{"as_of":"2026-08-05T22:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b8a3ece56f48e2a792c60171740e826026ebd5808cc15b7eedcb43744a8eb353","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T01:16:12.344757Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T04:09:34.490736Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-02T12:09:36.861596Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-08-02T23:16:37.266923Z","title":"and Arel, R","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.14399","last_updated":"2026-05-28T04:31:34Z","snapshot_observed_at":"2026-08-02T23:16:31.816367Z","submitted_at":"2026-02-16T02:15:58Z","title":"Multi-Turn Adaptive Prompting Attack on Large Vision-Language Models","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T23:16:37.266923Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2602.14399"},"observation_digest":"sha256:6b691fb4a7b83673fa4c0bab629b59f05ed05a44875b9bc24d79465183013b1f","observation_id":"00241a2f-ca3c-41a2-a0f1-76fda022f846","resolution":{"observed_at":"2026-08-02T23:16:37.266923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-02T12:09:36.861596Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":"2503.10619","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-07-04T04:09:34.490736Z","title":"Siege: Autonomous multi-turn jailbreaking of large language models with tree search","venue":null,"work_id":"a422fb6d-f9ef-4193-8747-f6931bc43630","year":2025},"citing_paper":{"arxiv_id":"2604.04060","last_updated":"2026-04-05T11:06:13Z","snapshot_observed_at":"2026-08-02T08:01:35.924581Z","submitted_at":"2026-04-05T11:06:13Z","title":"CoopGuard: Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Round Attacks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-13T17:06:46.917177Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2604.04060"},"observation_digest":"sha256:d22f7535a9eb86d6225fabf570642d542b8556a7952cbc8e21cb95a77b125319","observation_id":"60c8bc56-eba8-4e57-ad09-b85ac467a866","resolution":{"observed_at":"2026-05-13T17:08:00.744766Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-02T12:09:36.861596Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":"2503.10619","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-07-04T04:09:34.490736Z","title":"Siege: Autonomous multi-turn jailbreaking of large language models with tree search","venue":null,"work_id":"a422fb6d-f9ef-4193-8747-f6931bc43630","year":2025},"citing_paper":{"arxiv_id":"2604.10326","last_updated":"2026-04-11T19:19:05Z","snapshot_observed_at":"2026-07-06T22:59:01.129724Z","submitted_at":"2026-04-11T19:19:05Z","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-05-10T15:19:46.920899Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2604.10326"},"observation_digest":"sha256:b17e4667ba63fcf2c187557d20f5b1809f5f97723d96c8b54add9241cf2dfbc1","observation_id":"94ea1ed8-5907-4a23-9283-27f0b9c9f27d","resolution":{"observed_at":"2026-05-11T10:46:04.396391Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-02T12:09:36.861596Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":"2503.10619","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-07-04T04:09:34.490736Z","title":"Siege: Autonomous multi-turn jailbreaking of large language models with tree search","venue":null,"work_id":"a422fb6d-f9ef-4193-8747-f6931bc43630","year":2025},"citing_paper":{"arxiv_id":"2604.11309","last_updated":"2026-04-13T11:12:30Z","snapshot_observed_at":"2026-07-30T17:13:57.164751Z","submitted_at":"2026-04-13T11:12:30Z","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-10T16:07:31.602378Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2604.11309"},"observation_digest":"sha256:d0147bee8f6f04ba07c23d10a013906d4f852aea4bd34d2fd9e88ff864489f31","observation_id":"327a4694-66bf-4d44-aebf-d2abf2b97f8c","resolution":{"observed_at":"2026-05-11T09:16:04.018620Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-02T12:09:36.861596Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":"2503.10619","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-07-04T04:09:34.490736Z","title":"Siege: Autonomous multi-turn jailbreaking of large language models with tree search","venue":null,"work_id":"a422fb6d-f9ef-4193-8747-f6931bc43630","year":2025},"citing_paper":{"arxiv_id":"2605.05058","last_updated":"2026-05-06T15:53:17Z","snapshot_observed_at":"2026-07-06T23:17:43.402046Z","submitted_at":"2026-05-06T15:53:17Z","title":"SoK: Robustness in Large Language Models against Jailbreak Attacks","version":1},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-05-08T16:42:41.137808Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2605.05058"},"observation_digest":"sha256:f5252606d213909fde2f8e0300f651dd4cf2f9380eef85765b374344cf841ac4","observation_id":"71308c43-9c63-49b1-91d1-173514c5c98b","resolution":{"observed_at":"2026-05-11T18:01:08.798710Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-02T12:09:36.861596Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":"2503.10619","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-07-04T04:09:34.490736Z","title":"Siege: Autonomous multi-turn jailbreaking of large language models with tree search","venue":null,"work_id":"a422fb6d-f9ef-4193-8747-f6931bc43630","year":2025},"citing_paper":{"arxiv_id":"2606.20408","last_updated":"2026-06-19T01:38:27Z","snapshot_observed_at":"2026-08-03T15:44:02.265910Z","submitted_at":"2026-06-18T15:57:53Z","title":"NRT-Bench: Benchmarking Multi-Turn Red-Teaming of LLM Operator Agents in Safety-Critical Control Rooms","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-26T17:13:26.201462Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2606.20408"},"observation_digest":"sha256:6fa89732adaf1b4171612673a2d1b205ab0c045cd79852f7327c1d0420577489","observation_id":"9a436609-e5ba-4ade-9b4f-0c3becbc2a21","resolution":{"observed_at":"2026-07-04T04:09:34.492676Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-02T12:09:36.861596Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-07-30T20:11:00.877932Z","title":"arXiv preprint arXiv:2503.10619 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.26820","last_updated":"2026-07-29T12:14:23Z","snapshot_observed_at":"2026-08-02T13:21:32.609278Z","submitted_at":"2026-07-29T12:14:23Z","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-07-30T20:11:00.877932Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2607.26820"},"observation_digest":"sha256:0edf620461dffc9514fe4e489ca44b8a702d6c4327887aeb462782ed470e5af9","observation_id":"0baaf9e3-a3da-45fd-9117-c5c074ef5db7","resolution":{"observed_at":"2026-07-30T20:11:00.877932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","snapshot_observed_at":"2026-08-02T12:09:36.861596Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.10619","snapshot_observed_at":"2026-08-04T01:16:12.344757Z","title":"Siege: Autonomous multi-turn jailbreaking of large language models with tree search,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00134","last_updated":"2026-07-31T14:04:49Z","snapshot_observed_at":"2026-08-05T22:14:41.938054Z","submitted_at":"2026-07-31T14:04:49Z","title":"Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:12.344757Z"},"links":{"cited_paper":"/paper/2503.10619","citing_paper":"/paper/2608.00134"},"observation_digest":"sha256:ec253003c33cde4b8d339d3c46c234c671287ff0e89811fdc051597ebb92836b","observation_id":"bec4a2cb-5209-4cbe-9ebe-e9c849fb47d7","resolution":{"observed_at":"2026-08-04T01:16:12.344757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2503.10619/citation-record","integrity":"/paper/2503.10619/integrity","json":"/paper/2503.10619/citation-record.json","paper":"/paper/2503.10619"},"outbound":[],"paper":{"arxiv_id":"2503.10619","last_updated":"2025-05-28T09:31:33Z","latest_version":5,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-02T12:09:36.861596Z","submitted_at":"2025-03-13T17:57:32Z","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2503.10619."}