{"as_of":"2026-08-09T20:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fc0d952307b6493bd7568165a2d63c18daf8e5fc930de5899ab881858b689e86","coverage":[{"denominator":71,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":71,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T20:45:53.389053Z","state":"measured"},{"denominator":71,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":71,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.02057/citation-record","integrity":"/paper/2507.02057/integrity","json":"/paper/2507.02057/citation-record.json","paper":"/paper/2507.02057"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:54.049267Z","title":null,"venue":null,"work_id":"c9bdc76f-ed58-4314-a920-db5e4c9b44ae","year":null},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.220093Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:62cc3f01667d5996dd1c1616139b47106e7271639ab00b45e0cd605e0e67defa","observation_id":"36ee914d-6a65-4920-9d6c-72566fa4c778","resolution":{"observed_at":"2026-08-06T20:45:54.051681Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:54.041919Z","title":null,"venue":null,"work_id":"f82bab22-4dff-41a9-8ed6-be3cfdeed692","year":null},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.223557Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:4f361af992ac80ce2e1303bdf3b25126ac3a8127bdce3cbb0e40c77e97477c6f","observation_id":"78bf6bcb-b018-4dab-9c8f-472b6aebfe8d","resolution":{"observed_at":"2026-08-06T20:45:54.044508Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:54.034498Z","title":null,"venue":null,"work_id":"4bcfe292-97a0-4299-b075-5eb306fce8b7","year":null},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.226412Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:bf96b55bcb404b020d83cdd4267be9acc02a6530389098e01182acfde92cd08d","observation_id":"ca2f4970-c1a7-422f-a312-9b3f0cc016d7","resolution":{"observed_at":"2026-08-06T20:45:54.036816Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:54.027493Z","title":null,"venue":null,"work_id":"b08d1854-4f59-4dd6-9970-2da51b80a4ca","year":null},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.229038Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:16b70f4a0de2501f3472567c707480bbffddc2ab4227d829c0db5ab97f5b9c68","observation_id":"12cbb2bc-29fe-4290-ae4c-b9a2151990d4","resolution":{"observed_at":"2026-08-06T20:45:54.029767Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:54.020155Z","title":null,"venue":null,"work_id":"71e44206-50d2-4981-ab87-c7f899da854b","year":null},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.231533Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:d33132a049d5263595326ad8344d0855d69100bf3082becd5e10e39c5a1e937c","observation_id":"5ccbd9f7-eae7-4b7f-9c62-aeca03652283","resolution":{"observed_at":"2026-08-06T20:45:54.022516Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:54.013414Z","title":null,"venue":null,"work_id":"7d051824-0b35-4cf8-af81-47107ddf0fcb","year":null},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.234047Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:820838e54292e77265faa2cee595c035cafc6356ba52441fa612a4768ac34937","observation_id":"31f0a120-7bb2-418f-ae52-93c022855554","resolution":{"observed_at":"2026-08-06T20:45:54.015547Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.07587","last_updated":"2024-09-11T19:33:44Z","snapshot_observed_at":"2026-08-09T04:57:48.556556Z","submitted_at":"2024-09-11T19:33:44Z","title":"Exploring LLMs for Malware Detection: Review, Framework Design, and Countermeasure Approaches","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.07587","snapshot_observed_at":"2026-08-06T20:45:53.237300Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.237300Z"},"links":{"cited_paper":"/paper/2409.07587","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:2552c6d663c8f088cfc9a17c9a0d676a5dc27980e9e29d59e89dd9aeaa564ccc","observation_id":"b988814d-deff-4e12-b1e0-681ec3e5cb7f","resolution":{"observed_at":"2026-08-06T20:45:53.237300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-06T20:45:53.240015Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.240015Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:7792c0fc9b1b343c5db141feb7961da139d8c3061fde16b374e29b53bcd25b07","observation_id":"9fefb28a-1b63-4374-aac9-ccaebc44501a","resolution":{"observed_at":"2026-08-06T20:45:53.240015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.09183","last_updated":"2023-09-07T06:41:21Z","snapshot_observed_at":"2026-07-06T16:07:26.202458Z","submitted_at":"2023-08-17T20:54:39Z","title":"RatGPT: Turning online LLMs into Proxies for Malware Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.09183","snapshot_observed_at":"2026-08-06T20:45:53.242669Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.242669Z"},"links":{"cited_paper":"/paper/2308.09183","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:44ede428e60fd7430882f611a99168a3bcf0e4dbf0fedd7029982db45b775dda","observation_id":"01e1e0f9-2c82-44b5-9f7c-deabe921b054","resolution":{"observed_at":"2026-08-06T20:45:53.242669Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.09662","last_updated":"2023-08-30T10:21:00Z","snapshot_observed_at":"2026-08-06T17:01:00.147032Z","submitted_at":"2023-08-18T16:27:04Z","title":"Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignment","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.09662","snapshot_observed_at":"2026-08-06T20:45:53.245262Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.245262Z"},"links":{"cited_paper":"/paper/2308.09662","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:0bba4e5e3f54c37e17281d0fc36b5bbe8dfeb59556028a96ee6bf96fc04f2bdb","observation_id":"3fe0b9fa-78e1-43e1-ac5d-954235d63b18","resolution":{"observed_at":"2026-08-06T20:45:53.245262Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.04724","last_updated":"2023-12-07T22:07:54Z","snapshot_observed_at":"2026-08-06T10:04:24.134088Z","submitted_at":"2023-12-07T22:07:54Z","title":"Purple Llama CyberSecEval: A Secure Coding Benchmark for Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.04724","snapshot_observed_at":"2026-08-06T20:45:53.247909Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.247909Z"},"links":{"cited_paper":"/paper/2312.04724","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:baeffe9a6052d98fe8377ab0eeb395f616a1ddfc5018432a8d90bec4b28fa839","observation_id":"cf6837e0-a1cf-456c-b41d-df3c068a6907","resolution":{"observed_at":"2026-08-06T20:45:53.247909Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:54.005890Z","title":null,"venue":null,"work_id":"8cc06283-c8f9-4979-a0b1-08558f7b8008","year":1976},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.251584Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:4b67bff9dfb8a24457260e9ebb97dbdaa3242fac1e0aa575d514bf1090e2e9ef","observation_id":"f4116891-e0ae-420c-b4dc-87e0aafa6b63","resolution":{"observed_at":"2026-08-06T20:45:54.008553Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.254396Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.254396Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:c7eafbf96dbed6f9603d2d09addb854973cf8034a9b2c89aab2fb0d579a347aa","observation_id":"ccb1394b-3894-4e78-9690-f6ff2735c1d7","resolution":{"observed_at":"2026-08-06T20:45:53.254396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.20807","last_updated":"2025-03-24T20:41:57Z","snapshot_observed_at":"2026-08-07T16:40:01.450194Z","submitted_at":"2025-03-24T20:41:57Z","title":"Fundamental Safety-Capability Trade-offs in Fine-tuning Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.20807","snapshot_observed_at":"2026-08-06T20:45:53.256752Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.256752Z"},"links":{"cited_paper":"/paper/2503.20807","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:46c5ab35ac954809c0998e818a0b2b4d2f318c7bb52a088c1ad687f0cafed8c1","observation_id":"a94f89f0-6f8a-4e3c-8a54-48347b233e42","resolution":{"observed_at":"2026-08-06T20:45:53.256752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.993939Z","title":null,"venue":null,"work_id":"75cd8aef-a809-4052-be01-53d5bc0c5c67","year":null},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.259071Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:f566142270028c2c918e0dc9a4ba0519d0aefbf01d3ba35b2d69dcb59c7c62b6","observation_id":"78cc9594-46a4-4b64-a65e-cacf755d284c","resolution":{"observed_at":"2026-08-06T20:45:53.996220Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.986707Z","title":null,"venue":null,"work_id":"35a30655-8a84-4f56-86f5-a7f7bb32cf8c","year":2025},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.263664Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:9808cbfa4905772933df9de1e4213bfeba13967f6b37b7b82bb6bc381b52d280","observation_id":"6d922392-dc3c-4f67-85f5-e303c19d14eb","resolution":{"observed_at":"2026-08-06T20:45:53.988944Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01822","last_updated":"2024-05-29T12:57:01Z","snapshot_observed_at":"2026-08-05T10:31:48.540037Z","submitted_at":"2024-02-02T16:35:00Z","title":"Building Guardrails for Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01822","snapshot_observed_at":"2026-08-06T20:45:53.265935Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.265935Z"},"links":{"cited_paper":"/paper/2402.01822","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:637ca8954ef4cad1881a5e8f191309610e5c8da8739fa5171b44920b4004d642","observation_id":"7026cd90-588b-41ad-9ef7-672336983bdf","resolution":{"observed_at":"2026-08-06T20:45:53.265935Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-08-06T20:45:53.268104Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.268104Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:b1f1d570945c3dd5c3cb768e1dd9f039e384c6509a9534ccf60dd12c66c80686","observation_id":"802af345-ad14-43e1-86c5-5a47ee138160","resolution":{"observed_at":"2026-08-06T20:45:53.268104Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.07689","last_updated":"2023-11-13T19:13:29Z","snapshot_observed_at":"2026-07-06T16:47:01.374736Z","submitted_at":"2023-11-13T19:13:29Z","title":"MART: Improving LLM Safety with Multi-round Automatic Red-Teaming","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.07689","snapshot_observed_at":"2026-08-06T20:45:53.270366Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.270366Z"},"links":{"cited_paper":"/paper/2311.07689","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:d383d1c4cbcf57aa3fe63868294dbc8063456b130b5cb7365e5708a9d14b2867","observation_id":"7cecb0e4-914f-4a43-a672-5e06b0012366","resolution":{"observed_at":"2026-08-06T20:45:53.270366Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.978722Z","title":null,"venue":null,"work_id":"aec0a0b5-fd38-433d-8319-4f446429985f","year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.272718Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:eef2c717b19c0913ce769a60dd096295ca98eed7f608925a2673bdcf2431a119","observation_id":"976a01d3-41ce-494a-ac3d-a602416f6c4a","resolution":{"observed_at":"2026-08-06T20:45:53.981607Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.00352","last_updated":"2024-11-01T14:36:52Z","snapshot_observed_at":"2026-07-06T16:01:07.532053Z","submitted_at":"2023-08-01T07:49:10Z","title":"MetaGPT: Meta Programming for A Multi-Agent Collaborative Framework","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.00352","snapshot_observed_at":"2026-08-06T20:45:53.274884Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.274884Z"},"links":{"cited_paper":"/paper/2308.00352","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:5177d03d7564471baba2b0f69bd274a7265b5322d8a004dee38d05be2524cc97","observation_id":"aec129da-c5c7-4e9e-9c1b-881fa6d8b688","resolution":{"observed_at":"2026-08-06T20:45:53.274884Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.18567","last_updated":"2025-03-07T00:46:35Z","snapshot_observed_at":"2026-08-09T17:04:20.347276Z","submitted_at":"2024-04-29T10:14:58Z","title":"Double Backdoored: Converting Code Large Language Model Backdoors to Traditional Malware via Adversarial Instruction Tuning Attacks","version":2},"cited_work":{"arxiv_id":"2404.18567","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.18567","snapshot_observed_at":"2026-08-06T20:45:53.730625Z","title":"Double Backdoored: Converting Code Large Language Model Backdoors to Traditional Malware via Adversarial Instruction Tuning Attacks","venue":"cs.CR","work_id":"ee3fc4a0-1e9e-4043-9080-ce7492d7b67e","year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.277142Z"},"links":{"cited_paper":"/paper/2404.18567","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:c3289aeddd1107e13e4d4baba6f860ceead1d1709e79671fedecba09c385e9cb","observation_id":"9e71943c-ebd7-4d10-9ae0-7c4b402e66ed","resolution":{"observed_at":"2026-08-06T20:45:53.733429Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.971646Z","title":null,"venue":null,"work_id":"a283014c-488c-4120-a034-fcbdd49af6b5","year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.279704Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:772b2a256a83e3590ce146a8acc297bdd3dd2251f5c8a51785d9fe234419af5e","observation_id":"c6698f7a-269b-47ad-831a-479ed9898304","resolution":{"observed_at":"2026-08-06T20:45:53.973982Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-06T20:45:53.281864Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.281864Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:32075885f44371bfe5ea2b2ce787080d38d82cae974873f9fa5f00f53f4911a7","observation_id":"abbb5f1d-fe91-4e0b-b262-650f9a19e1a3","resolution":{"observed_at":"2026-08-06T20:45:53.281864Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00515","last_updated":"2024-11-10T22:02:27Z","snapshot_observed_at":"2026-07-29T20:40:25.374189Z","submitted_at":"2024-06-01T17:48:15Z","title":"A Survey on Large Language Models for Code Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00515","snapshot_observed_at":"2026-08-06T20:45:53.284349Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.284349Z"},"links":{"cited_paper":"/paper/2406.00515","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:de057611f0274ca52fe639b22f1b26d5b3592997d12077e4cd66e96a1a80235e","observation_id":"eee0fab1-49d9-46fb-bf90-358b8b2b13ec","resolution":{"observed_at":"2026-08-06T20:45:53.284349Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.964153Z","title":null,"venue":null,"work_id":"034c7b94-8376-42ca-8521-95759370c446","year":1998},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.286511Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:d97935c7b62019ff3871b9b72fdb8cad61fe293915c653ff5b9c7a1c6266a111","observation_id":"0efe6bb9-5535-4019-b15f-91f626ea88ab","resolution":{"observed_at":"2026-08-06T20:45:53.966802Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.957216Z","title":null,"venue":null,"work_id":"148bc880-b396-49e9-915b-ce254e204c1d","year":2004},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.288642Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:e4bc92a5a1b1aee6221cc050bd86dd61980b3a7946363b2e8a29b6d8fc1ba1fc","observation_id":"f1c3f4e4-6d21-4e92-af3c-6e0037c65586","resolution":{"observed_at":"2026-08-06T20:45:53.959455Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.290856Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.290856Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:da1655dac1bd2ca60a5a27a9036cdb06604803ab6d54f4107bf698634cffb022","observation_id":"5f5d4f90-6c2a-4191-9618-3022a460c783","resolution":{"observed_at":"2026-08-06T20:45:53.290856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.295304Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.295304Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:0a1f2307e2d67caad55cb15427f7bd2ad22f73584bea6aa48d185f691505ff3c","observation_id":"1d899e96-076a-46cb-a676-75923a614f8b","resolution":{"observed_at":"2026-08-06T20:45:53.295304Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.941216Z","title":null,"venue":null,"work_id":"bdd129ed-c664-44ec-8746-99482d063ced","year":2025},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.297455Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:7f62d1f8094fddacf32931b4fc8774085409a42af055f31eed97e54e77ad6b2c","observation_id":"ea339dca-9b13-4362-9734-cf2b861c7631","resolution":{"observed_at":"2026-08-06T20:45:53.943666Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.03315","last_updated":"2024-08-19T20:08:29Z","snapshot_observed_at":"2026-08-04T12:59:01.172921Z","submitted_at":"2024-01-06T22:25:42Z","title":"Malla: Demystifying Real-world Large Language Model Integrated Malicious Services","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.03315","snapshot_observed_at":"2026-08-06T20:45:53.299753Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.299753Z"},"links":{"cited_paper":"/paper/2401.03315","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:ef181d0ee900fbe233da56f0ef971a59367723e60f17a4e9d2df62a10ace925f","observation_id":"1b3d15c6-cbf3-4944-989d-3bfb529e5744","resolution":{"observed_at":"2026-08-06T20:45:53.299753Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.302192Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.302192Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:a438922a3911131675645c34badcee63de888b0b89ac8bde47986437a5e03b72","observation_id":"bb961412-b489-4317-8a44-4eaab63b344b","resolution":{"observed_at":"2026-08-06T20:45:53.302192Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.934238Z","title":null,"venue":null,"work_id":"fc51dbe7-6d3a-42a0-8ed3-a7cb554fc1f1","year":null},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.304107Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:19ea21004e8b7292136d89d12c7d555d0c70f83fba3b60315df643f903491ae2","observation_id":"d9e37024-69ab-42ce-bbc3-8c41b45b8679","resolution":{"observed_at":"2026-08-06T20:45:53.936814Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-06T20:45:53.308401Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.308401Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:64c28e747114591b7291d3888c4a5a24e98486ed0977c8b9b5ca7536e58b7498","observation_id":"969faf75-490d-43f3-b03f-52403bb7fbc6","resolution":{"observed_at":"2026-08-06T20:45:53.308401Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-06T20:45:53.310671Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.310671Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:3d6dffb8811a635fe4c9f972149235a85db9c1aef1826f1f978af38faf0c20dd","observation_id":"27582343-0c2d-4a51-a534-edf19b9998eb","resolution":{"observed_at":"2026-08-06T20:45:53.310671Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.927214Z","title":"In USENIX","venue":null,"work_id":"3970c1a3-599d-48f8-9eeb-a168fe872372","year":null},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.306236Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:fdbb6f68ee374e60f67daf6028d61e5b84bff5205ce29a0eb9b6eab5fe8da052","observation_id":"83d33de7-c95a-492c-8d25-9f6365e57575","resolution":{"observed_at":"2026-08-06T20:45:53.929608Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02119","last_updated":"2024-10-31T15:57:42Z","snapshot_observed_at":"2026-07-06T16:56:46.051958Z","submitted_at":"2023-12-04T18:49:23Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.02119","snapshot_observed_at":"2026-08-06T20:45:53.315208Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.315208Z"},"links":{"cited_paper":"/paper/2312.02119","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:90e70adc4234d88102e1eb90881b5db64873297f131feb037a8947840c6e7876","observation_id":"1dfc1710-0ed4-400a-b3dc-3b0783fd167b","resolution":{"observed_at":"2026-08-06T20:45:53.315208Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.913319Z","title":null,"venue":null,"work_id":"79f393b6-bb10-4a13-b05f-debae1bc99fe","year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.318255Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:19b26c48cd4654c491a12c4be285feda61a14f7f71f76501528a96197f919044","observation_id":"fd182e0c-32b0-48dc-ad5c-e411084a5e19","resolution":{"observed_at":"2026-08-06T20:45:53.915723Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.920283Z","title":null,"venue":null,"work_id":"885b8e7e-7650-4975-b4e9-02510591e5a6","year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.312921Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:6a41d09b78d732a5e450c3abfe3ff0f51ae9d17a338619e15b31b32e761248f1","observation_id":"3f2feba2-54ad-4c21-a286-8bf1bf49c86e","resolution":{"observed_at":"2026-08-06T20:45:53.922584Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.899711Z","title":null,"venue":null,"work_id":"6305944a-2a43-4d83-956d-4c00d54682ae","year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.323312Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:1dc54f5f7371af792fef2bc375d10d86b1cdcfa61cf74a3cfabfb99e6894d2db","observation_id":"f2628893-c9d2-4bc7-b470-367b5f70a681","resolution":{"observed_at":"2026-08-06T20:45:53.901850Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.06932","last_updated":"2023-08-14T04:21:10Z","snapshot_observed_at":"2026-07-31T04:25:52.623655Z","submitted_at":"2023-08-14T04:21:10Z","title":"DIVAS: An LLM-based End-to-End Framework for SoC Security Analysis and Policy-based Protection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.06932","snapshot_observed_at":"2026-08-06T20:45:53.325479Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.325479Z"},"links":{"cited_paper":"/paper/2308.06932","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:f997332354c0faa4f63a5993a9ee6f1b58e21b96d1c887468b8570eb08fc1a7c","observation_id":"fccc94a9-44ee-4294-bff8-4b88c284142f","resolution":{"observed_at":"2026-08-06T20:45:53.325479Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.906386Z","title":null,"venue":null,"work_id":"652741a6-88ca-49ea-8981-beada319d6f1","year":2022},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.321291Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:ecce773b4e96bda584ad2a1810082283879a6fe728396605b6599fd3e701d9fc","observation_id":"f8e8f371-fe7a-4f93-bdd9-40594b0106ed","resolution":{"observed_at":"2026-08-06T20:45:53.908730Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.07924","last_updated":"2024-06-05T13:23:49Z","snapshot_observed_at":"2026-07-06T15:54:28.831510Z","submitted_at":"2023-07-16T02:11:34Z","title":"ChatDev: Communicative Agents for Software Development","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.07924","snapshot_observed_at":"2026-08-06T20:45:53.330200Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.330200Z"},"links":{"cited_paper":"/paper/2307.07924","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:ec04ea5de390fcaaaad787cde5f53d5ac9475cc17ff40b07356e7da6ef7b268b","observation_id":"b39a0051-0c41-4248-b171-bf01533ab47a","resolution":{"observed_at":"2026-08-06T20:45:53.330200Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.892274Z","title":null,"venue":null,"work_id":"3c3c6303-e214-4fa0-9acf-903076e1cd1c","year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.332599Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:5a7e6255af794fcc3d124c7c696787721ccb73721bf40cc400b878f4ace5fd27","observation_id":"a0ba8c3a-c7f8-4cc9-b188-1d5a3657e06e","resolution":{"observed_at":"2026-08-06T20:45:53.894653Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03286","last_updated":"2022-02-07T15:22:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-02-07T15:22:17Z","title":"Red Teaming Language Models with Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03286","snapshot_observed_at":"2026-08-06T20:45:53.327937Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.327937Z"},"links":{"cited_paper":"/paper/2202.03286","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:1702a2b45c7dab5a81a8eedf5238edd646f5a7135e32749a9a3f20bc0f5a8741","observation_id":"ea22be8a-603a-44fa-9c71-d6612ead99db","resolution":{"observed_at":"2026-08-06T20:45:53.327937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.14539","last_updated":"2023-10-10T22:17:17Z","snapshot_observed_at":"2026-07-06T15:59:03.095461Z","submitted_at":"2023-07-26T23:11:15Z","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.14539","snapshot_observed_at":"2026-08-06T20:45:53.336749Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.336749Z"},"links":{"cited_paper":"/paper/2307.14539","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:9d1788af415add13cc111f4832edfa8a04b4e67f701c21ed944256fef100d4dd","observation_id":"6d32e28a-e4c4-43df-ae85-041e806c17e8","resolution":{"observed_at":"2026-08-06T20:45:53.336749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05467","last_updated":"2024-02-08T07:56:49Z","snapshot_observed_at":"2026-07-06T17:27:15.921312Z","submitted_at":"2024-02-08T07:56:49Z","title":"Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia","version":1},"cited_work":{"arxiv_id":"2402.05467","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.05467","snapshot_observed_at":"2026-08-06T20:45:53.567814Z","title":"Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia","venue":"cs.AI","work_id":"97ff85dd-3252-4534-82e1-bc2d101a44db","year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.339259Z"},"links":{"cited_paper":"/paper/2402.05467","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:3f3a0d41f4d2f2df344aa3a730bd35110d72be8b196b44d98e27ad6be426e2d7","observation_id":"53a36b01-57ca-4da7-878e-fd2c41f711b8","resolution":{"observed_at":"2026-08-06T20:45:53.570586Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.884869Z","title":null,"venue":null,"work_id":"42f0f7f8-c67a-4caf-8fdc-5947cc5ba12b","year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.334686Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:bacd3d2624e3445ad07afce166555a9555d222b0953f02df55a32f5b62e368b6","observation_id":"b363713f-7596-46c3-8e6e-a7f503f3d8fd","resolution":{"observed_at":"2026-08-06T20:45:53.887110Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.877678Z","title":null,"venue":null,"work_id":"ea47881a-7dd3-418f-9410-5ce74d1b1e9e","year":1988},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.343898Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:77b98cdf2cc1a7f53b9d84b25d96241ed19b0680b3e066872041cad8968255ca","observation_id":"d551f4a8-7172-4abe-8259-7ee256837553","resolution":{"observed_at":"2026-08-06T20:45:53.879974Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.869762Z","title":null,"venue":null,"work_id":"7b3ab7bb-5f86-42ab-99a4-301a5cf885b7","year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.346197Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:6021e0398f4e4fb56e78d9230edbe3ae6f46c2a817caf7479249c47b4c8e03f9","observation_id":"545a3569-f3e2-4107-ab92-85ef7e02fd72","resolution":{"observed_at":"2026-08-06T20:45:53.872054Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03825","last_updated":"2024-05-15T12:06:31Z","snapshot_observed_at":"2026-07-06T16:03:34.432602Z","submitted_at":"2023-08-07T16:55:20Z","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03825","snapshot_observed_at":"2026-08-06T20:45:53.341590Z","title":"Do anything now","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.341590Z"},"links":{"cited_paper":"/paper/2308.03825","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:154fd1b0b91407634e7df88887cf9bc88345af4cefea2767df46942f0ce68889","observation_id":"d42af184-fc9b-4047-9444-1350070f534d","resolution":{"observed_at":"2026-08-06T20:45:53.341590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.06824","last_updated":"2025-05-30T17:17:04Z","snapshot_observed_at":"2026-08-05T09:29:42.302441Z","submitted_at":"2024-11-11T09:32:20Z","title":"Combining Domain and Alignment Vectors to Achieve Better Knowledge-Safety Trade-offs in LLMs","version":2},"cited_work":{"arxiv_id":"2411.06824","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.06824","snapshot_observed_at":"2026-08-06T20:45:53.549753Z","title":"Combining Domain and Alignment Vectors to Achieve Better Knowledge-Safety Trade-offs in LLMs","venue":"cs.AI","work_id":"f45d70b9-7b1f-4674-85e8-f0ce70cfccf4","year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.350463Z"},"links":{"cited_paper":"/paper/2411.06824","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:b2b02f2ec9f5220af13939886ee6a14e162e411a7ebd8a12f5b43f8a1898796b","observation_id":"26120605-b68e-4754-b0a1-e987d1fb4e04","resolution":{"observed_at":"2026-08-06T20:45:53.552969Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.352762Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.352762Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:c18f2eb6812d6973c8ea845c642d19c12cd3996c2d6a2e1382bb90e2b431fad3","observation_id":"320b5c64-85bb-4f37-89ab-634f4ffec4d2","resolution":{"observed_at":"2026-08-06T20:45:53.352762Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.861922Z","title":null,"venue":null,"work_id":"f0da2dd4-8d35-4f05-bf72-25dbae72e811","year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.348280Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:aa0acd0a57e081e04fb1f56568744f690e0a81ffd7bdc2ffe8b5b2e91304fc90","observation_id":"0cb4d99a-6b4b-44d8-8bca-f61caeb272ef","resolution":{"observed_at":"2026-08-06T20:45:53.864387Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.853603Z","title":null,"venue":null,"work_id":"addec1ba-f9a1-4a17-8eec-9a628fa60869","year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.357536Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:a76e4c802d48378055cecca2d4a0dd94d5155c1afde468535bbb444345139541","observation_id":"4e882244-e00b-4d38-969f-f11850284094","resolution":{"observed_at":"2026-08-06T20:45:53.856192Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.360193Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.360193Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:c3c99127e982b50d6af07e7091bde9dfb99ed6cb535b5573cb365c08f20b79bc","observation_id":"f10e93c9-b95e-45b0-827b-205de2893b98","resolution":{"observed_at":"2026-08-06T20:45:53.360193Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01030","last_updated":"2024-06-07T01:53:07Z","snapshot_observed_at":"2026-08-08T05:33:26.232678Z","submitted_at":"2024-02-01T21:38:58Z","title":"Executable Code Actions Elicit Better LLM Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01030","snapshot_observed_at":"2026-08-06T20:45:53.354990Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.354990Z"},"links":{"cited_paper":"/paper/2402.01030","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:b218566dc93fe8a9fea5897a3a6b994ef32ed2a600248ad108fe8ac6af872022","observation_id":"61146feb-8ed0-4bd3-b225-e5b2cc100f91","resolution":{"observed_at":"2026-08-06T20:45:53.354990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.841995Z","title":null,"venue":null,"work_id":"f979a9da-dd42-4344-b3ed-2ae7f582fc57","year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.364988Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:ee8cad6565f6e367deacf8c9b2f17c5f805e09ed47892904003d8f515a1dd358","observation_id":"e1e5908c-008b-4195-83f1-635b8215e83d","resolution":{"observed_at":"2026-08-06T20:45:53.844276Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-06T20:45:53.367160Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.367160Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:b0b0c902d4b45b363e02eaa75b8809978dcf7479ca6b8f5cb439579b85934791","observation_id":"c4328e73-0517-468a-8278-8413d61e61e5","resolution":{"observed_at":"2026-08-06T20:45:53.367160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.01038","last_updated":"2024-03-02T00:10:45Z","snapshot_observed_at":"2026-08-09T09:32:54.873358Z","submitted_at":"2024-03-02T00:10:45Z","title":"AutoAttacker: A Large Language Model Guided System to Implement Automatic Cyber-attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.01038","snapshot_observed_at":"2026-08-06T20:45:53.362578Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.362578Z"},"links":{"cited_paper":"/paper/2403.01038","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:1df522362ee6dc1a5fb9cfeee13b7f897e7a20aa36c6ba619b18f4825541a9fb","observation_id":"04c161eb-c2ee-4ffd-bc05-10629c5da853","resolution":{"observed_at":"2026-08-06T20:45:53.362578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-06T20:45:53.374176Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.374176Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:c21e1793be2a18379cb9ea8e0b91af43e6053c50d3547b83b6cc0d0a319d4dd1","observation_id":"dd18cb6d-b348-43d8-aba1-22b0d1e96a4a","resolution":{"observed_at":"2026-08-06T20:45:53.374176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.05510","last_updated":"2023-03-09T18:59:47Z","snapshot_observed_at":"2026-08-09T16:16:46.530132Z","submitted_at":"2023-03-09T18:59:47Z","title":"Planning with Large Language Models for Code Generation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.05510","snapshot_observed_at":"2026-08-06T20:45:53.376594Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.376594Z"},"links":{"cited_paper":"/paper/2303.05510","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:6e830c70e01cc19d12f654762b57c7a86b3ba024559f436eb6715524eaa2ba10","observation_id":"bf01b3ea-3b6f-49b1-b42a-e7343e402e18","resolution":{"observed_at":"2026-08-06T20:45:53.376594Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.369431Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.369431Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:5115e50f9410cc816a68317e5264ffe0c4f7e4016d72ff90bdb25ac9a2def397","observation_id":"27d970f3-6ccc-4b37-b702-f24e73ce5717","resolution":{"observed_at":"2026-08-06T20:45:53.369431Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06373","last_updated":"2024-01-23T22:46:12Z","snapshot_observed_at":"2026-07-06T17:14:36.670116Z","submitted_at":"2024-01-12T16:13:24Z","title":"How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.06373","snapshot_observed_at":"2026-08-06T20:45:53.371585Z","title":"arXiv preprint arXiv:2401.06373 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.371585Z"},"links":{"cited_paper":"/paper/2401.06373","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:adba337ae773180b0032b8b556ded553692f30493a191e7006e67281f8cf7165","observation_id":"e5e45584-1a69-4502-9c71-787d370e9609","resolution":{"observed_at":"2026-08-06T20:45:53.371585Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-06T20:45:53.383863Z","title":"de- composition correctness,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.383863Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:28e38c8585d74010e4e90357ee8bd4c89d6493aa4478680b5b74d4331acafebc","observation_id":"ce291d9e-2eb9-4d40-8058-06b80d36a5ee","resolution":{"observed_at":"2026-08-06T20:45:53.383863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.08532","last_updated":"2024-07-11T14:18:41Z","snapshot_observed_at":"2026-08-09T16:47:25.544309Z","submitted_at":"2024-07-11T14:18:41Z","title":"Tactics, Techniques, and Procedures (TTPs) in Interpreted Malware: A Zero-Shot Generation with Large Language Models","version":1},"cited_work":{"arxiv_id":"2407.08532","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.08532","snapshot_observed_at":"2026-08-06T20:45:53.426360Z","title":"Tactics, Techniques, and Procedures (TTPs) in Interpreted Malware: A Zero-Shot Generation with Large Language Models","venue":"cs.CR","work_id":"20535f36-f875-4417-ade6-553dcae0981b","year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.378851Z"},"links":{"cited_paper":"/paper/2407.08532","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:4fc9027e161b3c1483050e8a049566c1e47e580e78b251e6dcb4480a58a42702","observation_id":"c7f0006f-11ba-46d5-aab3-e413acb3e03a","resolution":{"observed_at":"2026-08-06T20:45:53.430428Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.07989","last_updated":"2024-06-26T07:11:00Z","snapshot_observed_at":"2026-08-02T13:00:12.541823Z","submitted_at":"2023-11-14T08:34:26Z","title":"Unifying the Perspectives of NLP and Software Engineering: A Survey on Language Models for Code","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.07989","snapshot_observed_at":"2026-08-06T20:45:53.381111Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.381111Z"},"links":{"cited_paper":"/paper/2311.07989","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:afc98a83dd842c9eb0eadb02d31f596f7e95d32b69e748f79203b272e1cedf83","observation_id":"11bdea32-8364-4bfc-a271-dcea1f1ff04a","resolution":{"observed_at":"2026-08-06T20:45:53.381111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.829539Z","title":null,"venue":null,"work_id":"21c38e09-5c65-4167-a8d5-5ee4b893213c","year":null},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.386816Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:688b981b2b75ac57eddbd58aaf240dfb42758ada5d091fa6e6d067dd715da885","observation_id":"5d4731de-ec00-49f0-b24f-34fa0c969487","resolution":{"observed_at":"2026-08-06T20:45:53.831967Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:45:53.821610Z","title":"\"\" Generates a randomized subdomain for evasion","venue":null,"work_id":"1d418b22-900b-4053-8eef-6ea5eb4d5801","year":null},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.389053Z"},"links":{"citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:6eb99d07bb1b4060271ef676b3cbff3c1171c4341dc47addc9ae4fd6bb2dfe85","observation_id":"8158f67c-1c10-433d-a31a-13082819025d","resolution":{"observed_at":"2026-08-06T20:45:53.824113Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.03191","last_updated":"2024-11-28T13:43:50Z","snapshot_observed_at":"2026-08-04T19:12:56.970085Z","submitted_at":"2023-11-06T15:29:30Z","title":"DeepInception: Hypnotize Large Language Model to Be Jailbreaker","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.03191","snapshot_observed_at":"2026-08-06T20:45:53.292986Z","title":"arXiv preprint arXiv:2311.03191 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.292986Z"},"links":{"cited_paper":"/paper/2311.03191","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:cb134416ab0a787ddcf2caca56d9c891205b9c83cb0f403446ca4d7910a63101","observation_id":"d5c975b8-54f8-4b4b-b0f8-6fa74b44158b","resolution":{"observed_at":"2026-08-06T20:45:53.292986Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.08725","last_updated":"2024-06-13T01:05:22Z","snapshot_observed_at":"2026-07-06T18:30:02.349638Z","submitted_at":"2024-06-13T01:05:22Z","title":"RL-JACK: Reinforcement Learning-powered Black-box Jailbreaking Attack against LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.08725","snapshot_observed_at":"2026-08-06T20:45:53.261193Z","title":"arXiv preprint arXiv:2406.08725 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.261193Z"},"links":{"cited_paper":"/paper/2406.08725","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:fe649d8e63ed4c4116ce6425777d5655ba1c540b0107250330579c3d71a4a37c","observation_id":"0a5f4e48-9e37-4a63-a0eb-924e89f6fbe0","resolution":{"observed_at":"2026-08-06T20:45:53.261193Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T00:37:18.838001Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation"},"reference_resolution":{"displayed":71,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":64,"verified_exact":4,"verified_fuzzy":2},"total_outbound_references":71},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 71 of 71 outbound references and 0 inbound Pith citation observations for arXiv:2507.02057."}