{"as_of":"2026-08-12T22:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c357c7801dea599819e636840bd0b6bc64980031706be25621319afde48621c4","coverage":[{"denominator":37,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":37,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T15:49:38.207015Z","state":"measured"},{"denominator":37,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":37,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.12192/citation-record","integrity":"/paper/2412.12192/integrity","json":"/paper/2412.12192/citation-record.json","paper":"/paper/2412.12192"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.978886Z","title":null,"venue":null,"work_id":"53e930f0-611f-43e7-893e-f560d10e2548","year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:37.970381Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:5357a52db6663aa3b2b8cf3c53552e504e0468069c8353da9cc602c815571a5b","observation_id":"56e3a0f8-fed4-486d-9787-f8501cdb5f3f","resolution":{"observed_at":"2026-08-11T15:49:38.983773Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.962106Z","title":null,"venue":null,"work_id":"c934c17c-4944-49e3-906f-16c149a7c618","year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:37.977249Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:519750ce676dc7e4cca0b66282ea73f253316bc1d182367b071a3a71ff657270","observation_id":"bb44dcbc-18ac-483a-84b2-6794a74a8dac","resolution":{"observed_at":"2026-08-11T15:49:38.967630Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14132","last_updated":"2023-11-07T03:30:15Z","snapshot_observed_at":"2026-07-06T16:10:54.723336Z","submitted_at":"2023-08-27T15:20:06Z","title":"Detecting Language Model Attacks with Perplexity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14132","snapshot_observed_at":"2026-08-11T15:49:37.983524Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:37.983524Z"},"links":{"cited_paper":"/paper/2308.14132","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:d4ee9a21f16e1d082a33941b06caeb7cf10f30f53d1379e2eb1ae2bf03751765","observation_id":"cab2ed8b-3ef1-42a7-a015-87d462c4c400","resolution":{"observed_at":"2026-08-11T15:49:37.983524Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:37.997656Z","title":"Many-shot jailbreaking","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:37.997656Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:0ec1f81005dcb97c5f0dcd3605f18cd6654ec30b50978b8eba0a1cb23dc37b27","observation_id":"5a487d79-1886-4390-ac6f-208c94ce48e9","resolution":{"observed_at":"2026-08-11T15:49:37.997656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.02441","last_updated":"2022-11-20T00:07:06Z","snapshot_observed_at":"2026-08-11T00:28:03.942091Z","submitted_at":"2022-10-05T17:59:45Z","title":"Ask Me Anything: A simple strategy for prompting language models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.02441","snapshot_observed_at":"2026-08-11T15:49:38.008422Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.008422Z"},"links":{"cited_paper":"/paper/2210.02441","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:5c746c4e723ba840ee5a1cd3c99579868ddcf1ccb63f542e76a3f382e5c4d102","observation_id":"4bf121c5-03aa-41ea-a65b-e1b8142337f7","resolution":{"observed_at":"2026-08-11T15:49:38.008422Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.05862","last_updated":"2022-04-12T15:02:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-12T15:02:38Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.05862","snapshot_observed_at":"2026-08-11T15:49:38.014688Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.014688Z"},"links":{"cited_paper":"/paper/2204.05862","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:45b2d948238cd80f35e6f5ec541d1bb3fea20d9c6bf2bf83f1966bea244daddc","observation_id":"b464f131-da5d-40ee-9c17-cd5e16764827","resolution":{"observed_at":"2026-08-11T15:49:38.014688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01318","last_updated":"2024-10-31T22:26:40Z","snapshot_observed_at":"2026-08-11T16:28:21.917686Z","submitted_at":"2024-03-28T02:44:02Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01318","snapshot_observed_at":"2026-08-11T15:49:38.020895Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.020895Z"},"links":{"cited_paper":"/paper/2404.01318","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:0af6c72d202d597d6ed62c484dd7682f8f54a4b43d2390c06931f70e350f4c76","observation_id":"ef9d47b6-6588-414d-b514-9dfa291349a8","resolution":{"observed_at":"2026-08-11T15:49:38.020895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.934096Z","title":null,"venue":null,"work_id":"3ea25f83-b180-45b9-a500-e039631c215e","year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.027754Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:2afa93ad1e705bbe315e7f6cee7e87a1152005eeec65231fa3029451cf550e71","observation_id":"3ced0d02-2663-4bb7-a21a-c6efeac01686","resolution":{"observed_at":"2026-08-11T15:49:38.940247Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06363","last_updated":"2024-09-25T19:48:39Z","snapshot_observed_at":"2026-08-11T03:37:22.279261Z","submitted_at":"2024-02-09T12:15:51Z","title":"StruQ: Defending Against Prompt Injection with Structured Queries","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06363","snapshot_observed_at":"2026-08-11T15:49:38.033030Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.033030Z"},"links":{"cited_paper":"/paper/2402.06363","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:ee9d0346c8ec19f90aa5f9222ce724a946dc5d4b5b3e2adbe21b71c05203e605","observation_id":"590daacd-3a21-460c-8a58-2d1efcae9570","resolution":{"observed_at":"2026-08-11T15:49:38.033030Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.915839Z","title":null,"venue":null,"work_id":"e1eb4c56-f55d-442e-a947-21e2ec8b195b","year":2024},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.040415Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:d03b4be2c4c3b5476f5f708cab83f4c8e8c1d076dc5e33491dcc65b2d6d3326c","observation_id":"b9c5f089-b40f-4354-9715-298ffaccd2e8","resolution":{"observed_at":"2026-08-11T15:49:38.921925Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.897759Z","title":null,"venue":null,"work_id":"2eebfdea-a54b-4925-9902-aae8f6f66b54","year":2021},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.046415Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:82fe496eccc4ceb014c4a26c29c65ca4545f9f3572f07fe3867cd5968cf11d50","observation_id":"37a98e4c-67e5-4991-bd4b-aa9f7799f3d6","resolution":{"observed_at":"2026-08-11T15:49:38.903125Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-11T15:49:38.053367Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.053367Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:fc87930cfcd1e36240e21267b6ea4570d843d19318ec2a19492899ff0ee52f20","observation_id":"6344458f-f3fe-4c42-89be-8a3ded512dfd","resolution":{"observed_at":"2026-08-11T15:49:38.053367Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.060002Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.060002Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:351373a797eaae39f242ee1316b10f0262c9785c92bd61b1768fa71fbc7fff6a","observation_id":"64e0022b-ed86-426e-91d0-425caed24e62","resolution":{"observed_at":"2026-08-11T15:49:38.060002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.065486Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.065486Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:c93d5cb82f7baf46da49c2f3455763da2df69ffe92f325e5db8ca8bef66d69d0","observation_id":"29f7255c-33bb-47be-bcb9-9275ee56365b","resolution":{"observed_at":"2026-08-11T15:49:38.065486Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.867978Z","title":null,"venue":null,"work_id":"65b2cb2e-095b-4ad2-945f-4b5663cdb762","year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.071690Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:9820ef6fc7cd22649c04342ce4b9fa53544e76daa57344f02d7913b38f3d2b55","observation_id":"315703e0-f13d-4a7a-ac48-e4533c307e94","resolution":{"observed_at":"2026-08-11T15:49:38.873612Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.850660Z","title":null,"venue":null,"work_id":"06f73445-a804-4288-b921-b81265ebfac6","year":2016},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.077542Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:c2036996b66dee408c64ba1cb4c72040e1ffff0c95442d5e56315f640ec0537f","observation_id":"ae564471-89a6-4872-ab29-395be8805a34","resolution":{"observed_at":"2026-08-11T15:49:38.855716Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.084030Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.084030Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:e106c331eed7d0e097d55e544cf116441d789be9e1c0e37a61c6939be0963f5e","observation_id":"a77f4d9e-2c52-4815-8a13-1d3175a035cd","resolution":{"observed_at":"2026-08-11T15:49:38.084030Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.089531Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.089531Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:cf99d21d91d4ca4115f8e4c68cd7c849b71adaf11a60c03797eacf34ae929ef3","observation_id":"e516fc74-c39e-49c4-923a-a630fca9aa71","resolution":{"observed_at":"2026-08-11T15:49:38.089531Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.02212","last_updated":"2025-01-24T19:04:04Z","snapshot_observed_at":"2026-07-06T17:24:53.368337Z","submitted_at":"2024-02-03T17:13:03Z","title":"A Survey to Recent Progress Towards Understanding In-Context Learning","version":3},"cited_work":{"arxiv_id":"2402.02212","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.02212","snapshot_observed_at":"2026-08-11T15:49:38.472263Z","title":"A Survey to Recent Progress Towards Understanding In-Context Learning","venue":"cs.CL","work_id":"e001b9ec-c757-4464-b33f-73ee23383cb9","year":2024},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.095467Z"},"links":{"cited_paper":"/paper/2402.02212","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:938712573ee9446effa0c26a5c3524d69b219ab2e9811d40ecd11eea7866a52a","observation_id":"3c4e867d-26d3-414d-b6a6-96ebbc586dbe","resolution":{"observed_at":"2026-08-11T15:49:38.480509Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.102029Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.102029Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:a6bf74f44c974e450504a02f50553ae8ae40e951c54bb44b7ef36c50edd12ded","observation_id":"b6d77e67-2190-4745-bf0a-9ebc952f877e","resolution":{"observed_at":"2026-08-11T15:49:38.102029Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.05946","last_updated":"2024-06-10T00:35:23Z","snapshot_observed_at":"2026-08-10T19:41:48.737592Z","submitted_at":"2024-06-10T00:35:23Z","title":"Safety Alignment Should Be Made More Than Just a Few Tokens Deep","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.05946","snapshot_observed_at":"2026-08-11T15:49:38.107884Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.107884Z"},"links":{"cited_paper":"/paper/2406.05946","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:9fde54eb52c607fa28183422ab940c342c38d57100c767e9356b8f77f273a0a9","observation_id":"145b31fa-30f6-441f-94bd-d45641ab7393","resolution":{"observed_at":"2026-08-11T15:49:38.107884Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.113896Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.113896Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:559fe8ba135bb2a98096e31ec7c09aa928f7c59aad5f08779d9b1bfd9c2089ba","observation_id":"210a6de6-285f-4077-9e65-f2c751926d31","resolution":{"observed_at":"2026-08-11T15:49:38.113896Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.119840Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.119840Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:7df0753e0289cc943d436453cbbe1d2d1c82ad0b76ce6b5d645485466ddc98ee","observation_id":"1dbf44a4-7499-4812-b352-ae7b8c3a89e6","resolution":{"observed_at":"2026-08-11T15:49:38.119840Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.00287","last_updated":"2023-12-30T17:37:06Z","snapshot_observed_at":"2026-08-11T13:17:53.774623Z","submitted_at":"2023-12-30T17:37:06Z","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.00287","snapshot_observed_at":"2026-08-11T15:49:38.125760Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.125760Z"},"links":{"cited_paper":"/paper/2401.00287","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:b91eb3a5ed2b29dd88a5d6b1100a5d5af693d5a34e791a101f5fe9cb5816284a","observation_id":"19caa072-27a4-4f51-85ed-b3d93f458b3a","resolution":{"observed_at":"2026-08-11T15:49:38.125760Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.131482Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.131482Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:99facaafd81e1cad924695e5da29b65d7b152067ef57b057ab225efca8e30f3f","observation_id":"3f58f37e-fe4a-4761-998b-eced70c43aa5","resolution":{"observed_at":"2026-08-11T15:49:38.131482Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.136544Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.136544Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:4ff466a15e1a683d93b5ccfb71434d998f708afb3bc8c117886ac532c1a7122d","observation_id":"8c07fc67-b080-4b5e-b5d2-05d3b864ad95","resolution":{"observed_at":"2026-08-11T15:49:38.136544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06387","last_updated":"2024-05-25T07:01:15Z","snapshot_observed_at":"2026-08-06T13:25:52.403871Z","submitted_at":"2023-10-10T07:50:29Z","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06387","snapshot_observed_at":"2026-08-11T15:49:38.142015Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.142015Z"},"links":{"cited_paper":"/paper/2310.06387","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:7816de1ed306bb28447b78dfb747797c214218902e92bdee75a54fe921529daa","observation_id":"6fedc0ca-9974-49fb-8a0f-8024c1a93efe","resolution":{"observed_at":"2026-08-11T15:49:38.142015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.148391Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.148391Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:c44be187b7b57061359b630929133867b69c47a78b71e57c43ccc9d370081d84","observation_id":"587ba05a-dec8-45d0-9151-6374562d3ae9","resolution":{"observed_at":"2026-08-11T15:49:38.148391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.14598","last_updated":"2025-03-01T21:45:36Z","snapshot_observed_at":"2026-08-10T23:28:14.284078Z","submitted_at":"2024-06-20T17:56:07Z","title":"SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.14598","snapshot_observed_at":"2026-08-11T15:49:38.154173Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.154173Z"},"links":{"cited_paper":"/paper/2406.14598","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:83f0873c7aa53f05a183d1a7578ca1c85588c623a500725800d9cbdddbd6c179","observation_id":"6722b334-6c11-4307-9ef3-bf97e4c0b209","resolution":{"observed_at":"2026-08-11T15:49:38.154173Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.763082Z","title":"An llm can fool itself: A prompt-based adversarial attack","venue":null,"work_id":"7fd32c7e-8a16-44cf-bcd0-809d48b06fd9","year":null},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.160892Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:ca9dfdab316513eb90d5358acec36bd5bbb79453a2b0a3237566027ee0e69fc2","observation_id":"49dfec1c-ae09-40bf-a4cd-4ef34ff234f1","resolution":{"observed_at":"2026-08-11T15:49:38.768863Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.167045Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.167045Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:e93751d4155a41615f6feba8af4c5f886afdc73c9531f368330328a0820ec0e5","observation_id":"b54371ea-5ff7-4d3c-a7df-ce7df814d617","resolution":{"observed_at":"2026-08-11T15:49:38.167045Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-11T15:49:38.172598Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.172598Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:1acd9b0729405488d504ab831aacafc80cc33db8d13617836575b07f0983ada9","observation_id":"88d00520-b6f8-43da-ab1d-1d84a517db43","resolution":{"observed_at":"2026-08-11T15:49:38.172598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.179437Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.179437Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:c3e53ead6841eddcc5d56bbe85cb97ed21f02c6498face8ad5a9f3f75da26fe3","observation_id":"be5651ec-42f8-400c-9d88-90059da9fa04","resolution":{"observed_at":"2026-08-11T15:49:38.179437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.15140","last_updated":"2023-12-14T06:22:51Z","snapshot_observed_at":"2026-08-03T19:47:58.067345Z","submitted_at":"2023-10-23T17:46:07Z","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.15140","snapshot_observed_at":"2026-08-11T15:49:38.186214Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.186214Z"},"links":{"cited_paper":"/paper/2310.15140","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:60da59c869edad28c66e8cd3128619d4dfe4ceef456936ec7d52ed13322ba9be","observation_id":"c67125cb-0e8a-4f01-944d-fdd8a3db0a57","resolution":{"observed_at":"2026-08-11T15:49:38.186214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-11T15:49:38.193238Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.193238Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:eb2c910c8b6eec2654cf2a80cd5e9094e49acfecff8ebd7e76eb7b5355a93107","observation_id":"2f10d8c8-723a-48c6-8800-565146e4e048","resolution":{"observed_at":"2026-08-11T15:49:38.193238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.200619Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.200619Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:9ccdf564becf9b24b6cc278352a2a106b1d426710bb908c143400fb5c2ebebd3","observation_id":"605d71d9-8ab6-4177-ab0f-b1a6971305aa","resolution":{"observed_at":"2026-08-11T15:49:38.200619Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:49:38.207015Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-11T15:49:38.207015Z"},"links":{"citing_paper":"/paper/2412.12192"},"observation_digest":"sha256:e9fe8e16985d1f00e1011e5348ef002ac1a6242d70761ba4c407c60b97b64189","observation_id":"99b2a46d-0d28-4bdc-ae0e-7259e990d1ef","resolution":{"observed_at":"2026-08-11T15:49:38.207015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2412.12192","last_updated":"2024-12-13T23:58:12Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-11T16:28:58.655337Z","submitted_at":"2024-12-13T23:58:12Z","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning"},"reference_resolution":{"displayed":37,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":35,"verified_exact":1,"verified_fuzzy":1},"total_outbound_references":37},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 0 inbound Pith citation observations for arXiv:2412.12192."}