{"as_of":"2026-08-13T10:09:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:00d4f0387fe02c3a96aea133c4a1229acae9135dcfaaa62542e1a3eee10449bb","coverage":[{"denominator":10,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T11:01:58.408847Z","state":"measured"},{"denominator":10,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":10,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.18699/citation-record","integrity":"/paper/2411.18699/integrity","json":"/paper/2411.18699/citation-record.json","paper":"/paper/2411.18699"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2409.03131","last_updated":"2024-09-10T21:53:46Z","snapshot_observed_at":"2026-08-12T22:51:09.399977Z","submitted_at":"2024-09-04T23:45:10Z","title":"Well, that escalated quickly: The Single-Turn Crescendo Attack (STCA)","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.03131","snapshot_observed_at":"2026-08-12T11:01:58.356455Z","title":"Aqrawi and A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18699","last_updated":"2024-11-27T19:09:16Z","snapshot_observed_at":"2026-08-12T10:56:07.729116Z","submitted_at":"2024-11-27T19:09:16Z","title":"An indicator for effectiveness of text-to-image guardrails utilizing the Single-Turn Crescendo Attack (STCA)","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-12T11:01:58.356455Z"},"links":{"cited_paper":"/paper/2409.03131","citing_paper":"/paper/2411.18699"},"observation_digest":"sha256:c308374f612ce84f2d7ffdb75030ed51d347243ed54d45b4ebc8b79aa474190a","observation_id":"e7bbe0e1-bd59-408b-8220-1ad74fc0d17c","resolution":{"observed_at":"2026-08-12T11:01:58.356455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.10848","last_updated":"2025-02-09T16:13:35Z","snapshot_observed_at":"2026-08-12T23:00:42.834015Z","submitted_at":"2024-08-20T13:40:25Z","title":"Perception-guided Jailbreak against Text-to-Image Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.10848","snapshot_observed_at":"2026-08-12T11:01:58.362485Z","title":"Huang, L","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18699","last_updated":"2024-11-27T19:09:16Z","snapshot_observed_at":"2026-08-12T10:56:07.729116Z","submitted_at":"2024-11-27T19:09:16Z","title":"An indicator for effectiveness of text-to-image guardrails utilizing the Single-Turn Crescendo Attack (STCA)","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-12T11:01:58.362485Z"},"links":{"cited_paper":"/paper/2408.10848","citing_paper":"/paper/2411.18699"},"observation_digest":"sha256:f4b563a2c36d5628a60a7800375211d381015544dbbc957f3e0866b1f46deb33","observation_id":"ccbbed2a-0af5-484e-a361-f221f2a23b69","resolution":{"observed_at":"2026-08-12T11:01:58.362485Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T11:01:58.604531Z","title":null,"venue":null,"work_id":"63b888ca-bec3-4204-aff8-50a85837049c","year":2024},"citing_paper":{"arxiv_id":"2411.18699","last_updated":"2024-11-27T19:09:16Z","snapshot_observed_at":"2026-08-12T10:56:07.729116Z","submitted_at":"2024-11-27T19:09:16Z","title":"An indicator for effectiveness of text-to-image guardrails utilizing the Single-Turn Crescendo Attack (STCA)","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-12T11:01:58.367881Z"},"links":{"citing_paper":"/paper/2411.18699"},"observation_digest":"sha256:bc6c94ce59d507f932f649137c53890e7ea6815da9a01787a1ce2bec2874600e","observation_id":"7d7cb5fa-3e61-4ebf-ac15-cfcd84e7c66b","resolution":{"observed_at":"2026-08-12T11:01:58.610439Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05197","last_updated":"2023-11-01T05:14:01Z","snapshot_observed_at":"2026-08-11T19:00:01.366374Z","submitted_at":"2023-04-11T13:05:04Z","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05197","snapshot_observed_at":"2026-08-12T11:01:58.373001Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.18699","last_updated":"2024-11-27T19:09:16Z","snapshot_observed_at":"2026-08-12T10:56:07.729116Z","submitted_at":"2024-11-27T19:09:16Z","title":"An indicator for effectiveness of text-to-image guardrails utilizing the Single-Turn Crescendo Attack (STCA)","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-12T11:01:58.373001Z"},"links":{"cited_paper":"/paper/2304.05197","citing_paper":"/paper/2411.18699"},"observation_digest":"sha256:399ccc14e0dd721aaf6e5c3cc3b49157218749f81bd00e9e8f7cfc595d7bfa25","observation_id":"e11bf4cb-357d-4576-be39-2625ec4dd591","resolution":{"observed_at":"2026-08-12T11:01:58.373001Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T11:01:58.586617Z","title":"Dall-E 3","venue":null,"work_id":"8e526133-3be1-40bd-a138-c206a58235fe","year":2024},"citing_paper":{"arxiv_id":"2411.18699","last_updated":"2024-11-27T19:09:16Z","snapshot_observed_at":"2026-08-12T10:56:07.729116Z","submitted_at":"2024-11-27T19:09:16Z","title":"An indicator for effectiveness of text-to-image guardrails utilizing the Single-Turn Crescendo Attack (STCA)","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-12T11:01:58.379093Z"},"links":{"citing_paper":"/paper/2411.18699"},"observation_digest":"sha256:69b12c997254a764acecba6c007cb2702935bc47a58e3119ed57d945bf29bf9c","observation_id":"5e1adb77-de3d-4e40-8981-74411ec79528","resolution":{"observed_at":"2026-08-12T11:01:58.592130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01833","last_updated":"2025-02-26T13:41:41Z","snapshot_observed_at":"2026-08-13T05:33:18.631487Z","submitted_at":"2024-04-02T10:45:49Z","title":"Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01833","snapshot_observed_at":"2026-08-12T11:01:58.384011Z","title":"Russinovich, A","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18699","last_updated":"2024-11-27T19:09:16Z","snapshot_observed_at":"2026-08-12T10:56:07.729116Z","submitted_at":"2024-11-27T19:09:16Z","title":"An indicator for effectiveness of text-to-image guardrails utilizing the Single-Turn Crescendo Attack (STCA)","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-12T11:01:58.384011Z"},"links":{"cited_paper":"/paper/2404.01833","citing_paper":"/paper/2411.18699"},"observation_digest":"sha256:a46fb85cc8bcfb3d542f4cdf7d6f6cf04eb1c3fa5737ddd4a8ee1bcf4efd5357","observation_id":"7a6358c7-0021-41f8-89ee-55ad7db8af5b","resolution":{"observed_at":"2026-08-12T11:01:58.384011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04686","last_updated":"2024-08-08T09:18:47Z","snapshot_observed_at":"2026-08-12T23:06:42.112788Z","submitted_at":"2024-08-08T09:18:47Z","title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.04686","snapshot_observed_at":"2026-08-12T11:01:58.390545Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18699","last_updated":"2024-11-27T19:09:16Z","snapshot_observed_at":"2026-08-12T10:56:07.729116Z","submitted_at":"2024-11-27T19:09:16Z","title":"An indicator for effectiveness of text-to-image guardrails utilizing the Single-Turn Crescendo Attack (STCA)","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-12T11:01:58.390545Z"},"links":{"cited_paper":"/paper/2408.04686","citing_paper":"/paper/2411.18699"},"observation_digest":"sha256:809ee6ccdef473434c4fa5170f4cff7506143fbf19530816650b30ed34f2b537","observation_id":"c56036b5-3f97-4390-825e-8794c1b764ec","resolution":{"observed_at":"2026-08-12T11:01:58.390545Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T11:01:58.566513Z","title":"Tiger-Gemma-9B-v3 model from HuggingFace - decensored Gemma 9B SPPO","venue":null,"work_id":"b3557acb-d5db-48fc-b1f0-4b6a01022e04","year":2024},"citing_paper":{"arxiv_id":"2411.18699","last_updated":"2024-11-27T19:09:16Z","snapshot_observed_at":"2026-08-12T10:56:07.729116Z","submitted_at":"2024-11-27T19:09:16Z","title":"An indicator for effectiveness of text-to-image guardrails utilizing the Single-Turn Crescendo Attack (STCA)","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-12T11:01:58.396384Z"},"links":{"citing_paper":"/paper/2411.18699"},"observation_digest":"sha256:ccbd0ec443ce559cf8b401b0f71b5a408866309b06967622900124d766ec72e6","observation_id":"ef3c5f92-e9e1-433d-8a64-37c847a46b18","resolution":{"observed_at":"2026-08-12T11:01:58.573934Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05685","last_updated":"2023-12-24T02:01:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-06-09T05:55:52Z","title":"Judging LLM-as-a-Judge with MT-Bench and Chatbot Arena","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05685","snapshot_observed_at":"2026-08-12T11:01:58.401871Z","title":"Zheng, W.-L","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.18699","last_updated":"2024-11-27T19:09:16Z","snapshot_observed_at":"2026-08-12T10:56:07.729116Z","submitted_at":"2024-11-27T19:09:16Z","title":"An indicator for effectiveness of text-to-image guardrails utilizing the Single-Turn Crescendo Attack (STCA)","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-12T11:01:58.401871Z"},"links":{"cited_paper":"/paper/2306.05685","citing_paper":"/paper/2411.18699"},"observation_digest":"sha256:e74f5e5660ed7c6b48e152c37dba2d302b2aedc9239caf7ac20e563513473f14","observation_id":"ffeeadfc-0d34-4404-bb40-273cd1377aad","resolution":{"observed_at":"2026-08-12T11:01:58.401871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T11:01:58.408847Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.18699","last_updated":"2024-11-27T19:09:16Z","snapshot_observed_at":"2026-08-12T10:56:07.729116Z","submitted_at":"2024-11-27T19:09:16Z","title":"An indicator for effectiveness of text-to-image guardrails utilizing the Single-Turn Crescendo Attack (STCA)","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-12T11:01:58.408847Z"},"links":{"citing_paper":"/paper/2411.18699"},"observation_digest":"sha256:d7abac90849f25091caa69b9eb3e99d982fa2f4ebda9f80bd12705b358199426","observation_id":"d5863c4d-02b5-4ef7-8360-7e32f6f595d4","resolution":{"observed_at":"2026-08-12T11:01:58.408847Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2411.18699","last_updated":"2024-11-27T19:09:16Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-12T10:56:07.729116Z","submitted_at":"2024-11-27T19:09:16Z","title":"An indicator for effectiveness of text-to-image guardrails utilizing the Single-Turn Crescendo Attack (STCA)"},"reference_resolution":{"displayed":10,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":8,"verified_exact":0,"verified_fuzzy":2},"total_outbound_references":10},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 10 of 10 outbound references and 0 inbound Pith citation observations for arXiv:2411.18699."}