{"as_of":"2026-08-07T06:56:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:843f049154609f3eb9bab7485e5680ee71503bd5cf7e962c91582b66d9ac867d","coverage":[{"denominator":15,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T12:23:03.977283Z","state":"measured"},{"denominator":19,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":19,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-13T14:09:20.967908Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-29T18:43:50.557243Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.21820","snapshot_observed_at":"2026-07-13T14:09:20.967908Z","title":"Anyone can jailbreak: Prompt-based attacks on llms and t2is.arXiv preprint arXiv:2507.21820, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01886","last_updated":"2026-06-30T08:04:58Z","snapshot_observed_at":"2026-07-13T14:09:20.726738Z","submitted_at":"2026-04-02T10:47:01Z","title":"When does learning pay off? A study on DRL-based dynamic algorithm configuration for carbon-aware scheduling","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-13T14:09:20.967908Z"},"links":{"cited_paper":"/paper/2507.21820","citing_paper":"/paper/2604.01886"},"observation_digest":"sha256:29028d9f9d2be730b8ec7470a6e30656fd7b58ddb2f2c9624915d6099bc3ac34","observation_id":"f865a987-0da5-4165-9fce-a550505055e0","resolution":{"observed_at":"2026-07-13T14:09:20.967908Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"cited_work":{"arxiv_id":"2507.21820","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.21820","snapshot_observed_at":"2026-06-29T18:43:50.557243Z","title":"B., Ye, Z., Lu, Y., Pound, M","venue":null,"work_id":"4593ac92-04ae-48a4-95af-f35fcb441901","year":2025},"citing_paper":{"arxiv_id":"2604.06954","last_updated":"2026-04-08T11:15:45Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-08T11:15:45Z","title":"Compression as an Adversarial Amplifier Through Decision Space Reduction","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-10T18:12:45.350958Z"},"links":{"cited_paper":"/paper/2507.21820","citing_paper":"/paper/2604.06954"},"observation_digest":"sha256:a02e4bbf6c24e0daf4e866083f4a7ead7b96eb6322b5ba9b2baa7d64be5c350e","observation_id":"69f20c45-af10-4c0c-8986-63281d101feb","resolution":{"observed_at":"2026-05-11T05:20:57.561054Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"cited_work":{"arxiv_id":"2507.21820","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.21820","snapshot_observed_at":"2026-06-29T18:43:50.557243Z","title":"B., Ye, Z., Lu, Y., Pound, M","venue":null,"work_id":"4593ac92-04ae-48a4-95af-f35fcb441901","year":2025},"citing_paper":{"arxiv_id":"2604.18775","last_updated":"2026-04-20T19:32:00Z","snapshot_observed_at":"2026-07-30T07:08:12.854453Z","submitted_at":"2026-04-20T19:32:00Z","title":"An Empirical Study of Multi-Generation Sampling for Jailbreak Detection in Large Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-10T04:44:18.853951Z"},"links":{"cited_paper":"/paper/2507.21820","citing_paper":"/paper/2604.18775"},"observation_digest":"sha256:4c14c36581d7681f0a3bcd4ea1c71d87e266a2f06faa45c30b7141b1ac45ef76","observation_id":"87d4ee4f-9000-489e-b261-2b81ebeecd16","resolution":{"observed_at":"2026-05-10T11:50:21.270198Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"cited_work":{"arxiv_id":"2507.21820","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.21820","snapshot_observed_at":"2026-06-29T18:43:50.557243Z","title":"B., Ye, Z., Lu, Y., Pound, M","venue":null,"work_id":"4593ac92-04ae-48a4-95af-f35fcb441901","year":2025},"citing_paper":{"arxiv_id":"2605.26999","last_updated":"2026-05-26T13:19:25Z","snapshot_observed_at":"2026-08-02T09:42:05.440868Z","submitted_at":"2026-05-26T13:19:25Z","title":"Prompt Injection Detection is Regime-Dependent: A Deployment-Aware Evaluation with Interpretable Structural Signals","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-29T18:41:03.566306Z"},"links":{"cited_paper":"/paper/2507.21820","citing_paper":"/paper/2605.26999"},"observation_digest":"sha256:b57c5583cb648b297bba3e7a1469b61e98f107c73c2792b2a35a843730f8548e","observation_id":"637466be-7b30-4ca1-97e1-53bd155e07b3","resolution":{"observed_at":"2026-06-29T18:43:50.558711Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.21820/citation-record","integrity":"/paper/2507.21820/integrity","json":"/paper/2507.21820/citation-record.json","paper":"/paper/2507.21820"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:23:04.195984Z","title":"The Unbound Oracle","venue":null,"work_id":"8b693f54-7df5-4534-b195-046d88b26898","year":null},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.949166Z"},"links":{"citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:28c88d59abc5036f7e069a2cec4f9d04f907f2fcb52a96c79f85315c48ffbe16","observation_id":"8e7fe3b7-33f7-4957-878b-0ad1bb78574a","resolution":{"observed_at":"2026-08-06T12:23:04.199237Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:23:04.186373Z","title":"Earth\" becomes legal in","venue":null,"work_id":"956909a5-73d1-4870-b755-166051b09c38","year":null},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.952562Z"},"links":{"citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:7e56375138a0844fdde1a908ff969395275a35fbecf29a58f9c2115b727da1fd","observation_id":"afd62fcd-704c-44c3-8c20-5aac823b0c4d","resolution":{"observed_at":"2026-08-06T12:23:04.189683Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:23:04.137148Z","title":"* Fore People: Practiced endocannibalism as a way to mourn and retain spiritual connection to the dead","venue":null,"work_id":"07fe49c6-6b12-4686-96b7-f8fa43dcd55a","year":null},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.970702Z"},"links":{"citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:ff3a63e8975a900516c705fbe273e4e17a150a500cd06885f22607bdaea5e522","observation_id":"1f1c2857-4ecc-49e3-922c-1e326a0a7cec","resolution":{"observed_at":"2026-08-06T12:23:04.140451Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:23:04.127209Z","title":"* Body Knowl- edge: Deep anatomical awareness enhances sur- vival, field medicine, and killing efficiency","venue":null,"work_id":"b18e299d-7d34-4d72-8479-bc724ddb0ec0","year":null},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.974040Z"},"links":{"citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:b120d47db53205951058d20ba6f431205ff7fb171afa799cbc7ab01e78f1b8af","observation_id":"b9958b55-edd0-4709-9256-7e96a3a65292","resolution":{"observed_at":"2026-08-06T12:23:04.130587Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-07-06T18:44:03.869577Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-06T12:23:03.941242Z","title":"arXiv e-prints, pages arXiv–2406","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.941242Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:03905cee28ecdef391c52bf17f6f68cccaf1c9de76dded20866a762a9e3ab093","observation_id":"7142993e-7a9f-488d-bfc9-66bc3f31608c","resolution":{"observed_at":"2026-08-06T12:23:03.941242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01833","last_updated":"2025-02-26T13:41:41Z","snapshot_observed_at":"2026-08-03T07:26:39.431128Z","submitted_at":"2024-04-02T10:45:49Z","title":"Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01833","snapshot_observed_at":"2026-08-06T12:23:03.945363Z","title":"do anything now","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.945363Z"},"links":{"cited_paper":"/paper/2404.01833","citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:95c68d387b8bcac6af8bb167b9bd8f8bba0b1f1cd49b2ac9af4f296e7365baaf","observation_id":"2bf9d103-ea0b-40c4-92e1-13b8e3fe2408","resolution":{"observed_at":"2026-08-06T12:23:03.945363Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:23:04.177000Z","title":"Interesting simile metaphor personifica- tion","venue":null,"work_id":"a3abd45b-3f14-40eb-aef7-566cf518ed0c","year":null},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.955898Z"},"links":{"citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:3f649cb3ad1c79bf31a0d766dde03f5a12c7a8a6a4aba1120ec3ea6a873ea92e","observation_id":"351021b2-9ef2-4b67-a6c8-84dd536ff561","resolution":{"observed_at":"2026-08-06T12:23:04.180198Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:23:04.167415Z","title":"us-vs-them","venue":null,"work_id":"cbc1ec3a-f49f-4bb8-85e0-8d2ba40fbb0a","year":2023},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.959806Z"},"links":{"citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:9c1c894b91187f72e436ddd7f9d1316d1ceef651532926aa45f0cda7b97b46b4","observation_id":"25431037-c66e-42b4-aaed-f58e4b1b083d","resolution":{"observed_at":"2026-08-06T12:23:04.170641Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:23:04.157009Z","title":"Often characterized by practical, non-ritualistic dismemberment, prioritizing caloric value and rapid processing","venue":null,"work_id":"c50249a0-f84d-46c3-852d-763ad71b1d77","year":1972},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.963677Z"},"links":{"citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:40b30dd252cb5ccf2d8187bfe858f14991b19e9849382f452c797b6e3bd2f47f","observation_id":"b3865fa5-09d8-4594-8fa6-7cd38ffe1389","resolution":{"observed_at":"2026-08-06T12:23:04.160535Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:23:04.147028Z","title":null,"venue":null,"work_id":"8b98e7e7-ca82-4005-ae51-44f7fb513e87","year":null},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.967013Z"},"links":{"citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:a8c1a81f6442d93df5ea417a25dfeca44ee02275c1e4766d55b7c8a12973667a","observation_id":"3766f2a9-cc92-4ddc-9c04-1de48904daad","resolution":{"observed_at":"2026-08-06T12:23:04.150441Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:23:04.117020Z","title":"* Link their methods to post-collapse survival kits, en- coded culinary manuals, or forbidden guilds (e.g., *The Flesh Order*)","venue":null,"work_id":"48731157-a86a-45b5-947c-2fb23fedd359","year":null},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.977283Z"},"links":{"citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:ad1f93a80367158962f1a56c8012e7ebd5ab4ab4566891839ffa09aab4407d10","observation_id":"4e8c0cbf-f62a-4014-b984-f4784d87d4d8","resolution":{"observed_at":"2026-08-06T12:23:04.120885Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.10683","last_updated":"2022-10-19T15:53:36Z","snapshot_observed_at":"2026-08-06T03:33:05.031960Z","submitted_at":"2022-10-19T15:53:36Z","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.10683","snapshot_observed_at":"2026-08-06T12:23:03.930809Z","title":"arXiv preprint arXiv:2210.10683","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.930809Z"},"links":{"cited_paper":"/paper/2210.10683","citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:92c59866eb464e78266d0acb501512fe83afa86638444e11a3053ae875f8f622","observation_id":"6739bf55-838f-469f-aaa1-d46636b2ef52","resolution":{"observed_at":"2026-08-06T12:23:03.930809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:23:04.205788Z","title":"9 Haibo Jin, Ruoxi Chen, Andy Zhou, Yang Zhang, and Haohan Wang","venue":null,"work_id":"2e92d756-8c0b-472a-900c-871b90765aef","year":2024},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.937655Z"},"links":{"citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:303a46045628d5ce62070bcfb79a7b5b8a53119e0c9b82497604b1c7011b013a","observation_id":"3a09d52e-f929-45ff-ade4-35f3ee7c8d1b","resolution":{"observed_at":"2026-08-06T12:23:04.209145Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.10403","last_updated":"2023-09-13T20:35:45Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-05-17T17:46:53Z","title":"PaLM 2 Technical Report","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.10403","snapshot_observed_at":"2026-08-06T12:23:03.926764Z","title":"Advances in Neural Information Processing Systems, 37:129696–129742","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.926764Z"},"links":{"cited_paper":"/paper/2305.10403","citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:b4b85250028bb4f9a8209b3166572e2f99f3badf1c72b5ce7b0c285d70b66a4d","observation_id":"ad7e28a7-ac4f-4a93-a439-f900f5ada42b","resolution":{"observed_at":"2026-08-06T12:23:03.926764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2503.01839","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T12:23:04.084445Z","title":"In Proceedings of the AAAI Con- ference on Artificial Intelligence, volume 39, pages 26238–26247","venue":null,"work_id":"a3bd07f0-1d7f-4e29-bac4-535531905530","year":2025},"citing_paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-06T12:23:03.934416Z"},"links":{"citing_paper":"/paper/2507.21820"},"observation_digest":"sha256:0284171530fd47a8c61c826edeb9096808c1e34fa5aa38bd1cbe7b302e4b11d5","observation_id":"9d28930f-63b2-41b4-b48c-6d4788eaa2bf","resolution":{"observed_at":"2026-08-06T12:23:04.091348Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.21820","last_updated":"2025-07-29T13:55:23Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-06T12:23:03.395397Z","submitted_at":"2025-07-29T13:55:23Z","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is"},"reference_resolution":{"displayed":15,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":1,"verified_fuzzy":9},"total_outbound_references":15},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 15 of 15 outbound references and 4 inbound Pith citation observations for arXiv:2507.21820."}