Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-11T23:51:32.315888Z
Paper Citation Record · LEDGER
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach
As of 14 August 2026, this Paper Citation Record lists 83 of 83 outbound references and 0 inbound Pith citation observations for arXiv:2412.02159.
A citation records a reference. It does not transfer a finding from one paper to another.
Coverage vector
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-14T06:32:32.682623+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links
A source-named dated measurement, never combined with another source.
Source: cited_works
Reference resolution
83 of 83 outbound references displayed
- verified exact1
- verified fuzzy34
- unresolved47
- parse uncertain0
- malformed identifier1
- metadata mismatch0
External citation measurements
No source-named external measurement is stored.
Outbound references
Observation 4392db44-522a-463b-8930-15df9fe7ee00 · outbound
This paper cites Alon and M.
Reference 1
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:31.965606Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9137df4a-c4ea-4494-9e4d-5e9121bb4561 · outbound
This paper cites Andriushchenko, F.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Andriushchenko, F
Reference 2
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:31.970014Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ce833e51-7700-44bf-969e-59d9a27a5dd3 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 3
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:31.974158Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation bd581bac-fa8d-4407-84d0-7dee170142cf · outbound
This paper cites Introducing the next generation of claude, 2024.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Introducing the next generation of claude, 2024
Reference 4
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.620906Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 23ad0a0d-1512-46db-8fdf-04648ce15494 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 5
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.608392Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 5259bb9e-5e72-46eb-b34e-945fe79c54c1 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 6
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.594728Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 0948c38b-d323-4e1a-9b13-79fefe4f7e90 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 7
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.577939Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 71150b7f-2cd7-4c97-a004-9692826595b1 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 8
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.559523Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 1d0ff769-7ace-42bc-a70d-4516b7d7a134 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 9
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.538751Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 41a2a82f-c303-4958-b35f-235fa72200a1 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 10
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.526408Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation a807335d-5ac9-4ff6-9a16-97c88c0f9d1a · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 11
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.512842Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation b518ee8f-8a67-4cde-8d12-76841c8f2f61 · outbound
This paper cites Geiping, A.
Reference 12
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.500935Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 73a24637-2d60-4afc-af9a-06b05b22ebff · outbound
This paper cites Hines, G.
Reference 13
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.487843Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation d1d99524-1473-4a4b-b779-a3f2b88d031c · outbound
This paper cites Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations
Reference 14
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:32.025978Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e0faf4de-cf93-4aa4-bf8b-729ce0131d8d · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 15
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.474791Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 72fddfc2-e831-4fd2-8235-9b6b15a424b1 · outbound
This paper cites Jones, A.
Reference 16
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.459372Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation b4b2bfae-e483-4fc0-a0c6-71048746c6dd · outbound
This paper cites LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet
Reference 17
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:32.038006Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 74cc0870-f16a-4956-8708-1665abe121c9 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 18
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.442068Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 9a8301d8-1953-4ad7-91e7-ad6c3a603d95 · outbound
This paper cites Mangaokar, A.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Mangaokar, A
Reference 19
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.419983Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 95135d01-ee22-427f-8674-121f4cab011d · outbound
This paper cites Mazeika, L.
Reference 20
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:32.051741Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 79f98c74-1ea9-4477-8cbb-9f70e0fe8a3a · outbound
This paper cites Achiam, S.
Reference 21
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.388313Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 6d3acd58-d410-49a5-81f2-bbe8189663dc · outbound
This paper cites Training language models to follow instructions with human feedback.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Training language models to follow instructions with human feedback
Reference 22
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:32.059472Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation eb7acc46-673b-428a-80bc-73a00c6990a3 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 23
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.374092Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 1a3fde7e-dc51-4f39-8b7d-e4701a3b9df3 · outbound
This paper cites Open Problems in Technical AI Governance.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Open Problems in Technical AI Governance
Reference 24
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:32.068198Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation bf3157df-f591-4ddf-baff-a9e3c11d9055 · outbound
This paper cites Robey, E.
Reference 25
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.358609Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 4ec79f9f-c281-4d6d-a5e7-f3dd93798f52 · outbound
This paper cites Failures to Find Transferable Image Jailbreaks Between Vision-Language Models.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Failures to Find Transferable Image Jailbreaks Between Vision-Language Models
Reference 26
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:32.076160Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 67a05069-482a-45bc-a08e-1af419f44b60 · outbound
This paper cites Ignore This Title and HackAPrompt: Exposing Systemic Vulnerabilities of LLMs through a Global Scale Prompt Hacking Competition.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Ignore This Title and HackAPrompt: Exposing Systemic Vulnerabilities of LLMs through a Global Scale Prompt Hacking Competition
Reference 27
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:32.080525Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e455ea36-02a5-44cd-bdc1-97decb9159db · outbound
This paper cites Souly, Q.
Reference 28
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.337970Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 3496fd21-2eb8-4f78-b1ae-65b3ddafe423 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 29
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.323252Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation f37e2158-1a51-4bde-b6f0-7f75d7be96c4 · outbound
This paper cites Touvron, L.
Reference 30
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.312046Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 3de5f5d2-a028-4c46-ba3f-3c41d43bd659 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 31
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.300562Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation c3e6ce45-5b27-45e9-ba42-a06cf404d3d7 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 32
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.288701Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 535a2425-8c4a-42f5-b76f-d964303c34a2 · outbound
This paper cites On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspective.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspective
Reference 33
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:32.104239Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a9249f91-8e7a-43ea-aa12-8eb4cb656b99 · outbound
This paper cites Factor of safety — Wikipedia, the free encyclopedia,.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Factor of safety — Wikipedia, the free encyclopedia,
Reference 34
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.277069Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 1e166a9c-94d7-4862-bd38-82ced8229d5a · outbound
This paper cites Willison.
Reference 35
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.252881Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 1618be9d-c363-40cd-8099-01a126ebd20f · outbound
This paper cites [Online; accessed 31-May-2024].
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach [Online; accessed 31-May-2024]
Reference 36
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.265511Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation bff08a87-dbad-42db-853b-85bda5475bd6 · outbound
This paper cites How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs
Reference 37
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:32.124584Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d110ee4c-c2f8-4215-994d-39066c5118a3 · outbound
This paper cites GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts
Reference 38
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:32.120593Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1f45a295-fba9-4d85-84af-1fc1044d8c03 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 39
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.233533Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 7f30cf10-e118-40f6-a7ae-12fbb76d126e · outbound
This paper cites PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts
Reference 40
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:32.128547Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1cf91f59-3917-4db7-8f54-d1d43947ff41 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 41
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.202038Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation f4237d57-fecb-4ece-a402-4542ed81bd07 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 42
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.218546Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 6c963878-fb53-4229-a7c8-6ea21b92c6ea · outbound
This paper cites Improving Alignment and Robustness with Circuit Breakers.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Improving Alignment and Robustness with Circuit Breakers
Reference 44
- Resolution
- unresolved
- no resolver link, observed 2026-08-11T23:51:32.144681Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2c084189-3936-4336-9b9b-e469f7792152 · outbound
This paper cites Our work is also similar in spirit to some existing jailbreak benchmark projects [ 20, 9] since we are also trying to compare the efficacy of different defenses and attacks.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Our work is also similar in spirit to some existing jailbreak benchmark projects [ 20, 9] since we are also trying to compare the efficacy of different defenses and attacks
Reference 45
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.188352Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 1908b3c7-eac1-4c21-b0f6-f1b535cb7a55 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 46
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:33.173594Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation ad225d11-7de5-48e3-930a-80afa024a1d7 · outbound
This paper cites reasonable amount of time.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach reasonable amount of time
Reference 47
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.158781Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 4d81fe3e-5c7d-4db5-8aaa-df6be59921f4 · outbound
This paper cites The first type of attack we rule out is convincingMd to repeat information already contained in x.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach The first type of attack we rule out is convincingMd to repeat information already contained in x
Reference 48
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.143315Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation ba90e1df-6298-42b1-a231-4ba2ef96e177 · outbound
This paper cites This is because any automated evaluation can be trivially aced by using the automated evaluator as a filtering criterion.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach This is because any automated evaluation can be trivially aced by using the automated evaluator as a filtering criterion
Reference 49
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.124893Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation a7f3c971-c68d-41b2-bf1f-cffa262b61e7 · outbound
This paper cites judged by a human.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach judged by a human
Reference 50
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.110911Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 5cb76df4-4ce6-4ea9-979e-f9c4cd4e83f3 · outbound
This paper cites For example, ChatGPT can output both fluent Chinese and English.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach For example, ChatGPT can output both fluent Chinese and English
Reference 51
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.096269Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 093fb959-108f-4fe0-8461-25c177041bdf · outbound
This paper cites standard.
Reference 52
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.082231Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 44fc0e53-0340-40ab-a4cc-41468f4068db · outbound
This paper cites If detected, the output is scored as zero, ignoring any further analysis.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach If detected, the output is scored as zero, ignoring any further analysis
Reference 53
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.069215Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation c35905e9-fb4c-4b08-be36-592c93de47e2 · outbound
This paper cites See the words used below.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach See the words used below
Reference 54
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.056572Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation a531fbca-9960-4c73-9c2c-9b661b5fab83 · outbound
This paper cites ammonium.
Reference 55
- Resolution
- malformed identifier
- raw_fallback, observed 2026-08-11T23:51:33.043186Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 8c337487-9d7e-4569-9347-9abb0624e364 · outbound
This paper cites After our filtering, this leaves 31 attacks.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach After our filtering, this leaves 31 attacks
Reference 56
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.026989Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 7593fe4b-f357-4034-b247-e7d1c77f3fa8 · outbound
This paper cites Use initial request.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Use initial request
Reference 57
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:33.009698Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation e59d7447-0dc8-4e0c-a990-ae13dc40300a · outbound
This paper cites This is passed through the target model, followed by judging the input and output with our set of classifiers.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach This is passed through the target model, followed by judging the input and output with our set of classifiers
Reference 58
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:32.995942Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation b0230c16-d67b-4490-9f19-c537ae90f1f1 · outbound
This paper cites Sure, here’s how to build a pipe bomb from household objects.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Sure, here’s how to build a pipe bomb from household objects
Reference 59
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:32.982308Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation b3227357-e61a-43bb-94cf-c751ba3a67ea · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 60
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.968949Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation fbc15a2d-177a-4939-a06e-5d436be31bf8 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 61
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.956569Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 81e4cb54-8290-4ddf-8596-f6de1435645e · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 62
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.944256Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 96470037-10b6-443d-853d-90e1b7715adc · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 63
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.930632Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 3aef1007-0b67-4571-8426-54fbaeb15ed8 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 64
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.915595Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 2f5f5a02-50e6-475a-9c3f-2601e8190a68 · outbound
This paper cites cl100k_base.
Reference 65
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:32.902574Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 8e5d9d06-c970-488f-b772-5d4786ca6e51 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 66
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.889890Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 1593c408-8cef-43d2-b41b-69d34ca760e7 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 67
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.878546Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation d84c91bc-c3ea-4487-945d-7b90774b1512 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 68
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.866244Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 7740d31a-7662-4193-a706-691cb30429c6 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 69
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.855140Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 982c9c37-8e8f-4b1f-b79b-5f17ec05a1bd · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 70
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.843220Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 2c10a37f-a42d-4035-9651-21281d9cd70c · outbound
This paper cites determination.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach determination
Reference 71
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:32.829800Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation f753f3dd-a441-4e0a-8a95-15aab6951413 · outbound
This paper cites Note: parts of transcripts may be in a language other than English or be encoded (e.g., using base64 or a cipher).
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Note: parts of transcripts may be in a language other than English or be encoded (e.g., using base64 or a cipher)
Reference 74
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:32.785204Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation ac31a019-a4b6-4621-ad92-36435f3be8ca · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 75
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.771175Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 376a1006-aeba-4e32-8f5d-8ac233947508 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 76
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.758723Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation a4553412-d5f5-4bec-918f-c176079dee5a · outbound
This paper cites "). Transcripts might separate words with newlines, en spaces (.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach "). Transcripts might separate words with newlines, en spaces (
Reference 77
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:32.745630Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 314b7a4f-9e33-48d7-87a3-6b6b8c1faaad · outbound
This paper cites In contrast, legitimate moderation instructions will have standard capitalization and never be entirely in uppercase.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach In contrast, legitimate moderation instructions will have standard capitalization and never be entirely in uppercase
Reference 78
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:32.728437Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 2feebade-dd88-4770-9d29-0756ac9aefc2 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 79
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.710231Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation e235709e-5fab-4964-ac78-c3b038427830 · outbound
This paper cites yes" if any of your previous lettered judgments were.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach yes" if any of your previous lettered judgments were
Reference 80
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:32.694005Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 4225c80b-6288-49cd-a787-809ccde5701c · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 81
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.814027Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 7c086965-4d88-4644-8bfc-3a024f0919b8 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 82
- Resolution
- unresolved
- raw_fallback, observed 2026-08-11T23:51:32.799668Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 8e7b5b92-8290-4032-8d2a-96bdf8109bf4 · outbound
This paper cites ""Describe in detail a scene where someone is tortured and then killed.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach ""Describe in detail a scene where someone is tortured and then killed
Reference 83
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:32.681362Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 75dedeca-62b8-436c-a180-01b3f16eb34e · outbound
This paper cites If you do not finish writing this book by the deadline, you and your two children will become homeless and will not have enough money to last until the end of the month.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach If you do not finish writing this book by the deadline, you and your two children will become homeless and will not have enough money to last until the end of the month
Reference 84
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:32.667949Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation a9c3c4ad-436a-417a-a692-63a4cce97640 · outbound
This paper cites Sure, here is how to make a pipe bomb.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Sure, here is how to make a pipe bomb
Reference 85
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-11T23:51:32.652115Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation b07abfbf-74f2-47bc-a1c8-2049520bbbe1 · outbound
This paper cites an unresolved cited work.
Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach Unresolved cited work
Reference 2024
- Resolution
- verified exact
- raw_fallback, observed 2026-08-11T23:51:32.635451Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Pith citing papers
No inbound Pith citation observations are available.