{"as_of":"2026-08-12T21:24:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e8b6b8c298d9558d9f715edb697761dcd62d3138450afa8ba9d6461969c17111","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T05:31:31.746425Z","state":"measured"},{"denominator":48,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":48,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-26T04:35:51.583460Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"cited_work":{"arxiv_id":"2412.17522","doi":"10.48550/arxiv.2412.17522","metadata_source":"arxiv_reference","pith_arxiv_id":"2412.17522","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"DiffusionAttacker: Diffusion-driven prompt manipulation for LLM jailbreak","venue":"arXiv (Cornell University)","work_id":"67b389a0-c5b5-47af-ad51-1265ba8d2870","year":null},"citing_paper":{"arxiv_id":"2606.26566","last_updated":"2026-06-25T03:32:12Z","snapshot_observed_at":"2026-08-03T17:22:40.185111Z","submitted_at":"2026-06-25T03:32:12Z","title":"Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-06-26T04:35:51.583460Z"},"links":{"cited_paper":"/paper/2412.17522","citing_paper":"/paper/2606.26566"},"observation_digest":"sha256:e6f618cf7a35019fe4715e777202d6d95fea622dfbb60c83df6b7b102bc28039","observation_id":"2bce4872-3f11-43f0-a1a1-be8949728b2f","resolution":{"observed_at":"2026-06-26T04:38:59.152801Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2412.17522/citation-record","integrity":"/paper/2412.17522/integrity","json":"/paper/2412.17522/citation-record.json","paper":"/paper/2412.17522"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:32.363455Z","title":null,"venue":null,"work_id":"9f5df181-dd89-4831-9466-fbd70a8127e3","year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.547505Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:dea2ca0a78f7180fb4a6e05a09d1677517c9daf9a0a30bba58c3d6fb7fc89845","observation_id":"05eed926-717a-4a11-9f32-31b84cfff728","resolution":{"observed_at":"2026-08-11T05:31:32.367338Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-08-12T12:29:45.113982Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-11T05:31:31.552515Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.552515Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:fdeea43cf032c9536baafe790e531960f9fa7541837f07560892dafd0285d794","observation_id":"d86034da-2d3c-4d3a-86d2-3a939443e31f","resolution":{"observed_at":"2026-08-11T05:31:31.552515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:31.557406Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.557406Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:84c2c668910e13481ceddd4777ad7078010a856a6a629a6e138d5d2f7288005d","observation_id":"78d196db-ad97-49f7-871d-c73f7150d652","resolution":{"observed_at":"2026-08-11T05:31:31.557406Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.12773","last_updated":"2023-10-19T14:22:03Z","snapshot_observed_at":"2026-08-02T16:56:38.535065Z","submitted_at":"2023-10-19T14:22:03Z","title":"Safe RLHF: Safe Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.12773","snapshot_observed_at":"2026-08-11T05:31:31.562431Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.562431Z"},"links":{"cited_paper":"/paper/2310.12773","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:b59d5d356e2e880e8ab11b88b9d6e17dd9b413e2713336f4ec1959c673572c83","observation_id":"258167ae-6509-46a5-a8b7-a21c722cad5d","resolution":{"observed_at":"2026-08-11T05:31:31.562431Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02164","last_updated":"2020-03-03T05:33:49Z","snapshot_observed_at":"2026-08-09T12:15:11.395844Z","submitted_at":"2019-12-04T18:32:15Z","title":"Plug and Play Language Models: A Simple Approach to Controlled Text Generation","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.02164","snapshot_observed_at":"2026-08-11T05:31:31.567234Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.567234Z"},"links":{"cited_paper":"/paper/1912.02164","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:d474bef56a6054a59bbbe8ce7ea023c2634349cad749d66f2027df7cfe532487","observation_id":"dbdd6212-9106-47a2-85fd-dbd762144e02","resolution":{"observed_at":"2026-08-11T05:31:31.567234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-08-10T16:40:37.411115Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-11T05:31:31.571939Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.571939Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:4ac0920f1ac1a1fdf3b29d07b98662177c2347a5a65ab01e345dbf66d5f75d15","observation_id":"e8d74daa-42c4-4fdf-a5d3-e7f0ccd4df6b","resolution":{"observed_at":"2026-08-11T05:31:31.571939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09154","last_updated":"2025-03-03T09:37:27Z","snapshot_observed_at":"2026-08-11T19:01:01.520834Z","submitted_at":"2024-02-14T13:13:26Z","title":"Attacking Large Language Models with Projected Gradient Descent","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09154","snapshot_observed_at":"2026-08-11T05:31:31.576750Z","title":"a ger, MHI Abdalla, Johannes Gasteiger, and Stephan G \\","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.576750Z"},"links":{"cited_paper":"/paper/2402.09154","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:ffae11699ab068d6e6194f134f31a13e1d7bf8a69a8bd80ebec2539d925740f4","observation_id":"66422da4-9284-4434-adf0-a283237a2e44","resolution":{"observed_at":"2026-08-11T05:31:31.576750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.08933","last_updated":"2023-02-14T06:45:49Z","snapshot_observed_at":"2026-07-06T14:06:34.310083Z","submitted_at":"2022-10-17T10:49:08Z","title":"DiffuSeq: Sequence to Sequence Text Generation with Diffusion Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.08933","snapshot_observed_at":"2026-08-11T05:31:31.581240Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.581240Z"},"links":{"cited_paper":"/paper/2210.08933","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:b8418124cbb346f9a7a34de12b8785e4a11a2eb6d1afd734ba3c4646d4af9edf","observation_id":"3bf966e1-90ab-4a5c-a92e-c23584959e55","resolution":{"observed_at":"2026-08-11T05:31:31.581240Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.13733","last_updated":"2021-04-15T17:43:43Z","snapshot_observed_at":"2026-08-11T10:07:49.426481Z","submitted_at":"2021-04-15T17:43:43Z","title":"Gradient-based Adversarial Attacks against Text Transformers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.13733","snapshot_observed_at":"2026-08-11T05:31:31.585911Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.585911Z"},"links":{"cited_paper":"/paper/2104.13733","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:885b879d416208ad42096ff3b750fe30fb18d881176814c7e229b8beb5892127","observation_id":"a625f936-e936-46ac-aa9b-eb391abd8c0d","resolution":{"observed_at":"2026-08-11T05:31:31.585911Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08679","last_updated":"2024-06-07T00:13:08Z","snapshot_observed_at":"2026-08-10T03:24:28.404754Z","submitted_at":"2024-02-13T18:58:48Z","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08679","snapshot_observed_at":"2026-08-11T05:31:31.589895Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.589895Z"},"links":{"cited_paper":"/paper/2402.08679","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:015c4541205f84c4b26820843b281445c7c033f98be317e236ed6ec946db4db8","observation_id":"da67d322-0dc0-48f2-9877-299b2f4e60d8","resolution":{"observed_at":"2026-08-11T05:31:31.589895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:31.593737Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.593737Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:863b1227dcf5ef13a6c685387332ff4ec58f77346b934f1c163280308cb26db1","observation_id":"87a80c1c-6819-4178-863c-700e4be298ea","resolution":{"observed_at":"2026-08-11T05:31:31.593737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.15029","last_updated":"2022-11-30T15:41:24Z","snapshot_observed_at":"2026-08-04T09:42:38.461420Z","submitted_at":"2022-11-28T03:25:49Z","title":"DiffusionBERT: Improving Generative Masked Language Models with Diffusion Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.15029","snapshot_observed_at":"2026-08-11T05:31:31.597821Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.597821Z"},"links":{"cited_paper":"/paper/2211.15029","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:c43cd05d2ea0f792c1cf1d29f791d55f53cc3371ab8ce4b47f4416922c259a40","observation_id":"e3bd28ae-2b37-46ff-85b3-1c348a424fd6","resolution":{"observed_at":"2026-08-11T05:31:31.597821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:31.601771Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.601771Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:c485d6b0f158100d9b8ca8c6d4f00afea06616823a79b6a1399d4363f630aecb","observation_id":"cc28aa36-56b9-442a-a3b2-78a3b6ede325","resolution":{"observed_at":"2026-08-11T05:31:31.601771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-11T05:31:31.605922Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.605922Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:a6574bc6a820ca5bd6eb70eef1a31377962b80ec2b8125c7e90addfb26d97f0e","observation_id":"85f2a65b-4279-44a0-961b-73e8828e3f89","resolution":{"observed_at":"2026-08-11T05:31:31.605922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01144","last_updated":"2017-08-05T22:45:19Z","snapshot_observed_at":"2026-08-01T18:34:23.156273Z","submitted_at":"2016-11-03T19:48:08Z","title":"Categorical Reparameterization with Gumbel-Softmax","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01144","snapshot_observed_at":"2026-08-11T05:31:31.610328Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.610328Z"},"links":{"cited_paper":"/paper/1611.01144","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:d12972dd5c86de06d32c3bcb612ea4461b7cc217bc3c545e3ceb3d3bfffe0e21","observation_id":"35f622f5-f28a-4d20-8c9b-2b2922760e8a","resolution":{"observed_at":"2026-08-11T05:31:31.610328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06825","last_updated":"2023-10-10T17:54:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-10T17:54:58Z","title":"Mistral 7B","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06825","snapshot_observed_at":"2026-08-11T05:31:31.614678Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.614678Z"},"links":{"cited_paper":"/paper/2310.06825","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:7ea80dcb4d8fa97f3aff05101569a3371b59c0fb43136461ca9c8cbfce0672af","observation_id":"0904a54e-2896-4d2d-9875-522f8232332b","resolution":{"observed_at":"2026-08-11T05:31:31.614678Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:32.323521Z","title":null,"venue":null,"work_id":"d49db262-d139-4266-b8a6-add848a9bcc5","year":2021},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.618979Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:336315aad0e00ab381bcdd7c6ad923de5a2c1cb2d02af8b1f0e133126b59ff7e","observation_id":"68185f2f-8481-4f23-bf10-81b2a288b926","resolution":{"observed_at":"2026-08-11T05:31:32.327797Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:32.308029Z","title":null,"venue":null,"work_id":"2ffb080d-73ef-4867-9aa1-9fc4eb063527","year":2022},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.623159Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:1586c35fe1b738d1832732dc196e1b4d84467eb5ffc038c31d7dbd5af0a8d3f8","observation_id":"9142b51b-2d74-46a8-87c2-d5258cd8c6a7","resolution":{"observed_at":"2026-08-11T05:31:32.313078Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:32.292745Z","title":null,"venue":null,"work_id":"0b2deb40-b383-42a7-9fb4-b4f0dbe5c1fd","year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.627132Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:6acfcae75e8b3c90cc206d98b9ebcca68085ce20e709a6952bb68e038332ea11","observation_id":"b98a1bfc-e124-4bc0-ab30-ffa5a97e37a9","resolution":{"observed_at":"2026-08-11T05:31:32.297780Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-11T05:31:31.631402Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.631402Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:967c5b0dff354e5db493730abaf4baf9a8545cb4387811137ac0e2d0688fc0d1","observation_id":"77ae4c2d-05d4-4ae1-aec4-21d7c24972ae","resolution":{"observed_at":"2026-08-11T05:31:31.631402Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:31.635839Z","title":"Discrete diffusion modeling by estimating the ratios of the data distribution","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.635839Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:964df7fae136ccfeca46da3249001bdc97f2fc3a99ee9358d99bf8a300b40bb0","observation_id":"53768670-84d1-4730-be5b-172b034e4a1b","resolution":{"observed_at":"2026-08-11T05:31:31.635839Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:32.268434Z","title":null,"venue":null,"work_id":"46e9bcc9-6893-4b6b-b9eb-b25a177e6668","year":2024},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.640070Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:7b3e41c1c91e3ff707573568f8cc1b7521ddb3c55d70149686d4377605cac3cf","observation_id":"6d435254-a92a-4b2e-bf17-e1230535c943","resolution":{"observed_at":"2026-08-11T05:31:32.273069Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-08-11T05:31:31.644331Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.644331Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:3187966ad1b68044d18e0d5627a68952103984850b2ff2b8d13ae18eccedf76a","observation_id":"ea4e34ad-780a-441c-b28b-86fd8c9742fc","resolution":{"observed_at":"2026-08-11T05:31:31.644331Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:31.649193Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.649193Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:c1e69a0435f58808a42b73dcb801269e1d85b32f8784f3a3129dcd8e38b2f441","observation_id":"f72979ca-8f07-469a-a2e3-dfbd03e41ae3","resolution":{"observed_at":"2026-08-11T05:31:31.649193Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16873","last_updated":"2025-06-02T18:59:01Z","snapshot_observed_at":"2026-08-05T10:26:02.067012Z","submitted_at":"2024-04-21T22:18:13Z","title":"AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16873","snapshot_observed_at":"2026-08-11T05:31:31.653316Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.653316Z"},"links":{"cited_paper":"/paper/2404.16873","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:d84c0a1bd3edde7ad4ebe1964757b907676318ed32926893b505ea6b1228c1f2","observation_id":"70337389-7629-4802-b532-15ef011f6c38","resolution":{"observed_at":"2026-08-11T05:31:31.653316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05467","last_updated":"2024-02-08T07:56:49Z","snapshot_observed_at":"2026-08-10T05:14:33.970359Z","submitted_at":"2024-02-08T07:56:49Z","title":"Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05467","snapshot_observed_at":"2026-08-11T05:31:31.657432Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.657432Z"},"links":{"cited_paper":"/paper/2402.05467","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:d21b77c5dd970623a5746d982bfc948764d1459989f86f7f3ef5016be596ed08","observation_id":"6820cef2-53ea-4c85-bf2e-f59dea371f3f","resolution":{"observed_at":"2026-08-11T05:31:31.657432Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.15980","last_updated":"2020-11-07T05:33:35Z","snapshot_observed_at":"2026-08-05T14:17:34.026911Z","submitted_at":"2020-10-29T22:54:00Z","title":"AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.15980","snapshot_observed_at":"2026-08-11T05:31:31.661915Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.661915Z"},"links":{"cited_paper":"/paper/2010.15980","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:d6ac44eca07a15c1a61dabf35155f9368189bef4d0ec30be2ea1516a3a5685f2","observation_id":"5c9f58f2-c56e-4cdf-873c-0ceb2da7249f","resolution":{"observed_at":"2026-08-11T05:31:31.661915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:31.666471Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.666471Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:1040e0e737d06f6b1d996f40b13ccd736440df475e2170c9759939efd910de2e","observation_id":"90fed09a-a740-4dd2-aea9-1d53338de80e","resolution":{"observed_at":"2026-08-11T05:31:31.666471Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:31.670815Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.670815Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:1364242a94300f23c8d726f74fadd6b6cfcfe86ff8b0f745dadcc7434f655758","observation_id":"0dce9e06-85cc-4585-868c-2b24b4433b98","resolution":{"observed_at":"2026-08-11T05:31:31.670815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:32.227648Z","title":null,"venue":null,"work_id":"b0346447-2c42-4d16-8826-e626d8b1cca0","year":2024},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.674786Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:f333207020021b7e3da53ae9beaebfedd6c3ccd55c063a22aa94f55cad48ac4f","observation_id":"6013bc43-a3d9-40b3-b904-79138c4dfd7a","resolution":{"observed_at":"2026-08-11T05:31:32.232860Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04160","last_updated":"2024-02-06T17:18:25Z","snapshot_observed_at":"2026-08-10T04:16:53.890016Z","submitted_at":"2024-02-06T17:18:25Z","title":"Harnessing the Plug-and-Play Controller by Prompting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04160","snapshot_observed_at":"2026-08-11T05:31:31.678401Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.678401Z"},"links":{"cited_paper":"/paper/2402.04160","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:d91391f6db53fe9aacc3e48793ee9f9f8bb306b8370cc4462f393185286c8a9a","observation_id":"ac8622cd-3341-4e7c-8dc7-02b0d9625542","resolution":{"observed_at":"2026-08-11T05:31:31.678401Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.12966","last_updated":"2023-07-24T17:44:58Z","snapshot_observed_at":"2026-08-11T19:09:11.098841Z","submitted_at":"2023-07-24T17:44:58Z","title":"Aligning Large Language Models with Human: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.12966","snapshot_observed_at":"2026-08-11T05:31:31.682237Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.682237Z"},"links":{"cited_paper":"/paper/2307.12966","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:c9cb5a6e458f337cddce88ee580ec7e5630eb9c2ae013f63a86c1613bbf037db","observation_id":"fba8892d-4e71-4bd4-8f40-9fa3d6560746","resolution":{"observed_at":"2026-08-11T05:31:31.682237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:31.686323Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.686323Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:ee51a85f169622724ecb093f43a38019642579a7e41e6794836131729bb8a25d","observation_id":"cd4f495d-a951-47e0-9bb6-39d5b07c78c7","resolution":{"observed_at":"2026-08-11T05:31:31.686323Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.16656","last_updated":"2024-01-30T01:19:25Z","snapshot_observed_at":"2026-08-09T23:54:56.266650Z","submitted_at":"2024-01-30T01:19:25Z","title":"Gradient-Based Language Model Red Teaming","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.16656","snapshot_observed_at":"2026-08-11T05:31:31.689991Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.689991Z"},"links":{"cited_paper":"/paper/2401.16656","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:447ac59451af5e8d4c2ce18c6c1c02104f43f7a701f0271a78ca093b0ac5a8b7","observation_id":"2554d994-edb1-44ee-bc37-68b81b04d58f","resolution":{"observed_at":"2026-08-11T05:31:31.689991Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:32.203789Z","title":null,"venue":null,"work_id":"84905566-c713-4ad0-aa71-27e94251e4cf","year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.693751Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:862d5e431cec6855965d736bca5ac1572ff9776ac683c28ac99cf081507f92fe","observation_id":"0d762d3c-4214-4523-b47c-f83939a6c613","resolution":{"observed_at":"2026-08-11T05:31:32.209076Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.14393","last_updated":"2025-04-19T05:03:00Z","snapshot_observed_at":"2026-08-08T13:18:17.859336Z","submitted_at":"2024-06-20T15:12:27Z","title":"Jailbreaking as a Reward Misspecification Problem","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.14393","snapshot_observed_at":"2026-08-11T05:31:31.697628Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.697628Z"},"links":{"cited_paper":"/paper/2406.14393","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:8d649a9f3792cbfe7a8b5789f5d28f228eda74cd97a4e239bba124fbc118d43f","observation_id":"b92edd19-5e98-4337-91f6-107f28fbfbc0","resolution":{"observed_at":"2026-08-11T05:31:31.697628Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:32.186804Z","title":null,"venue":null,"work_id":"c9c49d72-6ab3-4aed-afd8-d5d888eea6ee","year":2021},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.701971Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:7e9a9a52a1931aa36fe997fa5b266e734d826e6c71f5a786a83a4360085bafd3","observation_id":"002b8ce0-ef96-4d78-80de-b2de3873f9af","resolution":{"observed_at":"2026-08-11T05:31:32.192862Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.10025","last_updated":"2024-05-01T02:58:30Z","snapshot_observed_at":"2026-07-06T14:53:42.192162Z","submitted_at":"2023-02-20T15:14:46Z","title":"DINOISER: Diffused Conditional Sequence Learning by Manipulating Noises","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.10025","snapshot_observed_at":"2026-08-11T05:31:31.706019Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.706019Z"},"links":{"cited_paper":"/paper/2302.10025","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:9a6352872f63a9b84ee3435b4d8adb4352b5b1ff5dc7b348d2e20f3f962e80ba","observation_id":"a5b11e94-ed15-4d34-abee-79438d50a299","resolution":{"observed_at":"2026-08-11T05:31:31.706019Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.06463","last_updated":"2024-03-26T04:23:12Z","snapshot_observed_at":"2026-07-06T16:05:31.757410Z","submitted_at":"2023-08-12T04:05:57Z","title":"GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.06463","snapshot_observed_at":"2026-08-11T05:31:31.710393Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.710393Z"},"links":{"cited_paper":"/paper/2308.06463","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:f8b78c9806aebc2026d351a2a757be5de532deeb0061027909a660154bcd9486","observation_id":"51edbe05-782d-44f1-9cf5-0b0c48e7f1b8","resolution":{"observed_at":"2026-08-11T05:31:31.710393Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06373","last_updated":"2024-01-23T22:46:12Z","snapshot_observed_at":"2026-08-10T11:13:59.778209Z","submitted_at":"2024-01-12T16:13:24Z","title":"How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.06373","snapshot_observed_at":"2026-08-11T05:31:31.714580Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.714580Z"},"links":{"cited_paper":"/paper/2401.06373","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:16d44ae48c0ebb949dc101b0861763ea8ef5e6e45c44009eb407a2a1b6905405","observation_id":"dc37adfd-afe1-43ec-b639-b5a76c831ed9","resolution":{"observed_at":"2026-08-11T05:31:31.714580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1904.01130","last_updated":"2019-04-01T22:21:14Z","snapshot_observed_at":"2026-08-10T07:57:27.021286Z","submitted_at":"2019-04-01T22:21:14Z","title":"PAWS: Paraphrase Adversaries from Word Scrambling","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.01130","snapshot_observed_at":"2026-08-11T05:31:31.718925Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.718925Z"},"links":{"cited_paper":"/paper/1904.01130","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:a404b29f5b4b52e6bdf8a09b845f70ccaa5e555ed30ec6a1ab14938a69302efe","observation_id":"5ce9537d-bafe-470d-a4f3-6956a74756c9","resolution":{"observed_at":"2026-08-11T05:31:31.718925Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.18018","last_updated":"2024-06-03T06:52:58Z","snapshot_observed_at":"2026-08-09T19:38:39.757845Z","submitted_at":"2024-01-31T17:28:24Z","title":"On Prompt-Driven Safeguarding for Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.18018","snapshot_observed_at":"2026-08-11T05:31:31.723417Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.723417Z"},"links":{"cited_paper":"/paper/2401.18018","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:7657832bda86cc198f57fae3ed60e889d225c90a9d26d33e3ac0f5aa28f8ae35","observation_id":"792fd9b5-499f-4abc-946a-4f9c4d7886a5","resolution":{"observed_at":"2026-08-11T05:31:31.723417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.15140","last_updated":"2023-12-14T06:22:51Z","snapshot_observed_at":"2026-08-03T19:47:58.067345Z","submitted_at":"2023-10-23T17:46:07Z","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.15140","snapshot_observed_at":"2026-08-11T05:31:31.727827Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.727827Z"},"links":{"cited_paper":"/paper/2310.15140","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:089c6bf19a2ff44e482bc89e28c7eaaa3b5accf30438195e647bdaeff1bcb381","observation_id":"1d167eb0-6339-4370-b193-4b6957f5d2b3","resolution":{"observed_at":"2026-08-11T05:31:31.727827Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:31.732594Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.732594Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:5c8965eef932343caca542c4c25c9f882864f8ea6c21739df66b30efba560d57","observation_id":"4d06e451-8927-46e8-8431-35398126ba2c","resolution":{"observed_at":"2026-08-11T05:31:31.732594Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-11T05:31:31.736732Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.736732Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:128e7ed5dfaa40dbb60343586c6d756464819934ff09237abcdea048173f2b6e","observation_id":"1c5f40b0-75db-4879-8887-5808a8f13fd3","resolution":{"observed_at":"2026-08-11T05:31:31.736732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:31.741097Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.741097Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:eeaaf688c9995e1bb5c3f12fe9a3f8c17426968d8eefe24ed94e64a9a65963b3","observation_id":"4edaf3b3-6454-45a2-bb4d-aa914f95184e","resolution":{"observed_at":"2026-08-11T05:31:31.741097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:31:31.746425Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak","version":2},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-11T05:31:31.746425Z"},"links":{"citing_paper":"/paper/2412.17522"},"observation_digest":"sha256:609c287c620845a7a6efe7a0920dd24e2e65e99de7e2e610d1a35591560f2d62","observation_id":"c12655af-315a-4027-b665-8530a972e3e1","resolution":{"observed_at":"2026-08-11T05:31:31.746425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2412.17522","last_updated":"2025-01-05T04:44:32Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-11T19:02:05.325707Z","submitted_at":"2024-12-23T12:44:54Z","title":"DiffusionAttacker: Diffusion-Driven Prompt Manipulation for LLM Jailbreak"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":47,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 1 inbound Pith citation observation for arXiv:2412.17522."}