{"as_of":"2026-08-20T09:10:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0c9299adea6bc4c8bc93c7b1e5d2b67e931e772e4550b06ffb90dad98cf4bbfb","coverage":[{"denominator":26,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":26,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T10:08:38.276511Z","state":"measured"},{"denominator":27,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":27,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-20T18:03:07.646917Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"cited_work":{"arxiv_id":"2504.19019","doi":"10.48550/arxiv.2504.19019","metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19019","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Graph of","venue":"ArXiv.org","work_id":"533eba2a-0f7e-4a45-832d-0d0bf33911b5","year":null},"citing_paper":{"arxiv_id":"2605.16551","last_updated":"2026-06-08T17:56:23Z","snapshot_observed_at":"2026-08-15T13:30:19.352299Z","submitted_at":"2026-05-15T18:50:43Z","title":"PQR: A Framework to Generate Diverse and Realistic User Queries that Elicit QA Agent Failures","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-05-20T18:03:07.646917Z"},"links":{"cited_paper":"/paper/2504.19019","citing_paper":"/paper/2605.16551"},"observation_digest":"sha256:0e3e4a3882e256f23e0ae612382469497e961c397d1bea6a8d4c7e4b88c91ab5","observation_id":"c8671530-3e35-41c0-90a5-b96d53df5514","resolution":{"observed_at":"2026-05-20T18:03:36.776688Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-05-24T00:53:08.765212+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T00:53:08.765212+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2504.19019/citation-record","integrity":"/paper/2504.19019/integrity","json":"/paper/2504.19019/citation-record.json","paper":"/paper/2504.19019"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s11948-022-00364-7","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.451613Z","title":"URL https://link.springer.com/article/10.1007/s11948-022-00364-7","venue":null,"work_id":"53029e42-6196-48a3-8e87-68e81ec454a7","year":null},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:37.952929Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:db7fbcef85dcc1fa8ebc0ced079865fe1f70893614004e05840a4060a526c433","observation_id":"12949660-9994-4df5-b3dc-21c004e38d33","resolution":{"observed_at":"2026-08-16T10:08:38.461100Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:37.964360Z","title":"doi: 10.18653/v1/2023.findings-emnlp.932","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:37.964360Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:ccc4ea31742710e0937db5f05e8628f1f1c01077a4e544ac9fd29d82cc5555a0","observation_id":"467a8fbb-4af0-4768-831a-9229636e7171","resolution":{"observed_at":"2026-08-16T10:08:37.964360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.901512Z","title":null,"venue":null,"work_id":"b53c178e-8989-4c07-b2fa-688a1d785bfb","year":2023},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:37.969253Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:d50ba3ea061a438d773cbf3d7c6c5051491b0054a3a815e88e4980fd6552c9d4","observation_id":"6cb19271-a66a-4edf-a2a3-1f6fcd6f4ce8","resolution":{"observed_at":"2026-08-16T10:08:38.920152Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:37.976972Z","title":"doi: 10.18653/v1/2023.acl-long.754","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:37.976972Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:af917e8bd1353dfd1d596a419c7c6385a9df888d543b6bab57bf1b37f7e482ce","observation_id":"cd5250e7-33bd-4b42-850d-20dc21e73ca9","resolution":{"observed_at":"2026-08-16T10:08:37.976972Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.884874Z","title":"Eric Wallace, Shi Feng, Nikhil Kandpal, Matt Gardner, and Sameer Singh","venue":null,"work_id":"58ff2aad-4c95-4e77-9027-47672d808e0d","year":2022},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:37.982898Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:68a74bd1deba5ce9125d1c8c95fefed40c3153869a787ce914a0645d8a26fd32","observation_id":"69d6aad1-3aae-4f74-9e71-3dc016ee9a8f","resolution":{"observed_at":"2026-08-16T10:08:38.889780Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.098320Z","title":"doi: 10.18653/v1/D19-1461","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.098320Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:3708f393ec236c533d14ed14db88490fcb30c34189eee6039f44856904532596","observation_id":"84e3cac8-4777-4ae9-92d8-4928c92545e0","resolution":{"observed_at":"2026-08-16T10:08:38.098320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.165350Z","title":"doi: 10.18653/v1/2021.naacl-main.235","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.165350Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:3214fa8d3e856642938deaf117f5f4832cdbbcf4b5e38e538cbe2024bbab99d8","observation_id":"39f9986c-e325-43a8-891a-2fbd9e8dfd3b","resolution":{"observed_at":"2026-08-16T10:08:38.165350Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.847375Z","title":"Reid Pryzant, Dan Iter, Jerry Li, Yin Lee, Chenguang Zhu, and Michael Zeng","venue":null,"work_id":"fe04e465-fd03-4cb4-9db1-16237e38da8c","year":2023},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.169979Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:28e5ab2d3214b8f2c08c56efdb5558b63d84f451f0219d3ea3b177629ec6639a","observation_id":"613e68f6-9ccb-472f-bdc1-c7ca97148e86","resolution":{"observed_at":"2026-08-16T10:08:38.853325Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.174154Z","title":"doi: 10.18653/v1/2023.emnlp-main.494","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.174154Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:aa686295f2aee75ed303111480527083d639c55afdc4b017c72301e58d7b0df6","observation_id":"c531a573-ec15-4747-aa5a-0498e1b63ec7","resolution":{"observed_at":"2026-08-16T10:08:38.174154Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.179479Z","title":"doi: 10.18653/v1/2020.emnlp-main.346","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.179479Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:0f9262af23627cfed19c735dfba015bd6b9edeb840311267eda22344bd841d35","observation_id":"3c201358-ebd2-436e-b9ed-1dbf97cfae98","resolution":{"observed_at":"2026-08-16T10:08:38.179479Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.829990Z","title":"Chain-of-thought prompting elicits reasoning in large language models","venue":null,"work_id":"02e67634-100a-49b0-9f36-e2c0f8c36f41","year":2022},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.185102Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:8fddc3cc813fc97f8d1ec059cc3f4795b9076045421d29fb172c81f4fe873c7c","observation_id":"e2e520cc-375f-4f4c-ab1b-f429b589bdd8","resolution":{"observed_at":"2026-08-16T10:08:38.835801Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.741784Z","title":"Sean Wu, Michael Koo, Lesley Blum, Andy Black, Liyo Kao, Fabien Scalzo, and Ira Kurtz","venue":null,"work_id":"3a9b4ed0-5ff6-4420-928a-d4f0be027897","year":2023},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.190481Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:1276aeaca1fa0a0fd62c5180d00ec3af966989bbb32a0f3f62791f9a07245c64","observation_id":"bd3e3366-5e87-40f7-9ad9-8338084c147b","resolution":{"observed_at":"2026-08-16T10:08:38.770663Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12893","last_updated":"2025-02-27T01:32:58Z","snapshot_observed_at":"2026-08-18T20:55:55.424089Z","submitted_at":"2025-02-18T14:29:12Z","title":"H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12893","snapshot_observed_at":"2026-08-16T10:08:38.200391Z","title":"Walker Spider","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.200391Z"},"links":{"cited_paper":"/paper/2502.12893","citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:1542a6df8866cd4a320f31cf79a126a201f728ce95337a526eb6338b13af2a69","observation_id":"c5ef1069-59aa-444d-b602-89dbe6be3b7d","resolution":{"observed_at":"2026-08-16T10:08:38.200391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.686321Z","title":"cc/paper_files/paper/2023/file/fd6613131889a4b656206c50a8bd7790-Paper-Conference.pdf","venue":null,"work_id":"dd8821c1-9986-4e31-a4eb-5d896c1f6d18","year":2023},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.206366Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:aa21c556241b4f595371b03474ef0a8150f8ccd929997983d480b8ffca345bfd","observation_id":"2bedfcb5-7707-4855-baab-7b73aee2666a","resolution":{"observed_at":"2026-08-16T10:08:38.693167Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.211124Z","title":"doi: 10.18653/v1/2024.acl-long.773","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.211124Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:280b0fb5533c512261a62e141afc34744451d4d3bb39dcaf03042597b21580cd","observation_id":"dc7bf599-49b2-4d19-8086-dda11735fdfc","resolution":{"observed_at":"2026-08-16T10:08:38.211124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.218933Z","title":"Ethan Perez, Saffron Huang, Francis Song, Trevor Cai, Roman Ring, John Aslanides, Amelia Glaese, Nat McAleese, and Geoffrey Irving","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.218933Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:9955f10284a42686e622850681d836e440f0a2d6dd8360885242b976b0d347aa","observation_id":"07a4c418-9f55-4c5e-8237-cfdbbb686d77","resolution":{"observed_at":"2026-08-16T10:08:38.218933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.224101Z","title":"doi: 10.18653/v1/2022.emnlp-main.225","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.224101Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:fd79a597c9cdcac646f419be411cbad3b6f84bcf13eff12a29558bede9200a7c","observation_id":"e0c84e73-d367-408b-a63d-297f88c73d90","resolution":{"observed_at":"2026-08-16T10:08:38.224101Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.670222Z","title":null,"venue":null,"work_id":"e1759b55-d258-4e42-bbe1-8592ba783501","year":2023},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.276511Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:1a2186cdee0d1c1dc504362fe30c05f6d03d23fa8fbfd08821bdf5398ec06e29","observation_id":"c1a15d8d-f52f-4203-83ca-b45ca3452211","resolution":{"observed_at":"2026-08-16T10:08:38.675413Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.228920Z","title":"doi: 10.18653/v1/P18-2006","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.228920Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:99ebe32905a2d30a4211890ece0a34894b0f3d9c0519f4e473cbd5a5387633cf","observation_id":"8ec28ee2-c048-4408-8712-c8949403abfc","resolution":{"observed_at":"2026-08-16T10:08:38.228920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:37.988832Z","title":"doi: 10.18653/v1/D19-1221","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:37.988832Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:74ea73e1c71c4fbfc24467d8e7676a1ac02d0b48ca024273a5d8a9c8b9ccda96","observation_id":"47e429f2-35ff-4f38-a9cb-b8aa2cd2f583","resolution":{"observed_at":"2026-08-16T10:08:37.988832Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.141110Z","title":"doi: 10.18653/v1/2020.acl-main.442","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.141110Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:676da4fb7ff44f0f9867c09040a4d72261e06a95558da32fbdb4f2ea286f7c63","observation_id":"39f32b0d-d0b2-42e1-8a86-c151b11568f3","resolution":{"observed_at":"2026-08-16T10:08:38.141110Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.867602Z","title":"press/v139/leino21a.html","venue":null,"work_id":"134188d8-3440-4937-ae89-f5b53406fd57","year":2019},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.036358Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:85a8adebfaf676189c45f360e05da44d140cd2916e12333b61332242f4beb549","observation_id":"411f126d-d1d2-4013-b57d-f7f466f1e3c4","resolution":{"observed_at":"2026-08-16T10:08:38.873502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:37.947146Z","title":"doi: 10.18653/v1/ 2022.acl-short.94","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:37.947146Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:67fe7be2b4798647930044bb1a57b70d79668a93adf7480cb22491658e602ca6","observation_id":"03f11b64-972f-44fd-acd3-fd54b741ed2c","resolution":{"observed_at":"2026-08-16T10:08:37.947146Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.940809Z","title":"Thorny roses: Investigating the dual use dilemma in natural language processing","venue":null,"work_id":"d3e67f50-4b2c-4c14-a412-b60609149dcc","year":2023},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:37.958667Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:cb21921d6e614591e31f3d5d12b9e0925b643c9b344ef13c5d0da840620d487a","observation_id":"7a21dce0-1890-4913-ac7d-7320ccc2a3b8","resolution":{"observed_at":"2026-08-16T10:08:38.953818Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:37.855493Z","title":"URL https://ojs.aaai.org/index.php/AAAI/ article/view/29720","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:37.855493Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:47f6de9918ded009833e743aba19e6076f46857bd8458733a2cecdb3d1b11877","observation_id":"54316ddb-ab7c-4826-bcfb-76d02dcb0334","resolution":{"observed_at":"2026-08-16T10:08:37.855493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T10:08:38.195470Z","title":"Martin Kuo, Jianyi Zhang, Aolin Ding, Qinsi Wang, Louis DiValentin, Yujia Bao, Wei Wei, Hai Li, and Yiran Chen","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-16T10:08:38.195470Z"},"links":{"citing_paper":"/paper/2504.19019"},"observation_digest":"sha256:b1e19a62c09fb1ab9039f6a8af82d809538ad2c4bfda710d73ed3e7b45a4e1f8","observation_id":"a0772dce-cafd-4a26-96b6-c694a7ee1034","resolution":{"observed_at":"2026-08-16T10:08:38.195470Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2504.19019","last_updated":"2025-04-26T21:06:03Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-16T18:04:34.123302Z","submitted_at":"2025-04-26T21:06:03Z","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs"},"reference_resolution":{"displayed":26,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":17,"verified_exact":1,"verified_fuzzy":7},"total_outbound_references":26},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 26 of 26 outbound references and 1 inbound Pith citation observation for arXiv:2504.19019."}