{"as_of":"2026-08-06T10:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e4174228ba129e8f9f90a2456cd2d4555295bc39c06552d0434e17bd46e2d5d6","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":10,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":10,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":10,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T00:32:03.417230Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-21T19:00:30.447057Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":"2502.11054","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reasoning- augmented conversation for multi-turn jailbreak attacks on large language models.arXiv preprint arXiv:2502.11054","venue":null,"work_id":"372055a2-ecb0-4d87-b2bc-3043018bb20a","year":2025},"citing_paper":{"arxiv_id":"2507.21540","last_updated":"2026-04-08T13:05:48Z","snapshot_observed_at":"2026-07-06T22:04:26.078628Z","submitted_at":"2025-07-29T07:13:56Z","title":"PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking","version":3},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-05-19T03:36:24.013477Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2507.21540"},"observation_digest":"sha256:b4fdab4df41040ce5c6671bdfd75470f30ca2429d1daf9b64386b809d04ecdef","observation_id":"f0597f8d-a61b-4cd1-9ea5-8607c0390048","resolution":{"observed_at":"2026-05-19T03:37:01.077330Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-08-05T10:39:06.923243Z","title":"Reasoning-augmented conversation for multi-turn jailbreak attacks on large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.03871","last_updated":"2025-09-04T04:12:31Z","snapshot_observed_at":"2026-08-05T10:38:56.478715Z","submitted_at":"2025-09-04T04:12:31Z","title":"A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models","version":1},"reference_index":114,"source":"pdf_text","source_observed_at":"2026-08-05T10:39:06.923243Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2509.03871"},"observation_digest":"sha256:1ed7071b36c1816d5ed26f2207771467429456b6cee5baf30c6c6104ffa94150","observation_id":"70120f4d-7fc7-4ce0-8cd6-2dfdf4e47a02","resolution":{"observed_at":"2026-08-05T10:39:06.923243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-08-05T05:29:20.764183Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-05T05:29:16.016752Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.764183Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:b5f1a44fd96047808ad02e68c1562bf8670da973a85ae9cba8aca7b6bab1576d","observation_id":"e3744395-287a-4ddc-9401-cb4a808358bb","resolution":{"observed_at":"2026-08-05T05:29:20.764183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-08-04T23:49:34.007406Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:34.007406Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:50b721a97587307d3f3145c3cfc29f9fdb4b2ce6769ebf8f92eccf792c7b3065","observation_id":"6192e4c4-7169-4b8a-a793-ee68d0708d74","resolution":{"observed_at":"2026-08-04T23:49:34.007406Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":"2502.11054","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reasoning- augmented conversation for multi-turn jailbreak attacks on large language models.arXiv preprint arXiv:2502.11054","venue":null,"work_id":"372055a2-ecb0-4d87-b2bc-3043018bb20a","year":2025},"citing_paper":{"arxiv_id":"2510.10073","last_updated":"2026-04-14T02:53:37Z","snapshot_observed_at":"2026-07-06T22:32:22.953630Z","submitted_at":"2025-10-11T07:18:12Z","title":"SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-05-18T08:14:51.102085Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2510.10073"},"observation_digest":"sha256:8c2c383368604b40d663482b81228b8a1f42b0a9cc368a78aed6e273770f5ac7","observation_id":"0ae7e906-c352-40a3-8435-e4336dc3f1f2","resolution":{"observed_at":"2026-05-18T08:16:06.448868Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":"2502.11054","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reasoning- augmented conversation for multi-turn jailbreak attacks on large language models.arXiv preprint arXiv:2502.11054","venue":null,"work_id":"372055a2-ecb0-4d87-b2bc-3043018bb20a","year":2025},"citing_paper":{"arxiv_id":"2511.12710","last_updated":"2026-05-18T06:50:41Z","snapshot_observed_at":"2026-07-06T22:35:55.936840Z","submitted_at":"2025-11-16T17:52:07Z","title":"Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-21T18:58:53.183734Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2511.12710"},"observation_digest":"sha256:18d85b71e00aa26d7bdc23d246c0aaa6ccff25ac245f44b541f7957894538a7a","observation_id":"212fcb51-1474-431f-ac30-ef30d680702d","resolution":{"observed_at":"2026-05-21T19:00:30.449178Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":"2502.11054","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reasoning- augmented conversation for multi-turn jailbreak attacks on large language models.arXiv preprint arXiv:2502.11054","venue":null,"work_id":"372055a2-ecb0-4d87-b2bc-3043018bb20a","year":2025},"citing_paper":{"arxiv_id":"2604.04488","last_updated":"2026-04-06T07:27:04Z","snapshot_observed_at":"2026-08-05T13:21:08.142791Z","submitted_at":"2026-04-06T07:27:04Z","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-10T20:14:02.553313Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2604.04488"},"observation_digest":"sha256:536b2a568cef2cfac8258b6ea15551e622c62c3a7503f078b5ed30d14477d0db","observation_id":"0dc9b91c-b678-49c9-9fde-92ef9ffee00a","resolution":{"observed_at":"2026-05-10T22:05:49.143728Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":"2502.11054","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reasoning- augmented conversation for multi-turn jailbreak attacks on large language models.arXiv preprint arXiv:2502.11054","venue":null,"work_id":"372055a2-ecb0-4d87-b2bc-3043018bb20a","year":2025},"citing_paper":{"arxiv_id":"2604.11309","last_updated":"2026-04-13T11:12:30Z","snapshot_observed_at":"2026-07-30T17:13:57.164751Z","submitted_at":"2026-04-13T11:12:30Z","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-10T16:07:31.602378Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2604.11309"},"observation_digest":"sha256:2a301b9972a433ea7fb04d1238004199b823e12923653a3b84844cc0333fe853","observation_id":"cc9f098e-a4ea-4d63-9b62-0369a862d744","resolution":{"observed_at":"2026-05-11T09:16:03.962259Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":"2502.11054","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reasoning- augmented conversation for multi-turn jailbreak attacks on large language models.arXiv preprint arXiv:2502.11054","venue":null,"work_id":"372055a2-ecb0-4d87-b2bc-3043018bb20a","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:cecd29204d93ecee39ea6407a043e214a0452a9aca3c16e32175c5deec95c1bd","observation_id":"3f6b16fc-7795-46cb-89c8-ca554c8d2a9b","resolution":{"observed_at":"2026-05-13T01:27:02.426264Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-08-06T00:32:03.417230Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01117","last_updated":"2026-08-02T09:24:08Z","snapshot_observed_at":"2026-08-06T10:14:48.841531Z","submitted_at":"2026-08-02T09:24:08Z","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T00:32:03.417230Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2608.01117"},"observation_digest":"sha256:a8fc372d6c4522c8b44127c2e2b2175db042596f00965708bed1c508f11af4de","observation_id":"ab8bfe1c-295d-4435-bdd2-caee2c1d7bf3","resolution":{"observed_at":"2026-08-06T00:32:03.417230Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2502.11054/citation-record","integrity":"/paper/2502.11054/integrity","json":"/paper/2502.11054/citation-record.json","paper":"/paper/2502.11054"},"outbound":[],"paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","latest_version":4,"primary_category":"cs.CL","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 10 inbound Pith citation observations for arXiv:2502.11054."}