{"as_of":"2026-08-23T02:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b23046dc74ea4a3c4af8c6ceaf56390edbf3a7591148d4e5b8c7c58f449f499e","coverage":[{"denominator":13,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":13,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T21:25:30.349153Z","state":"measured"},{"denominator":13,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":13,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.09921/citation-record","integrity":"/paper/2505.09921/integrity","json":"/paper/2505.09921/citation-record.json","paper":"/paper/2505.09921"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:25:30.744305Z","title":null,"venue":null,"work_id":"f22acfcd-0b06-4209-94ed-3365a912cec3","year":null},"citing_paper":{"arxiv_id":"2505.09921","last_updated":"2025-05-16T09:36:29Z","snapshot_observed_at":"2026-08-19T17:50:06.770313Z","submitted_at":"2025-05-15T03:11:57Z","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T21:25:30.306749Z"},"links":{"citing_paper":"/paper/2505.09921"},"observation_digest":"sha256:e3d7cd488bf519c0aded9a20a448a08abac594a65a74129d8d64bd4a1a5ec48e","observation_id":"05c3cd1c-673c-4809-87a5-85cd33aa1e02","resolution":{"observed_at":"2026-08-15T21:25:30.750743Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-08-16T13:08:51.920120Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-15T21:25:30.263004Z","title":"Preprint, arXiv:2310.08419","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.09921","last_updated":"2025-05-16T09:36:29Z","snapshot_observed_at":"2026-08-19T17:50:06.770313Z","submitted_at":"2025-05-15T03:11:57Z","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T21:25:30.263004Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2505.09921"},"observation_digest":"sha256:3495a901574ab91c90c04c43305bad76974cb84c8c551450e53ad31c27da46fa","observation_id":"7ad7b9b3-6f19-48c3-a8fb-05784b5b528a","resolution":{"observed_at":"2026-08-15T21:25:30.263004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:25:30.700425Z","title":null,"venue":null,"work_id":"1dc75f31-e258-40ea-9bd4-8a46c57bb8a8","year":null},"citing_paper":{"arxiv_id":"2505.09921","last_updated":"2025-05-16T09:36:29Z","snapshot_observed_at":"2026-08-19T17:50:06.770313Z","submitted_at":"2025-05-15T03:11:57Z","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T21:25:30.323274Z"},"links":{"citing_paper":"/paper/2505.09921"},"observation_digest":"sha256:d619dcaa2caa93e94708b90a3cc356cb4cefb889a603fb70ad185ce76dcf6fc7","observation_id":"2fdd92e0-2897-4ed6-b798-c497ba72111e","resolution":{"observed_at":"2026-08-15T21:25:30.706991Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:25:30.674508Z","title":null,"venue":null,"work_id":"ba0cebfe-d7fd-44c4-8bb3-58ef766d8e6a","year":null},"citing_paper":{"arxiv_id":"2505.09921","last_updated":"2025-05-16T09:36:29Z","snapshot_observed_at":"2026-08-19T17:50:06.770313Z","submitted_at":"2025-05-15T03:11:57Z","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T21:25:30.330294Z"},"links":{"citing_paper":"/paper/2505.09921"},"observation_digest":"sha256:3fdd9843ac9f883b85a028012690582f2b52537c5b92488cf6d4425e2ad57534","observation_id":"da385784-9905-4176-9ffa-3c3827b91d98","resolution":{"observed_at":"2026-08-15T21:25:30.682065Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-15T21:25:30.283707Z","title":"arXiv preprint arXiv:2309.10253","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.09921","last_updated":"2025-05-16T09:36:29Z","snapshot_observed_at":"2026-08-19T17:50:06.770313Z","submitted_at":"2025-05-15T03:11:57Z","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T21:25:30.283707Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2505.09921"},"observation_digest":"sha256:5b1ff9295e4436e22d834f4be387e1a7add8560367fb32691d99055ad4929687","observation_id":"ef03d2c1-034f-4a53-9236-097f3c3c4747","resolution":{"observed_at":"2026-08-15T21:25:30.283707Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.01288","last_updated":"2024-10-30T12:08:42Z","snapshot_observed_at":"2026-08-16T18:08:17.585364Z","submitted_at":"2024-06-03T12:59:17Z","title":"Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defenses","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.01288","snapshot_observed_at":"2026-08-15T21:25:30.293416Z","title":"style_injection_short","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.09921","last_updated":"2025-05-16T09:36:29Z","snapshot_observed_at":"2026-08-19T17:50:06.770313Z","submitted_at":"2025-05-15T03:11:57Z","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T21:25:30.293416Z"},"links":{"cited_paper":"/paper/2406.01288","citing_paper":"/paper/2505.09921"},"observation_digest":"sha256:7cac6583cfef3727b2d353c7b1bd9a949d94889a41c465d43e54f1a518cbf759","observation_id":"dc94bf0f-d737-4878-a1c9-8082c85b1f5e","resolution":{"observed_at":"2026-08-15T21:25:30.293416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:25:30.766854Z","title":"Jailbreak Prompt (TrustLLM Dataset)","venue":null,"work_id":"3dd176c4-a6eb-4b4a-8c2b-0f64bb1d5e59","year":2024},"citing_paper":{"arxiv_id":"2505.09921","last_updated":"2025-05-16T09:36:29Z","snapshot_observed_at":"2026-08-19T17:50:06.770313Z","submitted_at":"2025-05-15T03:11:57Z","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T21:25:30.299680Z"},"links":{"citing_paper":"/paper/2505.09921"},"observation_digest":"sha256:5d74422aa3c19826e035bfad9bcf67663e0894ea39578339e0aa986a5abe74e6","observation_id":"0936e326-e157-4f0f-958c-136b9cd2e20f","resolution":{"observed_at":"2026-08-15T21:25:30.772468Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:25:30.720488Z","title":null,"venue":null,"work_id":"491f560f-bd00-4794-81ca-b37ebb4f318e","year":null},"citing_paper":{"arxiv_id":"2505.09921","last_updated":"2025-05-16T09:36:29Z","snapshot_observed_at":"2026-08-19T17:50:06.770313Z","submitted_at":"2025-05-15T03:11:57Z","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T21:25:30.316764Z"},"links":{"citing_paper":"/paper/2505.09921"},"observation_digest":"sha256:1320d987b4d69d58bc4aa1604ca78178b84623b3cfaa5819bdf2ce9b1a833594","observation_id":"2c08c492-422f-4cb9-b0e6-546a80aab808","resolution":{"observed_at":"2026-08-15T21:25:30.725867Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:25:30.641930Z","title":null,"venue":null,"work_id":"86997662-0ef4-4e61-bf87-eb8fe26c379c","year":null},"citing_paper":{"arxiv_id":"2505.09921","last_updated":"2025-05-16T09:36:29Z","snapshot_observed_at":"2026-08-19T17:50:06.770313Z","submitted_at":"2025-05-15T03:11:57Z","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T21:25:30.341698Z"},"links":{"citing_paper":"/paper/2505.09921"},"observation_digest":"sha256:b3576c9a4ff310eaa224ab7ed680824ab6740afab4c88fbf121e4929f25223cf","observation_id":"351f2152-3143-490f-90e5-e1b607e718ff","resolution":{"observed_at":"2026-08-15T21:25:30.652116Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:25:30.616023Z","title":"System Prompt (TrustLLM Dataset)","venue":null,"work_id":"8a0ef092-981a-4e2b-9ef3-f3a5a8f51db7","year":null},"citing_paper":{"arxiv_id":"2505.09921","last_updated":"2025-05-16T09:36:29Z","snapshot_observed_at":"2026-08-19T17:50:06.770313Z","submitted_at":"2025-05-15T03:11:57Z","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T21:25:30.349153Z"},"links":{"citing_paper":"/paper/2505.09921"},"observation_digest":"sha256:4e6def35e860e5083a80d0c9e870e435c706c5820f6c2a0301aee07f3cab8a17","observation_id":"75ffeba3-0012-46d7-ab5d-004d42d43e0f","resolution":{"observed_at":"2026-08-15T21:25:30.627309Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-15T21:25:30.277739Z","title":"Advances in neural in- formation processing systems, 35:27730–27744","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.09921","last_updated":"2025-05-16T09:36:29Z","snapshot_observed_at":"2026-08-19T17:50:06.770313Z","submitted_at":"2025-05-15T03:11:57Z","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-15T21:25:30.277739Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2505.09921"},"observation_digest":"sha256:3c3eb1e8dd0ac1639b499caa24adcbadfcd670d68b5dcc9c25acafa57b29f523","observation_id":"bb6eba2e-ce5f-4dac-aa0d-b88d7c579fec","resolution":{"observed_at":"2026-08-15T21:25:30.277739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-08-20T07:56:32.352535Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-08-15T21:25:30.269701Z","title":"In 2023 IEEE Sym- posium on Security and Privacy (SP) , pages 346–363","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.09921","last_updated":"2025-05-16T09:36:29Z","snapshot_observed_at":"2026-08-19T17:50:06.770313Z","submitted_at":"2025-05-15T03:11:57Z","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-15T21:25:30.269701Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2505.09921"},"observation_digest":"sha256:7ef91594dec59f4032c4f940346d3e1d84645a920fab30bf64150a04e0551099","observation_id":"d5b3edc9-8b58-4972-b1c8-3b64f1f56bf5","resolution":{"observed_at":"2026-08-15T21:25:30.269701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16251","last_updated":"2024-07-29T17:16:19Z","snapshot_observed_at":"2026-08-22T15:28:29.579838Z","submitted_at":"2024-04-24T23:39:58Z","title":"Prompt Leakage effect and defense strategies for multi-turn LLM interactions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16251","snapshot_observed_at":"2026-08-15T21:25:30.253728Z","title":"arXiv preprint arXiv:2404.16251","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.09921","last_updated":"2025-05-16T09:36:29Z","snapshot_observed_at":"2026-08-19T17:50:06.770313Z","submitted_at":"2025-05-15T03:11:57Z","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-15T21:25:30.253728Z"},"links":{"cited_paper":"/paper/2404.16251","citing_paper":"/paper/2505.09921"},"observation_digest":"sha256:15e55e4ef39210c872a160b214a3b430e6394f7b22c0c31f724e3a7031db9fdf","observation_id":"e5128263-1ac6-4914-8f05-97d8cbd9af31","resolution":{"observed_at":"2026-08-15T21:25:30.253728Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.09921","last_updated":"2025-05-16T09:36:29Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-19T17:50:06.770313Z","submitted_at":"2025-05-15T03:11:57Z","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization"},"reference_resolution":{"displayed":13,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":11,"verified_exact":0,"verified_fuzzy":2},"total_outbound_references":13},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 23 August 2026, this Paper Citation Record lists 13 of 13 outbound references and 0 inbound Pith citation observations for arXiv:2505.09921."}