{"as_of":"2026-08-17T12:22:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a85618dce818216ed4e4246b2480ff7cddccf90d575aa1c2a70b7eb905fd4780","coverage":[{"denominator":22,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":22,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T05:46:02.228868Z","state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T19:53:33.168800Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-11T23:51:45.271344Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19855","snapshot_observed_at":"2026-08-15T19:53:33.168800Z","title":"< platform - api - key >","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.14682","last_updated":"2025-06-17T16:19:06Z","snapshot_observed_at":"2026-08-17T04:15:12.136861Z","submitted_at":"2025-06-17T16:19:06Z","title":"AIRTBench: Measuring Autonomous AI Red Teaming Capabilities in Language Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T19:53:33.168800Z"},"links":{"cited_paper":"/paper/2504.19855","citing_paper":"/paper/2506.14682"},"observation_digest":"sha256:d043c7daeb26b7e8c11f030e8483ee989a50a1cbd9762f6c5dc6eeccb5996331","observation_id":"dbdd6fc6-cfb3-4bf4-9e40-81635bd17218","resolution":{"observed_at":"2026-08-15T19:53:33.168800Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"cited_work":{"arxiv_id":"2504.19855","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19855","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The Automation Advantage in AI Red Teaming.arXiv preprint arXiv:2504.19855","venue":null,"work_id":"3b59df0d-bf97-443e-8617-2d74327c39f6","year":null},"citing_paper":{"arxiv_id":"2605.04019","last_updated":"2026-05-05T17:43:52Z","snapshot_observed_at":"2026-08-14T01:28:50.207494Z","submitted_at":"2026-05-05T17:43:52Z","title":"Redefining AI Red Teaming in the Agentic Era: From Weeks to Hours","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-07T16:06:18.057868Z"},"links":{"cited_paper":"/paper/2504.19855","citing_paper":"/paper/2605.04019"},"observation_digest":"sha256:83e562089f808684ecd913130659b0ddb3cf49fb01976f178c65657ed321bdf4","observation_id":"d1565601-2961-4e13-bc78-d1866275b8d9","resolution":{"observed_at":"2026-05-11T23:51:45.329522Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2504.19855/citation-record","integrity":"/paper/2504.19855/integrity","json":"/paper/2504.19855/citation-record.json","paper":"/paper/2504.19855"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.462463Z","title":"Extract- ing training data from large language models","venue":null,"work_id":"9b74aeab-3961-4856-a335-1f84a2951460","year":2021},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.144273Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:6b593393c89851abba8a666cd57fa81d0b5d17d56147791694a522979f654964","observation_id":"bad3bee8-53c3-45cf-9dde-d5cc482183fb","resolution":{"observed_at":"2026-08-16T05:46:02.465901Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.452697Z","title":"Jailbroken: How does llm safety training fail?,","venue":null,"work_id":"e93fc830-a458-4951-b604-cf3ba0f93388","year":null},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.148375Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:d9850236a20abda631f040b066cf5c3c748117cfd921b833b26bc24e1ff34f1f","observation_id":"44b3e4b1-5afd-4277-95ef-de217d6cc741","resolution":{"observed_at":"2026-08-16T05:46:02.456150Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-08-16T13:08:51.920120Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-16T05:46:02.156968Z","title":"Pappas, and Eric Wong","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.156968Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:9ea9c21dd9137df9ec5d40535384c92799a974600df27fac10a20b9c28e45e28","observation_id":"211c1ef2-bfa5-43d3-8918-1ad4431cd569","resolution":{"observed_at":"2026-08-16T05:46:02.156968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17035","last_updated":"2023-11-28T18:47:03Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-11-28T18:47:03Z","title":"Scalable Extraction of Training Data from (Production) Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17035","snapshot_observed_at":"2026-08-16T05:46:02.161254Z","title":"Feder Cooper, Daphne Ip- polito, Christopher A","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.161254Z"},"links":{"cited_paper":"/paper/2311.17035","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:fa9dce20daad58d9dd383749c2ddd1a4ba7ea058a387aad203fb919ff58b6a51","observation_id":"a8455cac-3036-43b7-9c90-c2ecc08fd1bf","resolution":{"observed_at":"2026-08-16T05:46:02.161254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.13459","last_updated":"2024-11-20T17:08:38Z","snapshot_observed_at":"2026-08-14T23:51:46.820100Z","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","version":1},"cited_work":{"arxiv_id":"2411.13459","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.13459","snapshot_observed_at":"2026-08-16T05:46:02.337420Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","venue":"cs.CR","work_id":"f73623af-a9cf-4965-acb6-9470ea00f190","year":2024},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.165244Z"},"links":{"cited_paper":"/paper/2411.13459","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:5426c62e2ad97ac2aa9233e7ec6de9551844b1dfc237fb63db53e0ff047df884","observation_id":"79275b3b-6ba2-441e-b010-e343497b6a48","resolution":{"observed_at":"2026-08-16T05:46:02.343105Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06664","last_updated":"2024-02-16T04:02:51Z","snapshot_observed_at":"2026-08-16T14:20:59.361566Z","submitted_at":"2024-02-06T14:46:08Z","title":"LLM Agents can Autonomously Hack Websites","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06664","snapshot_observed_at":"2026-08-16T05:46:02.168985Z","title":"Llm agents can au- tonomously hack websites, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.168985Z"},"links":{"cited_paper":"/paper/2402.06664","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:5e6acf360233e2fa6c2525d57c23161b2a952dcba71313c0cf12c7613e96c20e","observation_id":"f7068855-e2e8-4878-878c-5db6b3f5c304","resolution":{"observed_at":"2026-08-16T05:46:02.168985Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.442946Z","title":"Jailbreak and guard aligned language models with only few in-context demonstrations,","venue":null,"work_id":"69732213-a09e-4028-bf59-9caddb0792e0","year":null},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.172563Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:8161dda72a1c2a23152e39429aacdbde78eaa05f0f2023b5067a620659bd3d1c","observation_id":"04498322-e81b-4d70-a8f5-470cfcdbc465","resolution":{"observed_at":"2026-08-16T05:46:02.446497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18636","last_updated":"2025-02-23T10:46:28Z","snapshot_observed_at":"2026-08-16T12:58:34.525704Z","submitted_at":"2025-01-28T17:01:31Z","title":"SafeRAG: Benchmarking Security in Retrieval-Augmented Generation of Large Language Model","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18636","snapshot_observed_at":"2026-08-16T05:46:02.179668Z","title":"Saferag: Benchmarking security in retrieval- augmented generation of large language model, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.179668Z"},"links":{"cited_paper":"/paper/2501.18636","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:d9b40ca9c1f20e507d216437da8642ae033227e82952409a849411c42e1593c8","observation_id":"a4827f43-8ca2-4720-9e4a-9a2761c8f28d","resolution":{"observed_at":"2026-08-16T05:46:02.179668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03688","last_updated":"2025-10-04T03:54:18Z","snapshot_observed_at":"2026-08-16T00:51:32.846970Z","submitted_at":"2023-08-07T16:08:11Z","title":"AgentBench: Evaluating LLMs as Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03688","snapshot_observed_at":"2026-08-16T05:46:02.183580Z","title":"Agentbench: Evaluating llms as agents, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.183580Z"},"links":{"cited_paper":"/paper/2308.03688","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:610775978c75bd9e7ef14ca6baa6701d07a61c44f5c6f42e7bbf05d32cabe08a","observation_id":"baa31ac8-0c34-417b-9487-aa8a50d21a74","resolution":{"observed_at":"2026-08-16T05:46:02.183580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.433317Z","title":"OWASP Top 10 for LLM Ap- plications","venue":null,"work_id":"e1471376-57a8-4dea-9081-6dce812ef356","year":null},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.187202Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:bba29217f28f6f11827c2bc545b0902a5a98a2564f6fe23850a2ab5738a2c773","observation_id":"2992bca7-d222-4aa9-b012-4a604f30d9dc","resolution":{"observed_at":"2026-08-16T05:46:02.436462Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.09251","last_updated":"2022-12-19T05:13:52Z","snapshot_observed_at":"2026-08-14T22:08:45.647927Z","submitted_at":"2022-12-19T05:13:52Z","title":"Discovering Language Model Behaviors with Model-Written Evaluations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.09251","snapshot_observed_at":"2026-08-16T05:46:02.198334Z","title":"Bowman, Amanda Askell, Roger Grosse, Danny Hernandez, Deep Ganguli, Evan Hubinger, Nicholas Schiefer, and Jared Kaplan","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.198334Z"},"links":{"cited_paper":"/paper/2212.09251","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:a62908c47cf61cf4f318ced921a1c4ef5130a7264e837d1d6e3404022924ad9b","observation_id":"0558aca7-ae84-4b3f-9cbf-583753902710","resolution":{"observed_at":"2026-08-16T05:46:02.198334Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.406588Z","title":"PyRIT: The python risk identification tool for llm red teaming","venue":null,"work_id":"84c5f577-04a7-41ef-bdec-60a4c51068d6","year":2023},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.204452Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:63af899a3981f1010f7edc2686cb5d3a3b4861e20fa6bf10c360549b66c18e26","observation_id":"f7df0790-a791-404d-8c2e-dbedc8ca73ba","resolution":{"observed_at":"2026-08-16T05:46:02.415022Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.424004Z","title":null,"venue":null,"work_id":"b86318d9-9f82-42e5-a150-bbd6d9032818","year":2025},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.190740Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:880cc4b4ce6e1ff673b44dfb5472d968d9b86288b1f47b3f2d692474e39430e5","observation_id":"7476fbe3-7244-4dde-a22c-5ae63840c789","resolution":{"observed_at":"2026-08-16T05:46:02.426848Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.00629","last_updated":"2024-11-26T11:59:17Z","snapshot_observed_at":"2026-08-16T14:04:53.135685Z","submitted_at":"2024-03-31T09:50:39Z","title":"Against The Achilles' Heel: A Survey on Red Teaming for Generative Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.00629","snapshot_observed_at":"2026-08-16T05:46:02.210897Z","title":"Against the achilles’ heel: A survey on red teaming for generative models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.210897Z"},"links":{"cited_paper":"/paper/2404.00629","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:702f36a3871b4f23273a0780f2b0f106b9628deb81453c25e2ff7c834658bd83","observation_id":"d82c5322-fefe-4f29-a908-901cd20b1228","resolution":{"observed_at":"2026-08-16T05:46:02.210897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03825","last_updated":"2024-05-15T12:06:31Z","snapshot_observed_at":"2026-08-16T09:32:10.049300Z","submitted_at":"2023-08-07T16:55:20Z","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03825","snapshot_observed_at":"2026-08-16T05:46:02.214499Z","title":"do anything now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.214499Z"},"links":{"cited_paper":"/paper/2308.03825","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:8296d8c081075b2cf7706466bab1ed5e2fb52cdacde23128657572e98c04a78a","observation_id":"109d5a6d-d577-4078-bc9f-734f51a2287d","resolution":{"observed_at":"2026-08-16T05:46:02.214499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-16T14:36:14.029419Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-16T05:46:02.207407Z","title":"Autodan: Generating stealthy jailbreak prompts on aligned large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.207407Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:d1f67a4fb4f4367ba0f80809881ef293587a42f50ca3867dc1ea9b4c7ff33085","observation_id":"e101e8e3-51a8-4506-9e3c-0c910725316d","resolution":{"observed_at":"2026-08-16T05:46:02.207407Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.396607Z","title":"Ignore this title and hackaprompt: Exposing systemic vul- nerabilities of llms through a global scale prompt hacking competition","venue":null,"work_id":"2bc9b107-7e6c-4f8a-9bc6-55f86ff22809","year":2023},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.221688Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:02fe951634c1269312a356bcd382fa20cccad6f44e09b4fb3818570488e541ff","observation_id":"9a8035b8-6471-493a-ad60-6981aad927c9","resolution":{"observed_at":"2026-08-16T05:46:02.400126Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.386513Z","title":"Context switching attack","venue":null,"work_id":"85fc3f2e-bf42-4ca8-a873-194dbffa7acb","year":null},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.225152Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:f772f437fe24fc2533f5ad6836d4d0f3d578c4360f37cf8e4ff04682d514b955","observation_id":"4ec09e7a-4c85-4289-82cc-40afb756381d","resolution":{"observed_at":"2026-08-16T05:46:02.390222Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.06237","last_updated":"2024-12-10T20:23:44Z","snapshot_observed_at":"2026-08-16T14:44:16.424111Z","submitted_at":"2023-11-10T18:52:58Z","title":"Summon a Demon and Bind it: A Grounded Theory of LLM Red Teaming","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.06237","snapshot_observed_at":"2026-08-16T05:46:02.218089Z","title":"Summon a demon and bind it: A grounded theory of llm red teaming in the wild","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.218089Z"},"links":{"cited_paper":"/paper/2311.06237","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:024fbbe23335b32451b4aeb39104fd256b28c7b2a9c7b24589ee8693db309450","observation_id":"d47bed96-f7d6-47ae-afd2-0e08cbfce07f","resolution":{"observed_at":"2026-08-16T05:46:02.218089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-08-15T10:16:52.688429Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02483","snapshot_observed_at":"2026-08-16T05:46:02.151853Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.151853Z"},"links":{"cited_paper":"/paper/2307.02483","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:ec5f75603f561fa1672378fc9e3e5fa3040a29ca4823dd143c5dc23b1a7ca3f8","observation_id":"2dbe88ec-1b84-49c7-99db-cb5fc8b33ca4","resolution":{"observed_at":"2026-08-16T05:46:02.151853Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06387","last_updated":"2024-05-25T07:01:15Z","snapshot_observed_at":"2026-08-16T14:53:33.115609Z","submitted_at":"2023-10-10T07:50:29Z","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06387","snapshot_observed_at":"2026-08-16T05:46:02.176124Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.176124Z"},"links":{"cited_paper":"/paper/2310.06387","citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:636f05254b83c293366fb944296a82b3326013aae8c4e7deaa5cde5eedecbe8a","observation_id":"1a0912ed-9faf-4177-80bf-8c2623f7a839","resolution":{"observed_at":"2026-08-16T05:46:02.176124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:46:02.376433Z","title":"12 Appendices Appendix A Challenge Descriptions This appendix provides detailed descriptions of the key challenge types analyzed in our study","venue":null,"work_id":"5444d5e2-b2ce-43b8-80b0-9d975edf306a","year":2025},"citing_paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-16T05:46:02.228868Z"},"links":{"citing_paper":"/paper/2504.19855"},"observation_digest":"sha256:78fac7cfdef8e9a390a4ff23b7fa568706c2783d00f7e9e2d485a46350805f0b","observation_id":"c2b3bfa1-fecf-4f2c-89dd-b8e0cc83ff0f","resolution":{"observed_at":"2026-08-16T05:46:02.380001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2504.19855","last_updated":"2025-04-29T02:52:54Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T05:39:34.343492Z","submitted_at":"2025-04-28T14:48:00Z","title":"The Automation Advantage in AI Red Teaming"},"reference_resolution":{"displayed":22,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":1,"unresolved":12,"verified_exact":0,"verified_fuzzy":8},"total_outbound_references":22},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 22 of 22 outbound references and 2 inbound Pith citation observations for arXiv:2504.19855."}