{"as_of":"2026-08-09T15:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8ab743ce62fca9cc1da1ba911d4d2a8b6be51cd6554c9a13745389dca6da4ce4","coverage":[{"denominator":31,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":31,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:12:28.698994Z","state":"measured"},{"denominator":32,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":32,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-12T00:50:19.648405Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-12T00:51:15.054351Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"cited_work":{"arxiv_id":"2505.19773","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.19773","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"What really matters in many- shot attacks? an empirical study of long-context vulnerabilities in llms","venue":null,"work_id":"22f0cd27-adb4-4375-a79f-5a058b088b66","year":2025},"citing_paper":{"arxiv_id":"2605.08277","last_updated":"2026-05-08T06:33:42Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T06:33:42Z","title":"Mitigating Many-shot Jailbreak Attacks with One Single Demonstration","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-12T00:50:19.648405Z"},"links":{"cited_paper":"/paper/2505.19773","citing_paper":"/paper/2605.08277"},"observation_digest":"sha256:9f91196867b479fdc323317ce5534dd80314ff0924f133218b733bd676b4483d","observation_id":"0f6598de-3a59-4cf8-b9bb-03be1adac746","resolution":{"observed_at":"2026-05-12T00:51:15.057213Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.19773/citation-record","integrity":"/paper/2505.19773/integrity","json":"/paper/2505.19773/citation-record.json","paper":"/paper/2505.19773"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:33.015627Z","title":null,"venue":null,"work_id":"7a623735-e214-4e34-9bd4-6c096e99a589","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.126070Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:a96d094fd62873025c18e1e9565c10381a77649784efb6ca7247add188c83ae9","observation_id":"52109d3d-381f-4c3c-91df-b062dea72650","resolution":{"observed_at":"2026-08-07T14:12:33.089531Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:32.833895Z","title":null,"venue":null,"work_id":"bd768f2a-3f8e-4a97-be40-07920c2e662f","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.194959Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:4584f3741d0db2648f585593a8044e1c7f8a090af0eba8e6e2d9581e49d8c534","observation_id":"876e5790-11b5-4ef8-944d-2e5aa5411810","resolution":{"observed_at":"2026-08-07T14:12:32.904607Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05335","last_updated":"2023-04-11T16:53:54Z","snapshot_observed_at":"2026-08-08T22:33:30.357597Z","submitted_at":"2023-04-11T16:53:54Z","title":"Toxicity in ChatGPT: Analyzing Persona-assigned Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05335","snapshot_observed_at":"2026-08-07T14:12:26.717182Z","title":"InThe Twelfth International Con- ference on Learning Representations","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:26.717182Z"},"links":{"cited_paper":"/paper/2304.05335","citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:6580d23446983e1a0e7ea3921b599a0708f2e82381226dc2ad1da9cdef6ea3b0","observation_id":"42064e71-fdde-4ab0-9cdc-443fcb4ca95f","resolution":{"observed_at":"2026-08-07T14:12:26.717182Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:32.483605Z","title":null,"venue":null,"work_id":"5e761322-6d3d-4d0a-891e-b47c788ea48f","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.337916Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:f918ba4b3dcdf46eda82bcf52ccd3b44132cb9e4a8e2d0b8ab360dea6e0d54ac","observation_id":"7e544e7b-59a4-4cc6-b5a8-e5c9efc86f89","resolution":{"observed_at":"2026-08-07T14:12:32.546212Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:33.310335Z","title":"InPro- ceedings of the 2024 Joint International Conference on Computational Linguistics, Language Resources and Evaluation (LREC-COLING 2024), pages 16802– 16830, Torino, Italia","venue":null,"work_id":"0ec534c0-64ff-493a-a561-5c9d57fa2242","year":2024},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:26.875683Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:312be70f2ce155f99f29326b0617a299b8a50ef98eaa66809e2858ea4d86ba43","observation_id":"036285ed-ca37-47ff-9094-b8ac592386bc","resolution":{"observed_at":"2026-08-07T14:12:33.429960Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11755","last_updated":"2024-02-19T00:53:48Z","snapshot_observed_at":"2026-07-06T17:31:58.268105Z","submitted_at":"2024-02-19T00:53:48Z","title":"SPML: A DSL for Defending Language Models Against Prompt Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11755","snapshot_observed_at":"2026-08-07T14:12:26.950931Z","title":"Anand Siththaranjan, Cassidy Laidlaw, and Dylan Hadfield-Menell","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:26.950931Z"},"links":{"cited_paper":"/paper/2402.11755","citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:0206d9f3db7c5ecf73c03bd6ffa4635d1baca235239e8d7d51634198af5d670a","observation_id":"fc2934dd-6fa1-4bd2-b89f-6951d06ad973","resolution":{"observed_at":"2026-08-07T14:12:26.950931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.05530","last_updated":"2024-12-16T17:39:39Z","snapshot_observed_at":"2026-07-06T17:41:42.995949Z","submitted_at":"2024-03-08T18:54:20Z","title":"Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.05530","snapshot_observed_at":"2026-08-07T14:12:26.990951Z","title":"Qwen Team","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:26.990951Z"},"links":{"cited_paper":"/paper/2403.05530","citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:f4db3ceb59fdf6129da63a1cb37cd2bd21d52e848a73758bfcbe49f233f2fee7","observation_id":"d4e32fc7-e05f-40b7-bdd1-7397b5571524","resolution":{"observed_at":"2026-08-07T14:12:26.990951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:32.652985Z","title":null,"venue":null,"work_id":"f03ae8b6-2fda-409a-8c54-418b7717d96b","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.253436Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:7c699dcfc6e283316a4eb50acdafe23d7f5acb39769254f92aef0bfb7822f275","observation_id":"dc298519-9ee1-475b-b4c3-ff2152f63d93","resolution":{"observed_at":"2026-08-07T14:12:32.710615Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:33.187147Z","title":null,"venue":null,"work_id":"59104651-4756-49f5-9879-b8ace42a94e6","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.055326Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:6114b793f7036edae223a43969c13ac9a1c7122aee36f84df9febb3fab20ebde","observation_id":"0e6c2ddf-dbb2-44ed-b763-c3cad06d533c","resolution":{"observed_at":"2026-08-07T14:12:33.219684Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:32.298067Z","title":"UNRESTRICTED MODE ACTIV ATED","venue":null,"work_id":"34eac417-651b-451a-8b1f-7b78161b75d2","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.400311Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:e557e4639e548503df29152d6dbf39ffd44c24ee727b03ceb2c2b999d93dace9","observation_id":"6589a71c-7c3d-43a6-b900-8bbb5a97ce7c","resolution":{"observed_at":"2026-08-07T14:12:32.386204Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:31.974586Z","title":"B.2 Hardware Spec We utilized six nodes with the specifications as shown in Table??","venue":null,"work_id":"36ebbfd6-b599-4c7d-a22f-507cb0bedb05","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.461137Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:edfd993e1d9bbde9c86dfa0c75ac632cea8e42426217246ec091496366e90209","observation_id":"00468283-c5ec-4f8a-be1c-9144de343dc1","resolution":{"observed_at":"2026-08-07T14:12:32.160143Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:31.776973Z","title":null,"venue":null,"work_id":"6adf7dd0-1d05-4084-9689-439a19d28611","year":2024},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.536334Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:d1553baa38a6bb96eda3e94949a3554986d307b91004fb7a1df301ca80185097","observation_id":"404ac29d-d893-444f-8207-7cdfa1ae590f","resolution":{"observed_at":"2026-08-07T14:12:31.863030Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:31.447379Z","title":"B.3.2 Data Preprocessing TheHarmfuldatasets were constructed by com- bining data from two primary sources: seven QA pair datasets and five query-only datasets","venue":null,"work_id":"0b2de9ff-21d2-44f8-8547-fc6b6bee98ad","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.604905Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:4088211b83696f240abb25496250bb121bbab2a448f6c43a4598beaebc46ece4","observation_id":"bdbcfc82-1fb3-4077-9f44-784d48f0b255","resolution":{"observed_at":"2026-08-07T14:12:31.645551Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:31.101837Z","title":null,"venue":null,"work_id":"fa9b4c9a-f377-48bc-bbcc-0e8ceae1fbd8","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.663100Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:a49e0db26e1d8a990f4ed062232ca2bcd55bd42d781044b3cc6380e64460ec09","observation_id":"61b461ad-2883-4774-a2b1-e87d16801f19","resolution":{"observed_at":"2026-08-07T14:12:31.285506Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:30.914616Z","title":null,"venue":null,"work_id":"663a4f27-172a-4741-9c4b-56da53bfa7cc","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.741382Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:3e2aac950f7421761e3179b734a8fcb0691ddf21cb77cc379d4cd97a4563921f","observation_id":"21c23c0a-fb40-4d40-9b44-452dd826e22d","resolution":{"observed_at":"2026-08-07T14:12:31.012494Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:30.689052Z","title":null,"venue":null,"work_id":"5af91d06-f9fc-46c6-ab59-30ee986cbad0","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.812852Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:f998f2245cf8134bd2a8e36e74fe6b738fdb03e26d168c0e3a39dffefdaf7b2b","observation_id":"0f3803e3-d622-4846-b706-d8ef52a34f4c","resolution":{"observed_at":"2026-08-07T14:12:30.781726Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:30.444142Z","title":null,"venue":null,"work_id":"4b69399a-bae9-48d4-8728-40310111d779","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.865052Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:c35b996d9721635b49c66e302fd51025dfc629bf43f5ece8ab41eb2c5486a147","observation_id":"ddb83e05-8f77-456b-82a2-3d221a3bdfa4","resolution":{"observed_at":"2026-08-07T14:12:30.543770Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:30.278358Z","title":null,"venue":null,"work_id":"6bd6db1a-49be-4825-a3e5-32e85f02f40d","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:27.914026Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:a90c0ad2e92c2752ffa01780ad772d1543d3e697d67917cbf6372e1a11d29be7","observation_id":"36a982c1-4480-4e15-b170-8611539ecaa8","resolution":{"observed_at":"2026-08-07T14:12:30.336870Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:30.180889Z","title":null,"venue":null,"work_id":"a02854d9-4367-4483-8bd4-33a6ba5446f0","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.005814Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:93e350486751a04535e9286f0370ef729b98c5e898ffeadc85a96dfa01d3ef10","observation_id":"ecad55bb-4dc1-4e1d-8056-4226741694c2","resolution":{"observed_at":"2026-08-07T14:12:30.219045Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:30.096185Z","title":null,"venue":null,"work_id":"3a343e4d-2f5a-4424-80d0-e979d5d1c7a3","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.091135Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:3e9ff985faae1bb9d046b3c1c8d4e142641b62902d77067a8907fbb69e9cf598","observation_id":"ba9f126c-ba84-4dc1-88e6-28eb7ee0fd24","resolution":{"observed_at":"2026-08-07T14:12:30.127530Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:29.964730Z","title":"AI could be misused as a tool for promoting criminal behavior","venue":null,"work_id":"22ee4ab3-02fd-4fda-b796-d341b76bc930","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.156641Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:0dafc9a4a7fc6c471cfe4135ad829cdd73af16a94b8f40fcf1c0f04b04547e16","observation_id":"321e07ee-ee4e-4a02-90e0-7f9ff963e4b6","resolution":{"observed_at":"2026-08-07T14:12:30.019382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:29.846844Z","title":null,"venue":null,"work_id":"407d9ee1-050a-4c8d-a791-4c60d27404d8","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.247874Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:769f35f07723c65d68a800574f7a04b1a7eb45d7d573b9f203555def4851e206","observation_id":"ab964502-4d92-4be2-b9b1-ddf83b3237d7","resolution":{"observed_at":"2026-08-07T14:12:29.896505Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:29.672000Z","title":null,"venue":null,"work_id":"31a2b526-6629-4b65-8d39-6ba8a0a16247","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.343270Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:8256958d4bf169847e7044a92777d7c42b314b84fe33bc416edf4e5083790177","observation_id":"1a2f2c06-6cfe-4c96-ab7c-ff0ef1d85788","resolution":{"observed_at":"2026-08-07T14:12:29.761575Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:29.508934Z","title":null,"venue":null,"work_id":"58261f6d-1869-4495-b792-182813737d62","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.429931Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:ee2b285a8a52bc6eb23cadb4a936a62238503580ce642e2fa4532cfd5569c21a","observation_id":"69fc5294-2c6d-4782-a539-a9f0d06d0642","resolution":{"observed_at":"2026-08-07T14:12:29.568211Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:29.389752Z","title":null,"venue":null,"work_id":"c73ab450-f11e-42d0-b10e-3d135e636a8b","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.516532Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:1dca71c45cc18e50146dfcd709c8f0a89d3772fa210a58023266e63b348d3cb1","observation_id":"77fa94cb-53b0-4cdb-a4fe-c5e60b66aeee","resolution":{"observed_at":"2026-08-07T14:12:29.432136Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:29.221632Z","title":"None\"] New Category: [Only if Category is 7/ETC, otherwise","venue":null,"work_id":"d6c5b752-012f-4b40-a643-aeb3f20bf7c0","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.569333Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:ae8ac262851f6b256533d6b8c8b5d66989c9d0e1d1c7b5823c7782dd5dd51ea3","observation_id":"83c804a2-dd5a-4ada-85d7-c5dbdc515b51","resolution":{"observed_at":"2026-08-07T14:12:29.283096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:29.069923Z","title":"If no problematic content is detected, use \"None\" as the category","venue":null,"work_id":"5ef87c4c-6087-4657-b549-5e2acb69a5c9","year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.625317Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:440fd3a8e02216a83d68887ba0353a5bf817eada02d8ecb417fa46d44b332e7d","observation_id":"6485dc07-8801-43b7-8b2b-d655c64a4d94","resolution":{"observed_at":"2026-08-07T14:12:29.146294Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:28.939073Z","title":"Think like you are answering to a five year old","venue":null,"work_id":"6d970880-2ad3-47d8-947b-a2f23726285a","year":2024},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:28.698994Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:4138764bde6d792e8ae947513e056398f351843e69429f45fa3c8c1f7678e8b1","observation_id":"9d8650e0-e45a-4ab5-9bd8-5590c9e3ecae","resolution":{"observed_at":"2026-08-07T14:12:28.998447Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:33.536619Z","title":"Bowen Peng, Jeffrey Quesnelle, Honglu Fan, and Enrico Shippole","venue":null,"work_id":"43a3ee3b-ff2e-4ebd-8f66-bb9ce84eb4ad","year":2024},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:26.782631Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:54853feb5a0d6ea55143647cbc3d95a084ad010791b8f912c89887a57e73408a","observation_id":"a3be5815-402f-442b-acb3-de472ce3ab76","resolution":{"observed_at":"2026-08-07T14:12:33.671041Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-07T14:12:26.650846Z","title":"Josef Dai, Xuehai Pan, Ruiyang Sun, Jiaming Ji, Xinbo Xu, Mickel Liu, Yizhou Wang, and Yaodong Yang","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:26.650846Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:3bb8dc680e3f24a441018855a8fbf457d9bc20c9153ba84e6331cb5e11f5cdc8","observation_id":"8f3ef5d9-7cf8-43d8-a24c-eb8fba4d06a9","resolution":{"observed_at":"2026-08-07T14:12:26.650846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:12:33.767132Z","title":"InProceedings of the 62nd Annual Meeting of the Association for Compu- tational Linguistics (Volume 1: Long Papers), pages 10542–10560, Bangkok, Thailand","venue":null,"work_id":"1d83c70f-35a3-48ec-bf7a-d6f1a3ca0c67","year":2024},"citing_paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T14:12:26.585687Z"},"links":{"citing_paper":"/paper/2505.19773"},"observation_digest":"sha256:3bda8315313ee476a0ed356a6ce9cc19eba1b4bf4e1662e75595ad40b71966b9","observation_id":"b6cb532b-54aa-40a2-911a-afb5656e6b28","resolution":{"observed_at":"2026-08-07T14:12:33.884477Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.19773","last_updated":"2025-05-26T09:57:25Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-09T02:55:15.692188Z","submitted_at":"2025-05-26T09:57:25Z","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs"},"reference_resolution":{"displayed":31,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":2,"unresolved":19,"verified_exact":0,"verified_fuzzy":10},"total_outbound_references":31},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 31 of 31 outbound references and 1 inbound Pith citation observation for arXiv:2505.19773."}