{"as_of":"2026-08-08T01:07:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7176692a89915b6bbced9fddd43d9224bdda7db57d243deb5782e1207713e4b9","coverage":[{"denominator":16,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":16,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:47:33.727356Z","state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T10:39:06.951116Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.07031","snapshot_observed_at":"2026-08-05T10:39:06.951116Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.03871","last_updated":"2025-09-04T04:12:31Z","snapshot_observed_at":"2026-08-06T11:50:02.157285Z","submitted_at":"2025-09-04T04:12:31Z","title":"A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models","version":1},"reference_index":124,"source":"pdf_text","source_observed_at":"2026-08-05T10:39:06.951116Z"},"links":{"cited_paper":"/paper/2506.07031","citing_paper":"/paper/2509.03871"},"observation_digest":"sha256:795e0d478adbc16c83954ce51fbf06a7d66a974d9f00b106b096c188511f9de3","observation_id":"ad302c0c-9383-44de-9691-f037e1b5e926","resolution":{"observed_at":"2026-08-05T10:39:06.951116Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2506.07031/citation-record","integrity":"/paper/2506.07031/integrity","json":"/paper/2506.07031/citation-record.json","paper":"/paper/2506.07031"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:47:33.870323Z","title":"Are we there yet?","venue":null,"work_id":"58bff6c6-23af-4548-8dea-0c943eca469d","year":null},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:33.727356Z"},"links":{"citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:a12d66354fc02e49076b1a695556bb8f8dedc1c6b1a69b9393f4cce4423fd6b9","observation_id":"851a0adc-8e63-4f74-bb40-809fa30766d1","resolution":{"observed_at":"2026-08-07T05:47:33.896502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:47:34.928392Z","title":"Google DeepMind","venue":null,"work_id":"dacd8ca1-bd35-4594-a6d9-7a4b30dbb8ca","year":2024},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:32.565291Z"},"links":{"citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:6b890a1d7bfcce2ba4b3b6c5f56a04376f155b70e315c3863e7f243e599a67d8","observation_id":"b3731d9b-a07c-478f-ac7d-4567f94efbc5","resolution":{"observed_at":"2026-08-07T05:47:35.041624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-07T05:47:32.650402Z","title":"Aissatou Diallo, Antonis Bikakis, Luke Dickens, An- thony Hunter, and Rob Miller","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:32.650402Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:fe07937e1e8be2577d93c113eeadd4d62fec9a349d013e92c2ba50b96f63144f","observation_id":"310434d5-65dd-494b-8f10-b51f063fbc25","resolution":{"observed_at":"2026-08-07T05:47:32.650402Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:47:34.596794Z","title":"In the final layer, the characters among all layers discuss which specific and practical commands, tools, or steps should be used","venue":null,"work_id":"6ec34636-ed21-4863-ba7a-0d7a05469003","year":null},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:33.228549Z"},"links":{"citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:e0fe29b1065c20a2e2c43840342ed5a4ae699e70f06322f9f67cdadb8ce4ecc7","observation_id":"b4767e7f-681f-4784-9bb6-6493102d003d","resolution":{"observed_at":"2026-08-07T05:47:34.708159Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.09686","last_updated":"2025-01-23T08:44:44Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-16T17:37:58Z","title":"Towards Large Reasoning Models: A Survey of Reinforced Reasoning with Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.09686","snapshot_observed_at":"2026-08-07T05:47:32.959808Z","title":"arXiv preprint arXiv:2501.09686","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:32.959808Z"},"links":{"cited_paper":"/paper/2501.09686","citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:aa1390d1c84b68f07462e9f6b7a50cdbdd4183e9aed019f9ff2a594fd9801e25","observation_id":"ff96a400-ce46-47a2-9fb2-050d023f85ac","resolution":{"observed_at":"2026-08-07T05:47:32.959808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06373","last_updated":"2024-01-23T22:46:12Z","snapshot_observed_at":"2026-07-06T17:14:36.670116Z","submitted_at":"2024-01-12T16:13:24Z","title":"How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.06373","snapshot_observed_at":"2026-08-07T05:47:33.123729Z","title":"In33rd USENIX Security Symposium (USENIX Security 24), pages 4657–4674","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:33.123729Z"},"links":{"cited_paper":"/paper/2401.06373","citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:03b702cb21458c37fdfc0ea6596349bbf57b8a646e9551a93f7d256e0aa5c336","observation_id":"60366104-391d-4310-a74b-18c7f08b0d10","resolution":{"observed_at":"2026-08-07T05:47:33.123729Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:47:34.475757Z","title":"how to build a harmful device","venue":null,"work_id":"c6a9e7c2-b07e-4723-9d70-4306c21f5dc4","year":2000},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:33.284565Z"},"links":{"citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:22895e9616b867839610d7c0937bb56e8594643b2661dc0d340686cb9d93756b","observation_id":"850fd639-c327-4f80-87f5-e06230ea58cd","resolution":{"observed_at":"2026-08-07T05:47:34.559169Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:47:34.323870Z","title":null,"venue":null,"work_id":"98a392f0-932c-4358-9a3c-63b649b65866","year":null},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:33.533940Z"},"links":{"citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:f89d9070d374c6ea725ba2f71957726db405f9c7458a9cfbc7475294aa681563","observation_id":"2d116b58-cf4b-4042-ae51-d343ee00af23","resolution":{"observed_at":"2026-08-07T05:47:34.413586Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:47:34.004777Z","title":"manipulate or trick people into doing something they don’t want to do","venue":null,"work_id":"351c1220-6766-4b7e-acc6-8b0fef169adb","year":2025},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:33.596495Z"},"links":{"citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:62a532ed53e3f91bc5e5e4de284cb4c75c2a7ff61e87d02b5e4618910a88eef5","observation_id":"03a087a3-a5fa-42cc-9b16-eb7ecb3ae275","resolution":{"observed_at":"2026-08-07T05:47:34.057253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:47:34.162958Z","title":null,"venue":null,"work_id":"892c8580-132b-4497-859c-3c0d72a35eb3","year":null},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":1903,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:33.423536Z"},"links":{"citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:b1238e532a669a1bb36d318758271d33f9c5634f628c11db5e7abf9106ebd8eb","observation_id":"2957a9a5-4eaf-4e35-ba01-4bc239cd81ee","resolution":{"observed_at":"2026-08-07T05:47:34.228994Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1511.07528","last_updated":"2015-11-24T01:07:08Z","snapshot_observed_at":"2026-08-04T23:22:01.681405Z","submitted_at":"2015-11-24T01:07:08Z","title":"The Limitations of Deep Learning in Adversarial Settings","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1511.07528","snapshot_observed_at":"2026-08-07T05:47:32.904485Z","title":"Avinash Patil","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":2015,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:32.904485Z"},"links":{"cited_paper":"/paper/1511.07528","citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:4e58bcbfad2ad452651decbf1d8d5a766918af394a7b4320f9d3ae1c543109c2","observation_id":"7b0d422e-3032-4269-b763-60f0fb8db4a4","resolution":{"observed_at":"2026-08-07T05:47:32.904485Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.14168","last_updated":"2021-11-18T00:23:45Z","snapshot_observed_at":"2026-08-07T01:45:38.840969Z","submitted_at":"2021-10-27T04:49:45Z","title":"Training Verifiers to Solve Math Word Problems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.14168","snapshot_observed_at":"2026-08-07T05:47:32.489860Z","title":"Badhan Chandra Das, M Hadi Amini, and Yanzhao Wu","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:32.489860Z"},"links":{"cited_paper":"/paper/2110.14168","citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:407812d66898fcf6c54cd67e3ce156ae441eab3fced48fdf239e9958ca6cc151","observation_id":"329e8a2c-44bc-463f-916b-0bb35e27d346","resolution":{"observed_at":"2026-08-07T05:47:32.489860Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:47:34.772705Z","title":null,"venue":null,"work_id":"92c43ec8-f984-4008-91e1-e4455586c765","year":2022},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:32.802728Z"},"links":{"citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:0b9ebfdc1410902567d2abfee39c379f4a977cd1d4d0a058d3606b4bdeb17ced","observation_id":"29ecab10-35e5-474b-a0eb-8e5bf5535197","resolution":{"observed_at":"2026-08-07T05:47:34.877430Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-07T05:47:33.084577Z","title":"Jiahao Yu, Xingwei Lin, Zheng Yu, and Xinyu Xing","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:33.084577Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:70cf72804da34caf14e05398bc3ce4843ab1e477dd07e1ef75b106c78cf84178","observation_id":"87b6a98a-f248-4aa8-9fee-2c2c816a7254","resolution":{"observed_at":"2026-08-07T05:47:33.084577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.03027","last_updated":"2024-11-24T06:22:37Z","snapshot_observed_at":"2026-08-06T14:20:00.145899Z","submitted_at":"2024-04-03T19:23:18Z","title":"JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.03027","snapshot_observed_at":"2026-08-07T05:47:32.731410Z","title":"InThe Twelfth In- ternational Conference on Learning Representations, ICLR 2024, Vienna, Austria, May 7-11, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:32.731410Z"},"links":{"cited_paper":"/paper/2404.03027","citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:f3424f4b2777e36fddb84252dba12d3be4893da5144895f3c0c2acebeaddc9e9","observation_id":"ed146dd7-70bb-41ba-a40c-80800e5129fa","resolution":{"observed_at":"2026-08-07T05:47:32.731410Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.11969","last_updated":"2025-04-17T18:36:08Z","snapshot_observed_at":"2026-07-06T18:47:21.527912Z","submitted_at":"2024-07-16T17:59:55Z","title":"Does Refusal Training in LLMs Generalize to the Past Tense?","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.11969","snapshot_observed_at":"2026-08-07T05:47:32.444127Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","version":5},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-07T05:47:32.444127Z"},"links":{"cited_paper":"/paper/2407.11969","citing_paper":"/paper/2506.07031"},"observation_digest":"sha256:8b8489374e0b1ff0f7383a87f44d456a38f7aedc7699f5c6ce513b4bb708431c","observation_id":"9e336615-0405-49e9-8462-a5845e5ce4fd","resolution":{"observed_at":"2026-08-07T05:47:32.444127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.07031","last_updated":"2026-06-25T06:36:02Z","latest_version":5,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T23:29:11.903646Z","submitted_at":"2025-06-08T07:45:48Z","title":"HauntAttack: When Attack Follows Reasoning as a Shadow"},"reference_resolution":{"displayed":16,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":11,"verified_exact":0,"verified_fuzzy":5},"total_outbound_references":16},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 16 of 16 outbound references and 1 inbound Pith citation observation for arXiv:2506.07031."}