{"as_of":"2026-08-18T11:06:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ad5ede01df626755101ca9269fb8cbd32bde2fef70e729c941281a4ec5fe5eb4","coverage":[{"denominator":55,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":55,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T22:42:00.418318Z","state":"measured"},{"denominator":59,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":59,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T10:39:07.083536Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-29T11:13:20.768933Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.06643","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.06643","snapshot_observed_at":"2026-06-29T11:13:20.768933Z","title":"Practical reasoning interruption attacks on reasoning large language models","venue":null,"work_id":"f0bd51b2-fe6f-4c31-a72d-296917413f86","year":2025},"citing_paper":{"arxiv_id":"2503.09567","last_updated":"2025-07-18T15:57:54Z","snapshot_observed_at":"2026-08-08T22:33:20.124926Z","submitted_at":"2025-03-12T17:35:03Z","title":"Towards Reasoning Era: A Survey of Long Chain-of-Thought for Reasoning Large Language Models","version":5},"reference_index":149,"source":"pdf_text","source_observed_at":"2026-05-12T08:40:40.910461Z"},"links":{"cited_paper":"/paper/2505.06643","citing_paper":"/paper/2503.09567"},"observation_digest":"sha256:f833598ede5b1e345545f00dfff2249f0e2996314caa8ae5b717022f8cb374c7","observation_id":"d27f5c5f-bee2-4cef-951e-5f3710714808","resolution":{"observed_at":"2026-05-12T08:40:42.096626Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.06643","snapshot_observed_at":"2026-08-05T10:39:07.083536Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.03871","last_updated":"2025-09-04T04:12:31Z","snapshot_observed_at":"2026-08-17T17:37:38.616375Z","submitted_at":"2025-09-04T04:12:31Z","title":"A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models","version":1},"reference_index":172,"source":"pdf_text","source_observed_at":"2026-08-05T10:39:07.083536Z"},"links":{"cited_paper":"/paper/2505.06643","citing_paper":"/paper/2509.03871"},"observation_digest":"sha256:75320c62c9d8d8bfe807428a621c62478f34c65a017baf56400761584e30a30b","observation_id":"cf20b79f-360e-46a0-be80-feecc9571d42","resolution":{"observed_at":"2026-08-05T10:39:07.083536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.06643","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.06643","snapshot_observed_at":"2026-06-29T11:13:20.768933Z","title":"Practical reasoning interruption attacks on reasoning large language models","venue":null,"work_id":"f0bd51b2-fe6f-4c31-a72d-296917413f86","year":2025},"citing_paper":{"arxiv_id":"2604.09750","last_updated":"2026-04-10T11:44:57Z","snapshot_observed_at":"2026-08-15T05:28:44.951330Z","submitted_at":"2026-04-10T11:44:57Z","title":"Conflicts Make Large Reasoning Models Vulnerable to Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-10T17:24:25.255602Z"},"links":{"cited_paper":"/paper/2505.06643","citing_paper":"/paper/2604.09750"},"observation_digest":"sha256:ba44cae72105d1cc088ea5311a86f1a5d5d5cb4fb0da9da7fa2d0969823fbf64","observation_id":"a28c82bb-9b58-4c69-ba79-aa075536a800","resolution":{"observed_at":"2026-05-11T06:51:46.246752Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.06643","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.06643","snapshot_observed_at":"2026-06-29T11:13:20.768933Z","title":"Practical reasoning interruption attacks on reasoning large language models","venue":null,"work_id":"f0bd51b2-fe6f-4c31-a72d-296917413f86","year":2025},"citing_paper":{"arxiv_id":"2605.29114","last_updated":"2026-05-27T21:21:37Z","snapshot_observed_at":"2026-07-06T23:38:37.178378Z","submitted_at":"2026-05-27T21:21:37Z","title":"ReasonBreak: Probing Vulnerabilities in Reasoning-Enabled Vision-Language-Action Models for Autonomous Driving","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-29T11:10:46.269185Z"},"links":{"cited_paper":"/paper/2505.06643","citing_paper":"/paper/2605.29114"},"observation_digest":"sha256:fa9541a34cff694da5b4e59382655b420302c70ce2125335ea59f56a9f95eb15","observation_id":"59129d0c-ad80-4dbe-9c5c-bf0cf52a7842","resolution":{"observed_at":"2026-06-29T11:13:20.770383Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.06643/citation-record","integrity":"/paper/2505.06643/integrity","json":"/paper/2505.06643/citation-record.json","paper":"/paper/2505.06643"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-08-15T12:33:55.451951Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-15T22:42:00.105541Z","title":"Deepseek-r1: Incentivizing reasoning 9 capability in llms via reinforcement learning","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.105541Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:4f53b5021ecc4363e77ca96842c9400182671cff4c12beebf143e7ce13b6a9c2","observation_id":"918c27e9-10b9-4f54-8c9b-2dab2c2d1703","resolution":{"observed_at":"2026-08-15T22:42:00.105541Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.09567","last_updated":"2025-07-18T15:57:54Z","snapshot_observed_at":"2026-08-08T22:33:20.124926Z","submitted_at":"2025-03-12T17:35:03Z","title":"Towards Reasoning Era: A Survey of Long Chain-of-Thought for Reasoning Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.09567","snapshot_observed_at":"2026-08-15T22:42:00.112887Z","title":"Towards reasoning era: A survey of long chain-of-thought for reasoning large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.112887Z"},"links":{"cited_paper":"/paper/2503.09567","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:8649a36824eaeeaeabc3a4714268c42206df8894ed884251f6b4b01f38a1d1a6","observation_id":"fb01fbc7-1487-4322-acb7-24c1176eb74a","resolution":{"observed_at":"2026-08-15T22:42:00.112887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.17419","last_updated":"2025-06-25T02:24:46Z","snapshot_observed_at":"2026-08-10T09:42:17.185681Z","submitted_at":"2025-02-24T18:50:52Z","title":"From System 1 to System 2: A Survey of Reasoning Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.17419","snapshot_observed_at":"2026-08-15T22:42:00.121350Z","title":"From system 1 to system 2: A survey of reasoning large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.121350Z"},"links":{"cited_paper":"/paper/2502.17419","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:83dc7c9ac5f537f60cfeb7419ac7566b977460b5957c7e687bcab32431ea592f","observation_id":"688c7806-a106-4a94-ae0c-add79398473f","resolution":{"observed_at":"2026-08-15T22:42:00.121350Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.03373","last_updated":"2025-02-05T17:13:32Z","snapshot_observed_at":"2026-08-17T16:40:23.847561Z","submitted_at":"2025-02-05T17:13:32Z","title":"Demystifying Long Chain-of-Thought Reasoning in LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.03373","snapshot_observed_at":"2026-08-15T22:42:00.128635Z","title":"Demystifying long chain-of-thought reasoning in llms","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.128635Z"},"links":{"cited_paper":"/paper/2502.03373","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:bd38b464d9cfe7112ad5d14aaa8e5d1dc7a57be9653e772f51a02f02f1c2a4a2","observation_id":"50907ca7-8b0d-4c1c-8f48-ada67edd8d4f","resolution":{"observed_at":"2026-08-15T22:42:00.128635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12025","last_updated":"2025-02-17T16:57:56Z","snapshot_observed_at":"2026-08-16T12:57:38.105423Z","submitted_at":"2025-02-17T16:57:56Z","title":"SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12025","snapshot_observed_at":"2026-08-15T22:42:00.137386Z","title":"Safechain: Safety of language models with long chain-of-thought reasoning capabilities","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.137386Z"},"links":{"cited_paper":"/paper/2502.12025","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:3929175fd5cd01964b38169a3d4adcb09f44c1263642f905fde12481021a5222","observation_id":"672d5fea-1d5d-4078-8d30-c5b570953336","resolution":{"observed_at":"2026-08-15T22:42:00.137386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.15092","last_updated":"2025-03-19T10:44:37Z","snapshot_observed_at":"2026-08-18T04:15:48.090250Z","submitted_at":"2025-03-19T10:44:37Z","title":"Towards Understanding the Safety Boundaries of DeepSeek Models: Evaluation and Findings","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.15092","snapshot_observed_at":"2026-08-15T22:42:00.143478Z","title":"Towards understanding the safety boundaries of deepseek models: Evaluation and findings","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.143478Z"},"links":{"cited_paper":"/paper/2503.15092","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:5f358f2c3f620a17c7e532682ec9aeca414b89e0678bce484786221c6548dada","observation_id":"e89948ca-14cb-466a-bcaf-c2f10fd549c1","resolution":{"observed_at":"2026-08-15T22:42:00.143478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.10081","last_updated":"2025-04-14T10:26:37Z","snapshot_observed_at":"2026-08-16T18:35:05.995884Z","submitted_at":"2025-04-14T10:26:37Z","title":"RealSafe-R1: Safety-Aligned DeepSeek-R1 without Compromising Reasoning Capability","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.10081","snapshot_observed_at":"2026-08-15T22:42:00.151285Z","title":"Realsafe- r1: Safety-aligned deepseek-r1 without compromising reasoning capability","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.151285Z"},"links":{"cited_paper":"/paper/2504.10081","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:d9a1063cec6645181785b6a4e02ee9d3a8a88817097a0efd5babeec5daed627e","observation_id":"5ef31bec-e2ce-4c7f-929a-f8b5b8b3374b","resolution":{"observed_at":"2026-08-15T22:42:00.151285Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.15806","last_updated":"2025-06-03T14:35:59Z","snapshot_observed_at":"2026-08-16T18:36:22.337624Z","submitted_at":"2025-02-19T07:23:36Z","title":"A Mousetrap: Fooling Large Reasoning Models for Jailbreak with Chain of Iterative Chaos","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.15806","snapshot_observed_at":"2026-08-15T22:42:00.160331Z","title":"A mousetrap: Fooling large reasoning models for jailbreak with chain of iterative chaos","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.160331Z"},"links":{"cited_paper":"/paper/2502.15806","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:626d541e9461c4c190b479420cc28a2e2f0ea413547ba514ebe1d22bd5d217d3","observation_id":"5b73d6e8-2592-4f58-95f0-be3cd567a42a","resolution":{"observed_at":"2026-08-15T22:42:00.160331Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.19326","last_updated":"2025-04-01T00:07:54Z","snapshot_observed_at":"2026-08-16T18:35:06.987716Z","submitted_at":"2025-03-25T03:43:11Z","title":"Process or Result? Manipulated Ending Tokens Can Mislead Reasoning LLMs to Ignore the Correct Reasoning Steps","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.19326","snapshot_observed_at":"2026-08-15T22:42:00.167694Z","title":"Process or result? manipulated end- ing tokens can mislead reasoning llms to ignore the correct reasoning steps","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.167694Z"},"links":{"cited_paper":"/paper/2503.19326","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:2a8a786a485b21edf32b65ec82013127d067955c16baafef2e68e0ef6a764eea","observation_id":"83f850e0-db6c-498e-87ae-9515699d605f","resolution":{"observed_at":"2026-08-15T22:42:00.167694Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.741080Z","title":"Formalizing and benchmarking prompt injection attacks and defenses","venue":null,"work_id":"d1cace4d-a9cd-4d28-98c2-93a10c34fc6a","year":2024},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.173480Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:23b9c9a402f5d93dfc48393c443ff3b124da3b6d28b6f77985763e625b0fe1fc","observation_id":"dae0c81d-3dff-4a1c-a3d8-ba966d9a7ba9","resolution":{"observed_at":"2026-08-15T22:42:01.746475Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:00.179219Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.179219Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:4ead0563acacc6747a60b21e2456b81f6bedd108ba4fa4b06449de39411441e3","observation_id":"13c51b55-ce65-4b43-9bfa-8a5fa529be5b","resolution":{"observed_at":"2026-08-15T22:42:00.179219Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:00.188796Z","title":"InjecAgent: Benchmarking indirect prompt injections in tool-integrated large language model agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.188796Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:c363cad8ef78ddf5824eecd9183a63d3a3cbaece5f779bd8e29cf7701fd58bd6","observation_id":"7f92387a-72b4-4fe3-a6cd-a94a0ba01c7c","resolution":{"observed_at":"2026-08-15T22:42:00.188796Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.20493","last_updated":"2025-04-29T07:34:22Z","snapshot_observed_at":"2026-08-16T18:34:11.699901Z","submitted_at":"2025-04-29T07:34:22Z","title":"Token-Efficient Prompt Injection Attack: Provoking Cessation in LLM Reasoning via Adaptive Token Compression","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.20493","snapshot_observed_at":"2026-08-15T22:42:00.193978Z","title":"Token-efficient prompt injection attack: Provoking cessation in llm reasoning via adaptive token compression","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.193978Z"},"links":{"cited_paper":"/paper/2504.20493","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:da361d25f7c5026775205b58444f677b2a36fdf1b4377dfa142b2cc7e10aa6ce","observation_id":"d14e42d6-b3a5-4037-aee4-50fcbf872fb6","resolution":{"observed_at":"2026-08-15T22:42:00.193978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.723824Z","title":"Don’t listen to me: understanding and exploring jailbreak prompts of large language models","venue":null,"work_id":"1b729bd6-3e06-441a-a7f0-86b27a43b68a","year":2024},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.199211Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:1415d268aabacb071094a210a99a9de1d85dffd4f25aa7e12f5a5dd5c732ae5d","observation_id":"0c23b940-bdde-4b2f-ba9d-0f947006ff0c","resolution":{"observed_at":"2026-08-15T22:42:01.729305Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:00.204376Z","title":"The hidden risks of large reasoning models: A safety assessment of r1","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.204376Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:5a1232ecb8ef306dd14a26b72fcaaa6525fddf200576cb029ed0ae138ea2d190","observation_id":"a7ee9bb4-15aa-4fce-8c72-81db74cc3ee9","resolution":{"observed_at":"2026-08-15T22:42:00.204376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.15585","last_updated":"2025-06-09T02:36:20Z","snapshot_observed_at":"2026-08-17T21:55:02.668814Z","submitted_at":"2025-04-22T05:02:49Z","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.15585","snapshot_observed_at":"2026-08-15T22:42:00.209373Z","title":"A comprehensive survey in llm (-agent) full stack safety: Data, training and deployment","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.209373Z"},"links":{"cited_paper":"/paper/2504.15585","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:1fb3f7dce4ae909a04ca872b9be64cf834040effa8a0b6bfe20011f2f38e3ba6","observation_id":"f5164bc4-43f2-4418-8d23-8688c0388c6b","resolution":{"observed_at":"2026-08-15T22:42:00.209373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-15T22:42:00.214845Z","title":"Prompt injection attack against llm-integrated applications","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.214845Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:65c5e02eb8c4350a18acb29009f6f5af13c15987bb3f2153e8c098eb0dd9848b","observation_id":"4d2efd76-cab7-4178-86dd-3267e9b1cf61","resolution":{"observed_at":"2026-08-15T22:42:00.214845Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.16125","last_updated":"2025-04-20T05:59:00Z","snapshot_observed_at":"2026-08-16T18:35:25.416350Z","submitted_at":"2025-04-20T05:59:00Z","title":"Breaking the Prompt Wall (I): A Real-World Case Study of Attacking ChatGPT via Lightweight Prompt Injection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.16125","snapshot_observed_at":"2026-08-15T22:42:00.220522Z","title":"Breaking the prompt wall (i): A real-world case study of attacking chatgpt via lightweight prompt injection","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.220522Z"},"links":{"cited_paper":"/paper/2504.16125","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:311b0d85b33e98972ace45d7c56f3e601da2c87166135ca5f13e832d2f4cda68","observation_id":"16a5338f-783f-4b6c-affa-7540ac4846f9","resolution":{"observed_at":"2026-08-15T22:42:00.220522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.09798","last_updated":"2025-05-10T02:36:13Z","snapshot_observed_at":"2026-08-17T19:46:00.323728Z","submitted_at":"2025-01-16T19:01:25Z","title":"Fun-tuning: Characterizing the Vulnerability of Proprietary LLMs to Optimization-based Prompt Injection Attacks via the Fine-Tuning Interface","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.09798","snapshot_observed_at":"2026-08-15T22:42:00.226992Z","title":"Computing optimization-based prompt injections against closed-weights models by misusing a fine-tuning api","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.226992Z"},"links":{"cited_paper":"/paper/2501.09798","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:bb2d85194e8d27c205364a5c9dbb05d4475b8278cfba435a3da65fe1ac36a2df","observation_id":"7e6bc4a6-ca5c-47d9-9320-2118a09da6a8","resolution":{"observed_at":"2026-08-15T22:42:00.226992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:00.232989Z","title":"do anything now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.232989Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:72d94296fe09454fd71853db799ae7e5009ee690f31adc521e2ecfe60e01e191","observation_id":"7358d651-b61d-46ae-bd09-2714bf2e5c3f","resolution":{"observed_at":"2026-08-15T22:42:00.232989Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.707529Z","title":"ToolSword: Unveiling safety issues of large language models in tool learning across three stages","venue":null,"work_id":"d6b8ffc3-5ded-42a0-89f3-73c3c0f2aecb","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.238233Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:277447442badb6a114d888b30d35ebdfd6cb4db71bf3a5aa6b582a1c666be264","observation_id":"f08a9cfc-cbc7-452e-9ac5-dfda9bb98e6d","resolution":{"observed_at":"2026-08-15T22:42:01.712621Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:00.251784Z","title":"Virtual context enhancing jailbreak attacks with special token injection","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.251784Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:7524670eab34d1c457fef8a2684b2d0715e9683b517bc4f8df4a8dcd58869829","observation_id":"c620d079-1a37-4054-b174-9b8663f35c5a","resolution":{"observed_at":"2026-08-15T22:42:00.251784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12893","last_updated":"2025-02-27T01:32:58Z","snapshot_observed_at":"2026-08-16T18:03:56.483992Z","submitted_at":"2025-02-18T14:29:12Z","title":"H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12893","snapshot_observed_at":"2026-08-15T22:42:00.256951Z","title":"H-cot: Hijacking the chain-of-thought safety reasoning mechanism to jailbreak large reasoning models, including openai o1/o3, deepseek-r1, and gemini 2.0 flash thinking","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.256951Z"},"links":{"cited_paper":"/paper/2502.12893","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:e087c5d732e03533dd903a534a7ed7915403895bce64def19c727ecd8b328415","observation_id":"ca686c04-74ac-43e9-8887-265fd6800e3a","resolution":{"observed_at":"2026-08-15T22:42:00.256951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:00.262328Z","title":"Easypqc: Verifying post-quantum cryptography","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.262328Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:7b046795882b212198c5a13df61f68e5faedfc107975f9d8f77773ae413fda56","observation_id":"75924e65-9be0-4841-9098-147295580140","resolution":{"observed_at":"2026-08-15T22:42:00.262328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.691416Z","title":"A survey on post-quantum public-key signature schemes for secure vehicular communications","venue":null,"work_id":"efcc0c77-f39e-46c9-a8d0-762a44d63ab1","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.267553Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:83d4a99cb7ee91547951df88ccb1fad1c8f74f303303abd934515d53adf70b91","observation_id":"23a96bca-9d7c-42c1-9d26-0c29b8d33c85","resolution":{"observed_at":"2026-08-15T22:42:01.696781Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.675698Z","title":"Did aristotle use a laptop? a question answering benchmark with implicit reasoning strategies","venue":null,"work_id":"503f6a46-8933-46dd-a430-0e292731bc93","year":2021},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.278072Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:e1ea4c4a91e4dd61668809b227a5d5b5d9c74d3e14e160b0ef1764542619f6c5","observation_id":"47ff3417-f9ff-4fce-b2c7-4600cc016763","resolution":{"observed_at":"2026-08-15T22:42:01.680922Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2110.14168","last_updated":"2021-11-18T00:23:45Z","snapshot_observed_at":"2026-08-14T02:43:01.480086Z","submitted_at":"2021-10-27T04:49:45Z","title":"Training Verifiers to Solve Math Word Problems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.14168","snapshot_observed_at":"2026-08-15T22:42:00.283513Z","title":"Training verifiers to solve math word problems","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.283513Z"},"links":{"cited_paper":"/paper/2110.14168","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:cc4e1281d9f9e876299ff0d5bbdd43fd7ebbda02d9ea5c505711b4769b9e1f24","observation_id":"59db79c5-bec9-4e2d-9a46-562ad4495cbd","resolution":{"observed_at":"2026-08-15T22:42:00.283513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:00.289487Z","title":"Program induction by rationale generation: Learning to solve and explain algebraic word problems","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.289487Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:00643e9599b4c14eaa44b14f7ca13512fe38634f5c968e0109bbead26f62cb09","observation_id":"4bf15bc9-1d1a-44ec-b2d3-04e449b6a77c","resolution":{"observed_at":"2026-08-15T22:42:00.289487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:00.296641Z","title":"ReConcile: Round-table conference improves reasoning via consensus among diverse LLMs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.296641Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:210c360279433511d91232a0640238002893f6b6495cd4836967f0007a882797","observation_id":"7de4823b-0964-44ed-8898-19d908f2c403","resolution":{"observed_at":"2026-08-15T22:42:00.296641Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.659939Z","title":"Wildguard: Open one-stop moderation tools for safety risks, jailbreaks, and refusals of LLMs","venue":null,"work_id":"89c866e5-8c4f-489e-a6a4-732b57bd4698","year":2024},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.301954Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:fb3b10a30f4383741e5b7746cc038748eae3f2fb1a579ae0b5c37156f610cb4b","observation_id":"b2124abe-ea9e-4b22-9c88-da1c9d342391","resolution":{"observed_at":"2026-08-15T22:42:01.665407Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.20708","last_updated":"2025-04-29T12:39:07Z","snapshot_observed_at":"2026-08-16T05:19:48.220556Z","submitted_at":"2025-04-29T12:39:07Z","title":"Beyond the Last Answer: Your Reasoning Trace Uncovers More than You Think","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.20708","snapshot_observed_at":"2026-08-15T22:42:00.306901Z","title":"Without Any Warnings","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.306901Z"},"links":{"cited_paper":"/paper/2504.20708","citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:8a91edae5b8436fc362ced164190d0aff500777385510b6d6ea14cd5ec03c342","observation_id":"bb38b34a-7b6c-481c-a24c-c30d61f037c9","resolution":{"observed_at":"2026-08-15T22:42:00.306901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.644467Z","title":null,"venue":null,"work_id":"2e44b5a6-84b7-4b16-9f50-4cfebec492e1","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.312221Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:4e748624a3a1b2f136cb978cc188e6dbdbd0210289eceaa9ef62f7b28b4251d3","observation_id":"e6a43b2e-61fc-40a1-96fe-470ba32d1463","resolution":{"observed_at":"2026-08-15T22:42:01.649335Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.627224Z","title":"- **Storage**: The AES key is kept in memory temporarily and never written to disk unencrypted","venue":null,"work_id":"3299abb3-ad4c-4262-9e5f-c321eb7bd369","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.317410Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:4c01f1e9fb632e1187f7c785ab132def6ce818faf25e6df483797508203cdf79","observation_id":"f7f1517a-1641-47bb-8ef2-42589644fbc6","resolution":{"observed_at":"2026-08-15T22:42:01.632590Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.609077Z","title":null,"venue":null,"work_id":"12b878a7-4940-4868-99a3-784c5fb5b8fe","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.322872Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:76d250f35315ccc243af3d05eb0e608a4905f9d2dad30418877f58a94b10d499","observation_id":"4da9bd98-9dbb-4c71-bfda-189d48ed2913","resolution":{"observed_at":"2026-08-15T22:42:01.614341Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.592567Z","title":null,"venue":null,"work_id":"9937cc07-b977-4e53-b8ce-9338b956b844","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.328879Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:7f9fdbf389213a8240e2220f7d29cf5c88efcfe597e521668beb4b8e0fca4f3f","observation_id":"19749657-483b-4d80-b9ea-63af7fdb7704","resolution":{"observed_at":"2026-08-15T22:42:01.597923Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.574786Z","title":null,"venue":null,"work_id":"2c27f5bd-5b36-4263-a6af-ffb4bd5f34d4","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.333797Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:5000535899f38c7a6973607552450c8fbc599c1c4d05a70c73514e6da0174e8e","observation_id":"9ed236b9-f8cd-4777-90eb-c2a0b99a576d","resolution":{"observed_at":"2026-08-15T22:42:01.581036Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.557969Z","title":null,"venue":null,"work_id":"e08d5b23-9182-4df5-a384-634d1fd66f15","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.338802Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:c310e867b9205a9781865f6933a5c48b0816f70e958e9c59e6aa60ed162c4462","observation_id":"9b4d2417-cd26-4903-901f-c8ca56fb5353","resolution":{"observed_at":"2026-08-15T22:42:01.563182Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.541084Z","title":null,"venue":null,"work_id":"f615f947-541f-4c62-bbcc-b552a839deb3","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.343931Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:4b9d96224aa6df2e0ece3e275479dcbb8e52147227cad99d64f99ddabcde42bd","observation_id":"5ec7f25e-043e-4b63-82cd-bace3f46b713","resolution":{"observed_at":"2026-08-15T22:42:01.546612Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.523825Z","title":null,"venue":null,"work_id":"a89a4dee-1a34-4c50-8c0a-c85555b7100c","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.348628Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:85fe5783df19bf7edfd3a72ef221a90739ff1bb408c79f1f61c8d10ba47c4fb8","observation_id":"767bf861-4dfd-4568-abe4-0ebe19d3723c","resolution":{"observed_at":"2026-08-15T22:42:01.529558Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.506838Z","title":"Wait, but the unique ID is important","venue":null,"work_id":"49ef19be-967c-4da0-8e10-cfa74c89e749","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.353465Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:b3d992e4c9a0ac816f685dc33104b109a6de3921253bbc3ad4c4f7555623c713","observation_id":"35c9392a-35e6-47f0-b4a8-af1723874329","resolution":{"observed_at":"2026-08-15T22:42:01.512184Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.491129Z","title":null,"venue":null,"work_id":"9c32bb03-820a-4e97-8f0d-c93bdf2b19c1","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.358177Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:09ea29f6a8a62f6c60f32bbc67e5927d0ae92526ee4e9d3e3f352b2347d30697","observation_id":"a6cacbde-f6dc-4c9e-b60b-83a5f50e08d0","resolution":{"observed_at":"2026-08-15T22:42:01.496235Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.475781Z","title":null,"venue":null,"work_id":"28212522-fe3b-4ff7-a569-625f69bea02d","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.362820Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:a99f220b419aa69e0d0245688ab47751c5b1101a9bdca2ea81ccef34e21f9ece","observation_id":"e0f80c7d-33e1-4eb4-9e23-ac064194826a","resolution":{"observed_at":"2026-08-15T22:42:01.480472Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.459906Z","title":"Cybersecurity expertise should be used to protect systems, not exploit them","venue":null,"work_id":"d0f466d1-38e5-4f2d-98b5-56e9fe5e0698","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.367647Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:4df12285e4a8273e92e4f062acf1f46fff38d85dd19f04848df6ac05e1102c57","observation_id":"7ed6c3c0-63c5-4e17-aa00-2aef97e532d8","resolution":{"observed_at":"2026-08-15T22:42:01.465214Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.443627Z","title":"- **Mitigation**: Strict vendor risk assessments and network segmentation to isolate third-party access","venue":null,"work_id":"936e36a4-9c73-4242-99bb-b7093b57f1c0","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.372422Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:137fcc6948242b807f340e1f8a8b1dbdf917a8ee235676add533c38535e72ef5","observation_id":"6e2d5f44-4469-4b38-9fe5-7835d77f31fb","resolution":{"observed_at":"2026-08-15T22:42:01.448730Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.426806Z","title":"- **Mitigation**: Patch management programs, intrusion detection systems (IDS), and regular penetration testing","venue":null,"work_id":"12c8762c-11ac-432d-8829-e99abd44a465","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.377374Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:28e30483ad94189afefec2b988e18132fa37a3e0ff2790f52eed8cf21f16f7fc","observation_id":"aec004b4-86e7-418e-a35d-3a555353b69e","resolution":{"observed_at":"2026-08-15T22:42:01.431702Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.409961Z","title":"- **Mitigation**: Verification protocols (e.g., call-back procedures) and security awareness drills","venue":null,"work_id":"76048475-7785-47be-be82-2b41aa13912d","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.382004Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:3221c9b934a8950e8c198080f9cfe13db8cb84f492d58e9df2fab4173d54659f","observation_id":"49609f74-4e12-4896-97cc-4c0c5ef1eac6","resolution":{"observed_at":"2026-08-15T22:42:01.415199Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.394776Z","title":"- **Mitigation**: Background checks, access controls, and monitoring for anomalous behavior","venue":null,"work_id":"a37f14a3-97da-4bea-bc1c-64a06c91ab8f","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.386666Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:dc5facaf75731318387de2e8e9b787ec89ac62a4d3b4db83808a0be65136e1af","observation_id":"7b02d504-56c4-42a8-b644-415f22ba126c","resolution":{"observed_at":"2026-08-15T22:42:01.399928Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.378519Z","title":"a = <|end_of_thinking|> and b = m","venue":null,"work_id":"990da60e-4eeb-4e57-8b22-cf634ef742c0","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.392714Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:dd0599b5069f80856a1bffd46dee84df798aff7f91f3fab4f3c0d0c88114586d","observation_id":"08bafe9b-1540-4a88-9840-abaec94dbe9d","resolution":{"observed_at":"2026-08-15T22:42:01.383645Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.343477Z","title":null,"venue":null,"work_id":"96b0084e-472e-4ae6-a11d-d43657747751","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.402826Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:4eb71d2139a4fda4acb54c339b7e60879e58c2ca5d6e4c30e949565725dece56","observation_id":"83e7fa74-8875-43fd-b98a-eb331874fd00","resolution":{"observed_at":"2026-08-15T22:42:01.348231Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.327810Z","title":null,"venue":null,"work_id":"e93bcc2f-b4ea-416d-ab7e-fdfa44483239","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.408152Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:d918ab34b11c95f1c16a3dd1e8abbb08be58b217b03f85dc97e9ff529226d070","observation_id":"2b8c34fd-348e-4357-bc52-97be0b2b6822","resolution":{"observed_at":"2026-08-15T22:42:01.332906Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.310089Z","title":null,"venue":null,"work_id":"4dc27c02-a6d2-4a0e-a281-79faa0186692","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.412819Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:f42e0b61cca8c6c16b81c1fa4a1b2370b39eb66ded2b1eabfd42090b3f639f2e","observation_id":"0a83a647-bd6a-422d-be4e-212dc2a4edf5","resolution":{"observed_at":"2026-08-15T22:42:01.315644Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.289117Z","title":"**Answer:** The ciphertext produced is 901","venue":null,"work_id":"49b2e4ce-6517-4e46-8f65-f13f1eac33e5","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.418318Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:9a6ce80f11f1755de48f5bb0dfa25967056674692ec85ef54f72f9a8791b413d","observation_id":"bffd0060-9d93-4590-95a0-68f765270d1e","resolution":{"observed_at":"2026-08-15T22:42:01.296742Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:01.360161Z","title":"So maybe ’b’ is the letter ’m’, which we need to convert to a numerical key","venue":null,"work_id":"fc7d06cb-6dfc-4e3a-95db-7ffeb1714003","year":null},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":109,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.398264Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:8a66601fb778942e177e9aac0b9ef8741834c6b87d8cb10289767c9da582920b","observation_id":"3a2b3654-10d6-4b39-a6cc-c7fd045629d7","resolution":{"observed_at":"2026-08-15T22:42:01.366081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:00.272815Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.272815Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:8c7a58111886330bb002777760228fbab02e4b1c994daf9b8ac24131c62db054","observation_id":"13a3eaa6-e9a9-43a4-ab4f-ed0fffad3d1b","resolution":{"observed_at":"2026-08-15T22:42:00.272815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:42:00.245371Z","title":"doi: 10.18653/v1/2024.acl-long.119","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-15T22:42:00.245371Z"},"links":{"citing_paper":"/paper/2505.06643"},"observation_digest":"sha256:485c726d4fa6fb15811bfc1e274ddafa7542bbffd7c65ded08de0c0cfeaf4c93","observation_id":"5db5e5d3-e79a-4dcb-8ccb-8d4e1ae6304a","resolution":{"observed_at":"2026-08-15T22:42:00.245371Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.06643","last_updated":"2025-05-10T13:36:01Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-18T01:31:41.228606Z","submitted_at":"2025-05-10T13:36:01Z","title":"Practical Reasoning Interruption Attacks on Reasoning Large Language Models"},"reference_resolution":{"displayed":55,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":38,"verified_exact":0,"verified_fuzzy":15},"total_outbound_references":55},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 4 inbound Pith citation observations for arXiv:2505.06643."}