{"as_of":"2026-08-13T07:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:11da44a3fcc4d7485e90cc99cdebcb0c36fc9971fefea6cd5353eaceb8deedd1","coverage":[{"denominator":6,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":6,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T14:17:16.019628Z","state":"measured"},{"denominator":6,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":6,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.16730/citation-record","integrity":"/paper/2411.16730/integrity","json":"/paper/2411.16730/citation-record.json","paper":"/paper/2411.16730"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:17:16.128298Z","title":"moral prompts","venue":null,"work_id":"379d9bca-82a5-4857-89af-3c668e257bc8","year":2020},"citing_paper":{"arxiv_id":"2411.16730","last_updated":"2025-03-20T14:48:10Z","snapshot_observed_at":"2026-08-12T14:11:12.456683Z","submitted_at":"2024-11-23T09:32:44Z","title":"\"Moralized\" Multi-Step Jailbreak Prompts: Black-Box Testing of Guardrails in Large Language Models for Verbal Attacks","version":4},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T14:17:15.991152Z"},"links":{"citing_paper":"/paper/2411.16730"},"observation_digest":"sha256:4fb69f7734bc98d36a29f429e3e35b3caaf472b2d14586fea4e4d956e285d7e8","observation_id":"d1f55f04-62f1-4595-bc13-3d1dcbbada96","resolution":{"observed_at":"2026-08-12T14:17:16.132245Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:17:16.114940Z","title":"moral prompt","venue":null,"work_id":"5de05f1c-8c65-4087-b666-4c4eb9836045","year":2024},"citing_paper":{"arxiv_id":"2411.16730","last_updated":"2025-03-20T14:48:10Z","snapshot_observed_at":"2026-08-12T14:11:12.456683Z","submitted_at":"2024-11-23T09:32:44Z","title":"\"Moralized\" Multi-Step Jailbreak Prompts: Black-Box Testing of Guardrails in Large Language Models for Verbal Attacks","version":4},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T14:17:15.996661Z"},"links":{"citing_paper":"/paper/2411.16730"},"observation_digest":"sha256:7e964a7cd1f22622b1035ebd1586d8bb8fca55d2bd8b4143eacd3c6cfc421d0c","observation_id":"0fd67f83-9e59-4386-8fa3-c284181ef328","resolution":{"observed_at":"2026-08-12T14:17:16.119183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:17:16.100442Z","title":null,"venue":null,"work_id":"ba1bb5af-0a7e-40e9-a282-2c9a51b67768","year":2020},"citing_paper":{"arxiv_id":"2411.16730","last_updated":"2025-03-20T14:48:10Z","snapshot_observed_at":"2026-08-12T14:11:12.456683Z","submitted_at":"2024-11-23T09:32:44Z","title":"\"Moralized\" Multi-Step Jailbreak Prompts: Black-Box Testing of Guardrails in Large Language Models for Verbal Attacks","version":4},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T14:17:16.001726Z"},"links":{"citing_paper":"/paper/2411.16730"},"observation_digest":"sha256:fa11982bdc66c09a17d4c183de04a3a6e87e60641ee03b5f2e9140ad6add484e","observation_id":"d0d27ce1-f0e5-464b-b14c-bb5cfb238159","resolution":{"observed_at":"2026-08-12T14:17:16.105402Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:17:16.084281Z","title":"Derived from technical reports published by developers, it can be seen that the above-mentioned large language models adopt different architectural mechanisms","venue":null,"work_id":"f2a36fe7-c818-4bd6-be9d-772c93afa70b","year":2019},"citing_paper":{"arxiv_id":"2411.16730","last_updated":"2025-03-20T14:48:10Z","snapshot_observed_at":"2026-08-12T14:11:12.456683Z","submitted_at":"2024-11-23T09:32:44Z","title":"\"Moralized\" Multi-Step Jailbreak Prompts: Black-Box Testing of Guardrails in Large Language Models for Verbal Attacks","version":4},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T14:17:16.006937Z"},"links":{"citing_paper":"/paper/2411.16730"},"observation_digest":"sha256:b3496dcdea94189c0b7a8bf08141dd64149884de6e26b091fb5fd0d06e23164e","observation_id":"4a34a928-a72b-4249-aed9-d0a96d582d73","resolution":{"observed_at":"2026-08-12T14:17:16.089465Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:17:16.066619Z","title":"Grok-2 Beta The training set data can come from x.AI (X.AI, 2024) which was formerly Twitter","venue":null,"work_id":"74be47b7-061b-4772-bf0e-7a7bbf9d926b","year":2019},"citing_paper":{"arxiv_id":"2411.16730","last_updated":"2025-03-20T14:48:10Z","snapshot_observed_at":"2026-08-12T14:11:12.456683Z","submitted_at":"2024-11-23T09:32:44Z","title":"\"Moralized\" Multi-Step Jailbreak Prompts: Black-Box Testing of Guardrails in Large Language Models for Verbal Attacks","version":4},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T14:17:16.013226Z"},"links":{"citing_paper":"/paper/2411.16730"},"observation_digest":"sha256:e90773df29cdc2383d4794f93248bdd13f218559df6f16d9fa38376d7cbdcfd9","observation_id":"4bccb044-725e-43f5-b014-0cc0db40f57c","resolution":{"observed_at":"2026-08-12T14:17:16.073505Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12934","last_updated":"2024-06-16T22:04:10Z","snapshot_observed_at":"2026-08-12T23:41:35.462428Z","submitted_at":"2024-06-16T22:04:10Z","title":"Current state of LLM Risks and AI Guardrails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12934","snapshot_observed_at":"2026-08-12T14:17:16.019628Z","title":"enterprise middle managers competing for promotion","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.16730","last_updated":"2025-03-20T14:48:10Z","snapshot_observed_at":"2026-08-12T14:11:12.456683Z","submitted_at":"2024-11-23T09:32:44Z","title":"\"Moralized\" Multi-Step Jailbreak Prompts: Black-Box Testing of Guardrails in Large Language Models for Verbal Attacks","version":4},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T14:17:16.019628Z"},"links":{"cited_paper":"/paper/2406.12934","citing_paper":"/paper/2411.16730"},"observation_digest":"sha256:513ea314820e47a67d24eeb4ca03efdc535b6326badf6dc07998f744b27e2ee3","observation_id":"f3fff17e-d194-4044-8d95-f14506fca272","resolution":{"observed_at":"2026-08-12T14:17:16.019628Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2411.16730","last_updated":"2025-03-20T14:48:10Z","latest_version":4,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-12T14:11:12.456683Z","submitted_at":"2024-11-23T09:32:44Z","title":"\"Moralized\" Multi-Step Jailbreak Prompts: Black-Box Testing of Guardrails in Large Language Models for Verbal Attacks"},"reference_resolution":{"displayed":6,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":2,"verified_exact":0,"verified_fuzzy":4},"total_outbound_references":6},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 6 of 6 outbound references and 0 inbound Pith citation observations for arXiv:2411.16730."}