01T17:48:15Z","title":"A Survey on Large Language Models for Code Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00515","snapshot_observed_at":"2026-08-12T15:00:14.070391Z","title":"A Survey on Large Language Models for Code Generation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.070391Z"},"links":{"cited_paper":"/paper/2406.00515","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:70ce4b3e1822f6e8ee7fa49a30b4879e307a88e5706c6c0526526ba0d5a0e2fe","observation_id":"e3136544-5010-4aaf-ac09-43d14797c9be","resolution":{"observed_at":"2026-08-12T15:00:14.070391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:00:15.665897Z","title":"Automatically Auditing Large Language Models via Discrete Optimization","venue":null,"work_id":"cf95b025-7ee8-4522-8322-d227ed88decd","year":2023},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.076604Z"},"links":{"citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:0e59b5f0bbdd69fccb874e620431a1dac9a224a7f8fce107862fd9bd91d33a62","observation_id":"e8c40798-619b-48bd-a0eb-861b8d6af3c8","resolution":{"observed_at":"2026-08-12T15:00:15.675230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:00:15.626780Z","title":"Making a SOTA Adversarial Attack on LLMs 38x Faster.https://blog.haizelabs.com/posts/ acg/, 2024","venue":null,"work_id":"61b7da38-f1e8-47eb-8ebe-038050b0f147","year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.085181Z"},"links":{"citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:d1d2568744576b3d91740cc6c775eb9c46ab2c218aa8ce954fc44d883cbad1a1","observation_id":"9650219b-7a56-420b-bc35-7fbeef02ad85","resolution":{"observed_at":"2026-08-12T15:00:15.642248Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:00:15.588676Z","title":"Rouge: A Package for Automatic Evaluation of Summaries","venue":null,"work_id":"b0044b29-df8b-46dd-8d92-c54e1cf69e95","year":2004},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.097970Z"},"links":{"citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:1a467f0a9d237387a337763ca375b5138dea87f85d3825a9878b97094befe245","observation_id":"35a2ce37-5816-48e3-8c12-d0a416f6b4c9","resolution":{"observed_at":"2026-08-12T15:00:15.604392Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.03172","last_updated":"2023-11-20T23:09:34Z","snapshot_observed_at":"2026-07-06T15:51:12.179086Z","submitted_at":"2023-07-06T17:54:11Z","title":"Lost in the Middle: How Language Models Use Long Contexts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.03172","snapshot_observed_at":"2026-08-12T15:00:14.104333Z","title":"Lost in the Middle: How Language Models Use Long Contexts","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.104333Z"},"links":{"cited_paper":"/paper/2307.03172","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:a0397fecc8f6464787aa7ac411c51c26d2397b3c58c6e47c6724ce8c132936c0","observation_id":"0da94260-2103-466c-9de0-ad1843abbbcf","resolution":{"observed_at":"2026-08-12T15:00:14.104333Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05295","last_updated":"2025-04-22T05:20:39Z","snapshot_observed_at":"2026-08-12T22:31:22.205885Z","submitted_at":"2024-10-03T17:59:01Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05295","snapshot_observed_at":"2026-08-12T15:00:14.113322Z","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.113322Z"},"links":{"cited_paper":"/paper/2410.05295","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:aaf574c2b827eba13f3526f3ca951aae9e8eb0cb4b99360fa5a993cfcdeb0b42","observation_id":"44f4d0ea-5a36-4aad-b621-1140d5bbc435","resolution":{"observed_at":"2026-08-12T15:00:14.113322Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:00:15.561543Z","title":"Biases in Large Language Models: Origins, Inventory, and Discussion","venue":null,"work_id":"082f60c3-8aab-44ec-969c-88f6ad5860d5","year":2023},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.123303Z"},"links":{"citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:c93242b5fcb2299d6bcedac754f83b9ec4afea64dfab80f7742b7aebd4988886","observation_id":"b36030cd-e2ac-45e4-9103-a8e1508ccd9c","resolution":{"observed_at":"2026-08-12T15:00:15.569269Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:00:15.524306Z","title":"The OIG Dataset","venue":null,"work_id":"9219fe75-9783-4744-9cf5-49fc6cad9704","year":2023},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.131309Z"},"links":{"citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:8afeadb7309da25cbb5b65d943de6c195743a4cade8ea1508a663a14f29a6578","observation_id":"2f021887-f716-4b52-b8a0-9c8a5b2557d7","resolution":{"observed_at":"2026-08-12T15:00:15.531326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16873","last_updated":"2025-06-02T18:59:01Z","snapshot_observed_at":"2026-08-13T00:25:07.154522Z","submitted_at":"2024-04-21T22:18:13Z","title":"AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16873","snapshot_observed_at":"2026-08-12T15:00:14.139010Z","title":"AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.139010Z"},"links":{"cited_paper":"/paper/2404.16873","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:1fc37367170dd518cd0a520ab2f65409fcc36250ba94393f438b871e4665f6e1","observation_id":"73afde9b-95ea-439a-97dc-beba9c605eed","resolution":{"observed_at":"2026-08-12T15:00:14.139010Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.03277","last_updated":"2023-04-06T17:58:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-06T17:58:09Z","title":"Instruction Tuning with GPT-4","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.03277","snapshot_observed_at":"2026-08-12T15:00:14.145795Z","title":"Instruction Tuning with GPT-4","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.145795Z"},"links":{"cited_paper":"/paper/2304.03277","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:fcc156045bf85adf7f099bd04c966f09232219150568d9e6c5c64aad1d0f4b65","observation_id":"1641d366-5424-425a-b596-247017ceb30e","resolution":{"observed_at":"2026-08-12T15:00:14.145795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:00:15.491582Z","title":null,"venue":null,"work_id":"d05493c4-c2f6-4fc3-b009-66b5c662aec9","year":2023},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.156216Z"},"links":{"citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:53478005ae1f1e922c93ae807ae7fa1e223d6b50b5c3ff307e98963e0ec19cf3","observation_id":"b9b53e8c-ff55-4d6e-980c-a278b2e148c5","resolution":{"observed_at":"2026-08-12T15:00:15.501982Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13691","last_updated":"2024-11-09T20:00:07Z","snapshot_observed_at":"2026-08-12T22:20:49.564427Z","submitted_at":"2024-10-17T15:55:36Z","title":"Jailbreaking LLM-Controlled Robots","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13691","snapshot_observed_at":"2026-08-12T15:00:14.165257Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.165257Z"},"links":{"cited_paper":"/paper/2410.13691","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:447ea43c51d7fc5888cbfbabea8cf76dc84ec2e45c3c3cdd0f3b06d15d1fef6f","observation_id":"99bce508-91f5-40f1-99c7-6c8fd6fdc591","resolution":{"observed_at":"2026-08-12T15:00:14.165257Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:00:14.172140Z","title":"Mathematical discoveries from program search with large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.172140Z"},"links":{"citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:2ceb68827cf9029f18b9aa94cb2b0dc0d9c623bc3899f288c09b287bf047bb22","observation_id":"be6e0687-5986-41c9-922f-daf465d9d945","resolution":{"observed_at":"2026-08-12T15:00:14.172140Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16822","last_updated":"2024-12-11T18:07:25Z","snapshot_observed_at":"2026-08-11T19:39:56.425657Z","submitted_at":"2024-02-26T18:47:27Z","title":"Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Prompts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16822","snapshot_observed_at":"2026-08-12T15:00:14.178227Z","title":"Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Prompts","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.178227Z"},"links":{"cited_paper":"/paper/2402.16822","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:36e4b396d824dbf86c0df9f94f01895d0c9b0931d55612b839b83d66ccb80e8a","observation_id":"a8a1d384-00f6-415e-8c86-8681e629eba9","resolution":{"observed_at":"2026-08-12T15:00:14.178227Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.13136","last_updated":"2024-01-23T23:12:09Z","snapshot_observed_at":"2026-07-06T17:19:39.669611Z","submitted_at":"2024-01-23T23:12:09Z","title":"The Language Barrier: Dissecting Safety Challenges of LLMs in Multilingual Contexts","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.13136","snapshot_observed_at":"2026-08-12T15:00:14.185048Z","title":"The Language Barrier: Dissecting Safety Challenges of LLMs in Multilingual Contexts","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.185048Z"},"links":{"cited_paper":"/paper/2401.13136","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:897a54a085e9a3aed6c3549a0449ae1f9a701af6eeb36f409bdac426bc3b82d8","observation_id":"9babf24f-e280-46eb-bc8c-e74a7f9aa013","resolution":{"observed_at":"2026-08-12T15:00:14.185048Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.15980","last_updated":"2020-11-07T05:33:35Z","snapshot_observed_at":"2026-08-05T14:17:34.026911Z","submitted_at":"2020-10-29T22:54:00Z","title":"AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.15980","snapshot_observed_at":"2026-08-12T15:00:14.194243Z","title":"AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.194243Z"},"links":{"cited_paper":"/paper/2010.15980","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:21b789b3a10af059137e41d96104803ce4479c52b3162591680f4db42cd68ec9","observation_id":"a06352ee-5b22-4263-ac22-f10169f04f99","resolution":{"observed_at":"2026-08-12T15:00:14.194243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.11061","last_updated":"2024-08-07T19:32:59Z","snapshot_observed_at":"2026-08-12T23:07:00.482135Z","submitted_at":"2024-08-07T19:32:59Z","title":"StructuredRAG: JSON Response Formatting with Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.11061","snapshot_observed_at":"2026-08-12T15:00:14.206962Z","title":"StructuredRAG: JSON Response Formatting with Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.206962Z"},"links":{"cited_paper":"/paper/2408.11061","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:9b24d7c5a82c9b6651fdb130a5b27895a1172547b146db505e9316f7fff978da","observation_id":"35d336ff-8071-459b-b569-e865e999d667","resolution":{"observed_at":"2026-08-12T15:00:14.206962Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:00:15.425538Z","title":"Ben Thompson, and Michael Sklar","venue":null,"work_id":"bbc42c69-172e-4b3d-b106-f927e6ec8069","year":2023},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.217798Z"},"links":{"citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:6e9d866afebddae06d6d81113176f00298423e5a0ba2162da1ac050ce88463f8","observation_id":"9aae8774-f23e-4715-8eb6-12e93613f29b","resolution":{"observed_at":"2026-08-12T15:00:15.436668Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.16727","last_updated":"2024-09-25T08:23:46Z","snapshot_observed_at":"2026-08-12T22:37:59.609356Z","submitted_at":"2024-09-25T08:23:46Z","title":"RoleBreak: Character Hallucination as a Jailbreak Attack in Role-Playing Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.16727","snapshot_observed_at":"2026-08-12T15:00:14.245049Z","title":"Role- Break: Character Hallucination as a Jailbreak Attack in Role-Playing Systems","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.245049Z"},"links":{"cited_paper":"/paper/2409.16727","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:b928f5ee03ca670a1d0df813f4e24e9f49c3a1d547a23df9f84379d284865b2e","observation_id":"3440e775-aa96-4ab7-b1bc-49295f27df8e","resolution":{"observed_at":"2026-08-12T15:00:14.245049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:00:14.253313Z","title":"Solving olympiad geometry without human demonstrations","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.253313Z"},"links":{"citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:12d4da9836efe6efb429956156c4fd19b245c883d38ccdeb88b0d161fd582072","observation_id":"880f8d3f-0b18-40fa-b814-168825894c7b","resolution":{"observed_at":"2026-08-12T15:00:14.253313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:00:15.384319Z","title":"Adversarial Attacks on LLMs","venue":null,"work_id":"f497bb95-5669-484a-82d0-a0a84dba41f7","year":2023},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.264368Z"},"links":{"citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:fa92f89081a1916baacb3c69a86b288f6194bbed41092494c7b2bbee6fb1f7d1","observation_id":"bcfaaa0f-e955-4027-ba10-bed91477e0a7","resolution":{"observed_at":"2026-08-12T15:00:15.390488Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.08155","last_updated":"2023-10-03T20:47:10Z","snapshot_observed_at":"2026-08-08T22:28:26.004138Z","submitted_at":"2023-08-16T05:57:52Z","title":"AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.08155","snapshot_observed_at":"2026-08-12T15:00:14.274767Z","title":"AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.274767Z"},"links":{"cited_paper":"/paper/2308.08155","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:ca0e9d275bd34441c6b377f68e3ccb10939ebeed98924fd0e66b156c398c8087","observation_id":"47db38c8-c849-4f94-91ca-32700e316a31","resolution":{"observed_at":"2026-08-12T15:00:14.274767Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:00:15.358878Z","title":"An LLM can Fool Itself: A Prompt-Based Adversarial Attack","venue":null,"work_id":"3eaf24c0-4204-4d23-9981-67cf8bac6db5","year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.281840Z"},"links":{"citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:549e2cfcd2a35be0d95e09217938edf4b68113782dc580ec66612ad5729bac19","observation_id":"00058a13-17ea-4734-9ec7-4842e9bc1e2c","resolution":{"observed_at":"2026-08-12T15:00:15.365741Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.10671","last_updated":"2024-09-10T13:25:53Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-15T12:35:42Z","title":"Qwen2 Technical Report","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.10671","snapshot_observed_at":"2026-08-12T15:00:14.289286Z","title":"Qwen2 Technical Report","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.289286Z"},"links":{"cited_paper":"/paper/2407.10671","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:d65be99f29ae75bda07991e85d67fae731f02f73b029181cde9eb7c97599856a","observation_id":"ebe69a69-653b-4705-a527-d71a1e0f9431","resolution":{"observed_at":"2026-08-12T15:00:14.289286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-12T15:00:14.294392Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.294392Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:48f35934fadaf7631f2bec648a32328886a72f196d7eee606dc3cc994f83ecf0","observation_id":"294f2f07-f0a7-4ec7-b3a7-b18ef7f01364","resolution":{"observed_at":"2026-08-12T15:00:14.294392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.11282","last_updated":"2024-07-19T14:16:35Z","snapshot_observed_at":"2026-08-12T23:21:33.930449Z","submitted_at":"2024-07-15T23:41:11Z","title":"Uncertainty is Fragile: Manipulating Uncertainty in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.11282","snapshot_observed_at":"2026-08-12T15:00:14.302708Z","title":"Uncertainty is Fragile: Manipulating Uncertainty in Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.302708Z"},"links":{"cited_paper":"/paper/2407.11282","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:eb60289b122c57c07d8a1e09a6809ab4fd2f767bec7f0a1e433beb6ebb2a188d","observation_id":"f0a69176-74bc-4f57-b198-95dca1856bb1","resolution":{"observed_at":"2026-08-12T15:00:14.302708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06373","last_updated":"2024-01-23T22:46:12Z","snapshot_observed_at":"2026-08-10T11:13:59.778209Z","submitted_at":"2024-01-12T16:13:24Z","title":"How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.06373","snapshot_observed_at":"2026-08-12T15:00:14.315201Z","title":"How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.315201Z"},"links":{"cited_paper":"/paper/2401.06373","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:bac503dda59259af58f4fc7d0ce073fd9c7bd099d0db87473d8cdeeb2ab4d2fe","observation_id":"c56295b2-3f01-4aa6-98dc-105c15639e45","resolution":{"observed_at":"2026-08-12T15:00:14.315201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T15:00:15.308621Z","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","venue":null,"work_id":"137137fc-5cda-4a03-bdf7-2bb772aa4c3d","year":2024},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.323516Z"},"links":{"citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:babf2ecef45cbadbd838064c1ddb90c6047a72c88110f7f40431e9e0e007ccd6","observation_id":"b3cd7789-069a-4114-8888-f1db13ebdd5e","resolution":{"observed_at":"2026-08-12T15:00:15.320828Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-12T15:00:14.332766Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T15:00:14.332766Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2411.14738"},"observation_digest":"sha256:8f33d256651138d0e36df0325b1936ac30734ab68489bca1b2f7491a82580263","observation_id":"3d8d0a79-36f7-4dbe-b31e-bc3839c438ed","resolution":{"observed_at":"2026-08-12T15:00:14.332766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2411.14738","last_updated":"2024-11-22T05:17:18Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-12T17:46:18.521822Z","submitted_at":"2024-11-22T05:17:18Z","title":"Universal and Context-Independent Triggers for Precise Control of LLM Outputs"},"reference_resolution":{"displayed":40,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":31,"verified_exact":0,"verified_fuzzy":9},"total_outbound_references":40},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 40 of 40 outbound references and 4 inbound Pith citation observations for arXiv:2411.14738."}