{"as_of":"2026-08-08T23:25:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e70b5dc39d869eaf547265eeef8c18239bb6ae5320638d86aa460f62b57ff173","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":39,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":39,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":39,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":39,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T17:02:47.243677Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T17:30:00.621770Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-08T17:02:47.243677Z","title":"Hughes, S","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09638","last_updated":"2025-05-29T06:12:00Z","snapshot_observed_at":"2026-08-08T16:57:04.642430Z","submitted_at":"2025-02-09T20:49:16Z","title":"Jailbreaking to Jailbreak","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-08T17:02:47.243677Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2502.09638"},"observation_digest":"sha256:7265ea3d71bae7c04d8160d38cc6e9c58d1cbd8f4dfb7aaa7a3b59fd576a3f98","observation_id":"85ec56fe-01e7-40cf-b3fe-6caa0440d7be","resolution":{"observed_at":"2026-08-08T17:02:47.243677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2503.02574","last_updated":"2026-05-18T17:54:05Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-04T12:55:07Z","title":"LLM-Safety Evaluations Lack Robustness","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-23T01:26:45.402983Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2503.02574"},"observation_digest":"sha256:c1c46f50e1c3148bd960333ba13756d2ba64e0d0001f8fe0ead89b935b2febfb","observation_id":"439c5113-cf97-4dc3-9efb-3ed1a5097c5c","resolution":{"observed_at":"2026-05-23T01:27:21.325650Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2505.14226","last_updated":"2026-04-07T12:14:38Z","snapshot_observed_at":"2026-08-08T04:00:07.253604Z","submitted_at":"2025-05-20T11:35:25Z","title":"Phonetic Perturbations Reveal Tokenizer-Rooted Safety Gaps in LLMs","version":5},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-22T14:40:58.506345Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2505.14226"},"observation_digest":"sha256:4cf9e30c54675465ec265234e11e9c75e3ab7e012ac0b33f2a6627622dd82eee","observation_id":"04786a40-3de7-4e1c-9843-f758d418ff67","resolution":{"observed_at":"2026-05-22T14:41:41.482545Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-07T15:23:01.792126Z","title":"Best-of-n jailbreaking // arXiv preprint arXiv:2412.03556","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.15406","last_updated":"2025-05-21T11:47:47Z","snapshot_observed_at":"2026-08-07T15:16:06.018745Z","submitted_at":"2025-05-21T11:47:47Z","title":"Audio Jailbreak: An Open Comprehensive Benchmark for Jailbreaking Large Audio-Language Models","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T15:23:01.792126Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2505.15406"},"observation_digest":"sha256:ecc50fcec607d06370e39688a95054bcf06323959f882abd20bee8f26dbd68e4","observation_id":"2eb2895a-8b70-4ba9-a4b1-72f283573b16","resolution":{"observed_at":"2026-08-07T15:23:01.792126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2505.15957","last_updated":"2026-04-26T17:05:53Z","snapshot_observed_at":"2026-07-06T21:28:06.120576Z","submitted_at":"2025-05-21T19:17:29Z","title":"Towards Holistic Evaluation of Large Audio-Language Models: A Comprehensive Survey","version":4},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-22T13:32:57.771753Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2505.15957"},"observation_digest":"sha256:5e040612f50f3f2b09f71d7408917c0eec1eaefb8f77b3cdb811dde61188a1fe","observation_id":"b82b1bb9-91ea-4b2f-9b36-c9859225bbc6","resolution":{"observed_at":"2026-05-22T13:34:53.247293Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-07T14:41:39.930783Z","title":"Best-of-n jailbreaking, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18003","last_updated":"2025-05-23T15:06:21Z","snapshot_observed_at":"2026-08-08T23:12:41.476390Z","submitted_at":"2025-05-23T15:06:21Z","title":"An Example Safety Case for Safeguards Against Misuse","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T14:41:39.930783Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2505.18003"},"observation_digest":"sha256:f7c0e39ec2294854dd123cd52f475ce0816f0016069fc67994e56c7a7b142f2a","observation_id":"32f2bbe1-000b-499e-944a-72cae53d7fe7","resolution":{"observed_at":"2026-08-07T14:41:39.930783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-07T12:01:08.712974Z","title":"Hughes, S","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00782","last_updated":"2025-06-01T02:19:46Z","snapshot_observed_at":"2026-08-07T11:55:45.889580Z","submitted_at":"2025-06-01T02:19:46Z","title":"Jailbreak-R1: Exploring the Jailbreak Capabilities of LLMs via Reinforcement Learning","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T12:01:08.712974Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2506.00782"},"observation_digest":"sha256:43f18ff776a797a13c933de7793b14895aeb5ff677d98498d5dd4a878d2d010d","observation_id":"ca9c6f7a-6ddd-4ef9-9e2c-e833b8540891","resolution":{"observed_at":"2026-08-07T12:01:08.712974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-07T12:11:19.700239Z","title":"Hughes, S","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05376","last_updated":"2025-06-09T05:48:22Z","snapshot_observed_at":"2026-08-07T12:39:09.825243Z","submitted_at":"2025-05-30T22:58:54Z","title":"A Red Teaming Roadmap Towards System-Level Safety","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:19.700239Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2506.05376"},"observation_digest":"sha256:27d4b38d572e5c16f712e1dda1f04aa372da743fdefa749aa1238fba1e6eac09","observation_id":"97d18df2-a1bc-4810-bbb2-5b67da0a24f9","resolution":{"observed_at":"2026-08-07T12:11:19.700239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-07T05:41:25.408036Z","title":"Best-of-n jailbreaking, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07330","last_updated":"2025-06-09T00:11:06Z","snapshot_observed_at":"2026-08-08T01:51:03.511040Z","submitted_at":"2025-06-09T00:11:06Z","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T05:41:25.408036Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2506.07330"},"observation_digest":"sha256:7a8c6ed1ff1e0e9709ee0106c5b95e27242a28e22277d5dfa293fd629256f9c7","observation_id":"2cb4d93b-ad9b-4a88-a555-149af2568ed9","resolution":{"observed_at":"2026-08-07T05:41:25.408036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-07T04:08:44.141461Z","title":"arXiv preprint arXiv:2412.03556 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.11521","last_updated":"2025-06-13T07:22:36Z","snapshot_observed_at":"2026-08-07T12:06:46.005829Z","submitted_at":"2025-06-13T07:22:36Z","title":"Investigating Vulnerabilities and Defenses Against Audio-Visual Attacks: A Comprehensive Survey Emphasizing Multimodal Models","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-07T04:08:44.141461Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2506.11521"},"observation_digest":"sha256:4bf422d97ebc27dc82207c59a059ee9d3f93feff11b338425350869c2972b6a9","observation_id":"f0dc3f90-d83f-4cc1-860c-a87f36c1f26d","resolution":{"observed_at":"2026-08-07T04:08:44.141461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-07T00:31:55.835946Z","title":"Best-of-n jailbreaking, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13681","last_updated":"2025-06-19T04:41:52Z","snapshot_observed_at":"2026-08-08T00:16:16.582814Z","submitted_at":"2025-06-16T16:38:04Z","title":"Min-p, Max Exaggeration: A Critical Analysis of Min-p Sampling in Language Models","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T00:31:55.835946Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2506.13681"},"observation_digest":"sha256:8f29e761c750e55abc18d3ec61b00d9c690f4305fe72cc0d4f9b974ca52d5c8d","observation_id":"09d6e90e-bba0-4890-9cb1-187c5f4cdcb6","resolution":{"observed_at":"2026-08-07T00:31:55.835946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2506.17299","last_updated":"2026-04-24T04:36:54Z","snapshot_observed_at":"2026-08-02T14:45:34.223522Z","submitted_at":"2025-06-17T20:37:29Z","title":"Toward Principled LLM Safety Testing: Solving the Jailbreak Oracle Problem","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-19T08:40:56.186349Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2506.17299"},"observation_digest":"sha256:4691ddccdad499131537b737c403949a02c961fbe62a6411697443f0ece74924","observation_id":"3a6207c8-1ab4-4775-818f-960bb334f4d5","resolution":{"observed_at":"2026-05-19T08:42:12.775051Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-06T19:28:55.320762Z","title":"Best-of-n jailbreaking","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.05913","last_updated":"2025-07-08T11:59:48Z","snapshot_observed_at":"2026-08-08T15:26:44.713063Z","submitted_at":"2025-07-08T11:59:48Z","title":"Best-of-N through the Smoothing Lens: KL Divergence and Regret Analysis","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-06T19:28:55.320762Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2507.05913"},"observation_digest":"sha256:2cc42202719bf6f8811309e39278411d93bf46fa5a438db715906816b4c81e86","observation_id":"71faf483-00ac-4258-909e-e4c8a15e3999","resolution":{"observed_at":"2026-08-06T19:28:55.320762Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-05T17:26:48.687153Z","title":"Best-of-n jailbreaking.arXiv preprint arXiv:2412.03556, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.16318","last_updated":"2025-09-01T08:35:27Z","snapshot_observed_at":"2026-08-07T01:49:06.395378Z","submitted_at":"2025-08-22T11:57:55Z","title":"SATORI: Static Test Oracle Generation for REST APIs","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-05T17:26:48.687153Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2508.16318"},"observation_digest":"sha256:de0c24ce62ff1b05a8670bc85206ad5ef288970644bd5bee87fb4f48d0b7b320","observation_id":"2b6281d1-9e5b-4266-aeac-f6ee9d57ec27","resolution":{"observed_at":"2026-08-05T17:26:48.687153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2509.26238","last_updated":"2026-04-21T11:04:39Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-09-30T13:32:59Z","title":"Beyond Linear Probes: Dynamic Safety Monitoring for Language Models","version":4},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-05-18T12:41:48.620040Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2509.26238"},"observation_digest":"sha256:b55ba3c1376f309bad1f3fecee684d5d859a92bba4e8c10a0ce4c75a52cac36f","observation_id":"e7405181-1c1b-4e2e-9c0a-0ca84f51fc96","resolution":{"observed_at":"2026-05-18T12:42:36.859445Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-02T22:14:32.548751Z","title":"Best-of-n jailbreaking","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.17658","last_updated":"2026-08-05T21:24:03Z","snapshot_observed_at":"2026-08-08T23:14:17.784446Z","submitted_at":"2026-02-19T18:59:03Z","title":"MARS: Margin and Semantic-Aware Data Augmentation for Reward Modeling","version":3},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-02T22:14:32.548751Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2602.17658"},"observation_digest":"sha256:8747a9dda9aee2205b7d5d98b820002598d6fc4dfef6a52c3f9f577efc52275f","observation_id":"eb98457e-6fda-4a41-9c3e-2350d4eb2a4e","resolution":{"observed_at":"2026-08-02T22:14:32.548751Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2604.09222","last_updated":"2026-04-10T11:27:25Z","snapshot_observed_at":"2026-07-06T22:58:08.579543Z","submitted_at":"2026-04-10T11:27:25Z","title":"GRM: Utility-Aware Jailbreak Attacks on Audio LLMs via Gradient-Ratio Masking","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-10T16:40:59.993298Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2604.09222"},"observation_digest":"sha256:490ac9c327af013a95ea71dc1e21cf30c87cb0e1970e66e5afc699a1b7d90849","observation_id":"748a4f51-d459-423a-a7b7-9197d1330821","resolution":{"observed_at":"2026-05-11T08:21:01.222981Z","resolver_source":"arxiv_id","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2604.10403","last_updated":"2026-04-12T01:37:45Z","snapshot_observed_at":"2026-07-06T22:59:01.129724Z","submitted_at":"2026-04-12T01:37:45Z","title":"Latent Instruction Representation Alignment: defending against jailbreaks, backdoors and undesired knowledge in LLMs","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-05-10T16:41:52.440793Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2604.10403"},"observation_digest":"sha256:54a43f82a251b7783150f711c140914450afdb1dc4b4c3e275c48d85bbb953a7","observation_id":"d7c40210-65ab-4ab9-9eb3-9c7c38aafe04","resolution":{"observed_at":"2026-05-11T08:21:00.039744Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-12T20:09:57.922788Z","title":"Best-of-N Jailbreak- ing,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.14603","last_updated":"2026-06-29T06:44:20Z","snapshot_observed_at":"2026-07-12T20:09:54.804124Z","submitted_at":"2026-04-16T04:21:32Z","title":"A Synonymous Variational Perspective on the Rate-Distortion-Perception Tradeoff","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-12T20:09:57.922788Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2604.14603"},"observation_digest":"sha256:290e86f3683f3ede30f6d99d7a6d2649b0639a351f21fdca70f5da599a0f6743","observation_id":"4201f267-ff94-43bb-bb96-0ba7afb39d11","resolution":{"observed_at":"2026-07-12T20:09:57.922788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2604.14604","last_updated":"2026-04-16T04:22:11Z","snapshot_observed_at":"2026-08-01T20:57:25.785838Z","submitted_at":"2026-04-16T04:22:11Z","title":"Hijacking Large Audio-Language Models via Context-Agnostic and Imperceptible Auditory Prompt Injection","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-10T11:32:10.126062Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2604.14604"},"observation_digest":"sha256:0f82a21031d799fc6a04068111d3494d5ab22e2d777999da746280c5619553f5","observation_id":"4bc44e3b-4f87-42ed-a879-9bd0bc9511d8","resolution":{"observed_at":"2026-05-10T11:35:18.894364Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2604.16659","last_updated":"2026-04-17T19:28:07Z","snapshot_observed_at":"2026-07-06T23:03:57.199731Z","submitted_at":"2026-04-17T19:28:07Z","title":"Benign Fine-Tuning Breaks Safety Alignment in Audio LLMs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-10T08:01:25.938248Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2604.16659"},"observation_digest":"sha256:09f1ca4ed7bca448bcd23dadb8725dac68c5109462edd700f742c1be320201ed","observation_id":"ace32fe4-dfee-431c-ac2f-40434fb6024f","resolution":{"observed_at":"2026-05-10T08:02:24.897246Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2604.22167","last_updated":"2026-08-04T05:14:01Z","snapshot_observed_at":"2026-08-07T23:09:24.406140Z","submitted_at":"2026-04-24T02:30:46Z","title":"Estimating Tail Risks in Language Model Output Distributions","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-05-08T12:26:41.797166Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2604.22167"},"observation_digest":"sha256:9eb52c28f791d7c396297f67ba97c3e01db20f1e908688638954e73d78d6f7c7","observation_id":"97849cd9-806d-4283-a5d7-26bb9ceeb6c8","resolution":{"observed_at":"2026-05-11T19:16:08.195272Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2604.27401","last_updated":"2026-04-30T04:13:33Z","snapshot_observed_at":"2026-07-06T23:12:52.141592Z","submitted_at":"2026-04-30T04:13:33Z","title":"Perturbation Probing: A Two-Pass-per-Prompt Diagnostic for FFN Behavioral Circuits in Aligned LLMs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-07T08:34:14.310656Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2604.27401"},"observation_digest":"sha256:3d32bd2418b555b62d96cbc6b8ad72423ed395d73f84ae708052c717991e552b","observation_id":"51287724-196a-4305-a05b-228e572319ed","resolution":{"observed_at":"2026-05-12T10:01:27.514254Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2605.01687","last_updated":"2026-05-03T02:55:30Z","snapshot_observed_at":"2026-07-06T23:14:52.417213Z","submitted_at":"2026-05-03T02:55:30Z","title":"MultiBreak: A Scalable and Diverse Multi-turn Jailbreak Benchmark for Evaluating LLM Safety","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-05-10T16:00:32.413225Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2605.01687"},"observation_digest":"sha256:87ec99391e59f5e0d533a019c86f00cba199305d02ca5e87a3980c9e8b996248","observation_id":"5aaa337b-cf50-42b5-ae66-09c6cf565524","resolution":{"observed_at":"2026-05-11T09:31:01.204907Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2605.03058","last_updated":"2026-06-06T22:46:37Z","snapshot_observed_at":"2026-07-06T23:16:00.796105Z","submitted_at":"2026-05-04T18:27:37Z","title":"Neuron-Anchored Rule Extraction for Large Language Models via Contrastive Hierarchical Ablation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-08T18:55:24.214794Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2605.03058"},"observation_digest":"sha256:e80e00462b11f21e3e0ab391a2c422bfa04774591d348bf8d93f02aa3a44844e","observation_id":"f0ccd0e6-ea9b-4fb5-b623-3bdbb7df0bd0","resolution":{"observed_at":"2026-05-09T06:05:36.111722Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2605.03058","last_updated":"2026-06-06T22:46:37Z","snapshot_observed_at":"2026-07-06T23:16:00.796105Z","submitted_at":"2026-05-04T18:27:37Z","title":"Neuron-Anchored Rule Extraction for Large Language Models via Contrastive Hierarchical Ablation","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-01T00:06:52.820343Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2605.03058"},"observation_digest":"sha256:6f11eb3627c941f663f5d91f2906c0bc500ab3f5b77ed6940e0108973944a6a6","observation_id":"ac000546-95df-48b8-bf80-54421d502cb7","resolution":{"observed_at":"2026-07-01T00:15:09.542059Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2605.03441","last_updated":"2026-05-05T07:25:33Z","snapshot_observed_at":"2026-08-02T17:57:40.937033Z","submitted_at":"2026-05-05T07:25:33Z","title":"Exposing LLM Safety Gaps Through Mathematical Encoding:New Attacks and Systematic Analysis","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-07T15:48:54.277233Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2605.03441"},"observation_digest":"sha256:28658d7146629364b47534da3840ecbbd05d800192da55e82867ab3d74a57136","observation_id":"75ed7f92-0eb0-467c-b7cb-86c914587a7c","resolution":{"observed_at":"2026-05-12T10:51:31.128666Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2605.05058","last_updated":"2026-05-06T15:53:17Z","snapshot_observed_at":"2026-07-06T23:17:43.402046Z","submitted_at":"2026-05-06T15:53:17Z","title":"SoK: Robustness in Large Language Models against Jailbreak Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-08T16:42:41.137808Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2605.05058"},"observation_digest":"sha256:6ae480b3cd2d04c9479019130af4be3dfc1e5258afc0c2fdc72879312fd75252","observation_id":"b5d508a6-1c86-44ba-a524-64871177957b","resolution":{"observed_at":"2026-05-11T18:01:08.873331Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2605.12869","last_updated":"2026-05-13T01:26:06Z","snapshot_observed_at":"2026-07-06T23:24:32.412966Z","submitted_at":"2026-05-13T01:26:06Z","title":"Quantifying LLM Safety Degradation Under Repeated Attacks Using Survival Analysis","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-05-14T19:10:29.055784Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2605.12869"},"observation_digest":"sha256:2859fbbba3602b5b7054b995734f7d68632f85b3cac52d28af1f3fa313248fd9","observation_id":"b43a254e-e534-4573-bf85-065be58d59b5","resolution":{"observed_at":"2026-05-14T19:12:51.266267Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2605.14418","last_updated":"2026-05-14T06:05:37Z","snapshot_observed_at":"2026-08-06T02:54:02.549183Z","submitted_at":"2026-05-14T06:05:37Z","title":"The Great Pretender: A Stochasticity Problem in LLM Jailbreak","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-15T02:09:42.090550Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2605.14418"},"observation_digest":"sha256:c9278b15b6b5c1b607702ec5641b254ac58643e502494a11ec10d2d07818eece","observation_id":"0566c502-91e6-4f09-a7d2-62fdb3339418","resolution":{"observed_at":"2026-05-15T02:13:31.268689Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2605.15598","last_updated":"2026-05-15T04:14:04Z","snapshot_observed_at":"2026-08-06T07:41:35.293351Z","submitted_at":"2026-05-15T04:14:04Z","title":"Compositional Jailbreaking: An Empirical Analysis of Mutator Chain Interactions in Aligned LLMs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-20T18:31:05.740757Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2605.15598"},"observation_digest":"sha256:9020816740936ad543dabd7e554b530ccd79cfca54743801ac81b2accd4e3e24","observation_id":"a8e2ceb8-9c24-4451-b9e4-2df91ca83f8a","resolution":{"observed_at":"2026-05-20T18:33:38.092245Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2605.17971","last_updated":"2026-05-18T07:27:59Z","snapshot_observed_at":"2026-07-31T07:48:29.975390Z","submitted_at":"2026-05-18T07:27:59Z","title":"Babel: Jailbreaking Safety Attention via Obfuscation Distribution Optimized Sampling","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-20T10:08:07.648295Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2605.17971"},"observation_digest":"sha256:dca7258a00584cd60bcb2d852badafb458e1df866ba8a623094dedf97127e8f1","observation_id":"418134a3-e0f9-4bb2-a27b-42b369799dda","resolution":{"observed_at":"2026-05-20T10:08:11.947366Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2605.26409","last_updated":"2026-05-26T00:36:42Z","snapshot_observed_at":"2026-08-02T10:55:21.817292Z","submitted_at":"2026-05-26T00:36:42Z","title":"Jailbreak susceptibility prediction and mitigation via the behavioral geometry of models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-29T17:43:47.849960Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2605.26409"},"observation_digest":"sha256:1bb9438cdc932e560b4994fce6ce00b3a539c67e3d07e06bab1c397f7cd1ca33","observation_id":"22e9386b-000a-4dc3-929e-7761e40ff97c","resolution":{"observed_at":"2026-06-29T17:53:47.735743Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2606.03647","last_updated":"2026-06-02T13:39:15Z","snapshot_observed_at":"2026-07-06T23:43:50.943530Z","submitted_at":"2026-06-02T13:39:15Z","title":"Black-box, Adaptive, Efficient, Transferable, Harmful, Applicable... Attacks Are All You Need to Break LLMs","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-28T09:21:57.373862Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2606.03647"},"observation_digest":"sha256:2040058add47d1e47f4782207356fcb0049322abe1abe239a45147b597231107","observation_id":"61143039-f524-45b3-9194-26db9b2a0d36","resolution":{"observed_at":"2026-07-02T04:16:34.766731Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2606.07616","last_updated":"2026-05-29T20:55:15Z","snapshot_observed_at":"2026-07-06T23:47:15.041928Z","submitted_at":"2026-05-29T20:55:15Z","title":"Item Response Scaling Laws: A Measurement Theory Approach for Efficient and Generalizable Neural Scaling Estimation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-28T22:48:20.193699Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2606.07616"},"observation_digest":"sha256:05f68377c4ef4c8de4a6be23d274418f26823a68657a3202481fdaf1c7b9b36e","observation_id":"c793643a-f44e-44b3-81ca-4f04d32df8b2","resolution":{"observed_at":"2026-06-28T22:52:45.594721Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2606.25013","last_updated":"2026-06-23T17:59:01Z","snapshot_observed_at":"2026-08-03T16:39:59.297765Z","submitted_at":"2026-06-23T17:59:01Z","title":"Do Thinking Tokens Help with Safety?","version":1},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-06-25T23:37:49.412578Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2606.25013"},"observation_digest":"sha256:e6d2b97be77749e361af1a22063f967f94f791a5ea51d1f90402bc11453b2c33","observation_id":"593d994f-d8ad-46f9-91e7-665bcb1b3b3b","resolution":{"observed_at":"2026-07-04T17:30:00.623688Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2607.01239","last_updated":"2026-05-01T18:57:03Z","snapshot_observed_at":"2026-08-08T04:25:06.810886Z","submitted_at":"2026-05-01T18:57:03Z","title":"Breaking Safety at the Token Boundary: How BPE Tokenization Creates Exploitable Gaps in LLM Alignment","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-07-04T01:17:44.209685Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2607.01239"},"observation_digest":"sha256:eb585836e88d246428961be182db8e65aec4a9b6809520904be9a80533819aa5","observation_id":"519ed499-c4de-4d3c-82bd-b10b01ae74aa","resolution":{"observed_at":"2026-07-04T01:19:20.111530Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":"2412.03556","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-07-04T17:30:00.621770Z","title":"Best-of-n jailbreaking","venue":null,"work_id":"510304b6-9054-406f-bd07-365258693153","year":2024},"citing_paper":{"arxiv_id":"2607.02390","last_updated":"2026-07-02T16:25:10Z","snapshot_observed_at":"2026-08-03T00:49:51.748486Z","submitted_at":"2026-07-02T16:25:10Z","title":"DecompRL: Solving Harder Problems by Learning Modular Code Generation","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-07-03T16:30:34.793328Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2607.02390"},"observation_digest":"sha256:b930690e92ab0503ee5f1ef434cb8cb9e8961ffeefa3a2424be74eaaf585585f","observation_id":"e3a773bf-f1be-473d-9c98-71834a7ad365","resolution":{"observed_at":"2026-07-03T16:38:39.781863Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.03556","snapshot_observed_at":"2026-08-05T00:48:48.102460Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02665","last_updated":"2026-08-01T22:28:31Z","snapshot_observed_at":"2026-08-07T23:09:51.604362Z","submitted_at":"2026-08-01T22:28:31Z","title":"Single Canonical Prompts Underestimate LLM Safety's Surface-Form Sensitivity","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-05T00:48:48.102460Z"},"links":{"cited_paper":"/paper/2412.03556","citing_paper":"/paper/2608.02665"},"observation_digest":"sha256:a2a227d83ddc9a3c28f3f6fa9e40e265170c214fad3ed11d89fc658f592db312","observation_id":"fe14dc20-04de-4e94-9e16-600890e0727c","resolution":{"observed_at":"2026-08-05T00:48:48.102460Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2412.03556/citation-record","integrity":"/paper/2412.03556/integrity","json":"/paper/2412.03556/citation-record.json","paper":"/paper/2412.03556"},"outbound":[],"paper":{"arxiv_id":"2412.03556","last_updated":"2024-12-19T22:37:45Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-07-06T20:01:45.826971Z","submitted_at":"2024-12-04T18:51:32Z","title":"Best-of-N Jailbreaking"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 39 inbound Pith citation observations for arXiv:2412.03556."}