{"as_of":"2026-08-10T20:24:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:07d4a2f5fb098c1ad08c79f0e197772be5c58b16cf5c637b93c46e8313049eff","coverage":[{"denominator":159,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T04:47:25.494752Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.03054/citation-record","integrity":"/paper/2508.03054/integrity","json":"/paper/2508.03054/citation-record.json","paper":"/paper/2508.03054"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:22.203934Z","title":"Scalable training of","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:22.203934Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:eb70246d54f04f940810074727c824897f509f2b50bf27700495b6dec2d7c7dd","observation_id":"268a9f57-319a-4c13-a9cc-6d97f22b82ec","resolution":{"observed_at":"2026-08-06T04:47:22.203934Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:22.241765Z","title":"Tetreault , title =","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:22.241765Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:91e3c850b75cb7077b0f91b3f58985827551ec937f2a63e14c641870454532c8","observation_id":"9503c7ab-737b-4b6c-b171-5b566f08c70b","resolution":{"observed_at":"2026-08-06T04:47:22.241765Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:22.285496Z","title":"A Framework for Learning Predictive Structures from Multiple Tasks and Unlabeled Data , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:22.285496Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:04f06b0dfec469b474753d9649be2e5673054c7883aae0bf26e43baecc1a5a61","observation_id":"e6e363e9-b134-4ada-a3d3-bf816c303c72","resolution":{"observed_at":"2026-08-06T04:47:22.285496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-06T04:47:22.349778Z","title":"Zico Kolter and Matt Fredrikson , title =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:22.349778Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:9a92020044708f19ebd5cb77ed8fc1508a1e0d0be87f32dcb7e6b5d71b7199a5","observation_id":"04d16a38-0f21-415b-a5ff-0d1c0fc63bcc","resolution":{"observed_at":"2026-08-06T04:47:22.349778Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:22.497355Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:22.497355Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:f2cb60b79efe5e047441ddaf3a79136f04b8a6c7c836b2bedd1be3b28ed32566","observation_id":"808b8cd9-03dd-4762-8062-b412a1ecf0ff","resolution":{"observed_at":"2026-08-06T04:47:22.497355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-06T04:47:22.579244Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models , journal =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:22.579244Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:06912c195853499d4cbabd58b1bbd78db3a4a0d5570fe3c5830550df770dbe15","observation_id":"df50883e-b059-44e1-bf3d-00351034a58e","resolution":{"observed_at":"2026-08-06T04:47:22.579244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:22.730128Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:22.730128Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:8998a8197f873bd618bacfbf5300dc4974da0d1eb68ee9cfd5504d92317ea4e5","observation_id":"f62de662-ba16-469b-892a-8b9e5e61e7c3","resolution":{"observed_at":"2026-08-06T04:47:22.730128Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:22.785020Z","title":"Inducing High Energy-Latency of Large Vision-Language Models with Verbose Images , booktitle =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:22.785020Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:ba267c0b348884d68b6a96046ddf5bafad57fc6a1ca033f1992f9c8ca42ab6d9","observation_id":"d7640626-c0c8-4179-bbfe-30df0102d0a3","resolution":{"observed_at":"2026-08-06T04:47:22.785020Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:22.829239Z","title":"Prompt as Triggers for Backdoor Attack: Examining the Vulnerability in Language Models , booktitle =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:22.829239Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:fee147897565e224a1d25f8db2c0d156dde093d80709b098b0d2eda027cb5f80","observation_id":"aad0b035-6efa-4719-b3c2-5aeb4463acb2","resolution":{"observed_at":"2026-08-06T04:47:22.829239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:22.884474Z","title":"Jailbroken: How Does","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:22.884474Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:baf915132e65a31f4f5ce482feefef979ee59ec939a19d0b4f3939376cf89f66","observation_id":"230005f1-b3d3-4889-9174-63d6b0b72c42","resolution":{"observed_at":"2026-08-06T04:47:22.884474Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-06T04:47:22.953918Z","title":"CoRR , volume =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:22.953918Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:0ae1eef18b75f80d927bba9e788f2452915f5d90492bba65a655df8fb81e2029","observation_id":"523c6ef9-1a02-44fa-a8fb-3d5412493390","resolution":{"observed_at":"2026-08-06T04:47:22.953918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-04T23:34:13.332065Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.04295","snapshot_observed_at":"2026-08-06T04:47:23.084880Z","title":"CoRR , volume =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:23.084880Z"},"links":{"cited_paper":"/paper/2407.04295","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:c89ba90fbbf0de5a5a12fc0120b43ef41faf0e61989907ecd1e273a551c5546c","observation_id":"12a79ec7-62c7-426b-9e89-277f606d8751","resolution":{"observed_at":"2026-08-06T04:47:23.084880Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.07308","last_updated":"2024-05-02T14:28:39Z","snapshot_observed_at":"2026-08-10T17:53:09.843403Z","submitted_at":"2023-08-14T17:54:10Z","title":"LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.07308","snapshot_observed_at":"2026-08-06T04:47:23.346117Z","title":"arXiv preprint arXiv:2308.07308 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:23.346117Z"},"links":{"cited_paper":"/paper/2308.07308","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:e4c0a2b9bb0527b78ca4348b6a9642674ff1337eed3d9671f81da168104aeeb7","observation_id":"9805f226-225d-4d76-9475-be8a53ab7e8e","resolution":{"observed_at":"2026-08-06T04:47:23.346117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:23.430629Z","title":"First Conference on Language Modeling , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:23.430629Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:2f0a59db6d8f5eff2d6b79890b950d3fb997642e752daca5d8c3c6b84d5c5a49","observation_id":"d6ede773-66ae-4237-8d0c-5b939c014180","resolution":{"observed_at":"2026-08-06T04:47:23.430629Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11855","last_updated":"2024-02-02T08:28:01Z","snapshot_observed_at":"2026-08-07T01:32:12.754339Z","submitted_at":"2023-11-20T15:50:09Z","title":"Evil Geniuses: Delving into the Safety of LLM-based Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.11855","snapshot_observed_at":"2026-08-06T04:47:23.782759Z","title":"arXiv preprint arXiv:2311.11855 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:23.782759Z"},"links":{"cited_paper":"/paper/2311.11855","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:3b4e781173277d4308fba00d4060b2e7c7c9af3f619f1f98a9dc39599e7906a1","observation_id":"2d623042-1608-43f7-a927-cf9607c502ab","resolution":{"observed_at":"2026-08-06T04:47:23.782759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:23.986224Z","title":"Attention Can Reflect Syntactic Structure (If You Let It) , booktitle =","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:23.986224Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:f2b72f6440b0e2cd060027d2ec9c1238e7f48748e6f9f80a3a3c16a87c8a08d5","observation_id":"70b746be-409b-48ea-b463-0b6b30333332","resolution":{"observed_at":"2026-08-06T04:47:23.986224Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.06809","last_updated":"2025-06-18T02:50:22Z","snapshot_observed_at":"2026-07-06T19:30:21.486298Z","submitted_at":"2024-10-09T12:09:30Z","title":"Root Defence Strategies: Ensuring Safety of LLM at the Decoding Level","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.06809","snapshot_observed_at":"2026-08-06T04:47:24.139384Z","title":"CoRR , volume =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:24.139384Z"},"links":{"cited_paper":"/paper/2410.06809","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:4765d93ceb47505c99d291e075b43d0d6e504a7a84e9a9d6cf3db3f01cacc1f4","observation_id":"8bf99afd-e3bd-40b5-a05c-3b19fdda406d","resolution":{"observed_at":"2026-08-06T04:47:24.139384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2021.emnlp-main.653","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":"On Homophony and R","venue":"Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing","work_id":"a5d095ac-be5c-4719-9387-df87b407b931","year":2021},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:24.335933Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:3d7311782db0387666eb37d397bcf4ed08a1085da94b5ff8fde48efacd359579","observation_id":"8fb4a72e-a867-4d43-959f-000bd17be7e4","resolution":{"observed_at":"2026-08-06T04:47:26.017798Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:24.554229Z","title":"Shterionov and Matthew Gwilliam , editor =","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:24.554229Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:1061991ec57a3e6961944234ae7cd4b03721b43fe0654aed43eeeb033271095f","observation_id":"293e9d46-8622-4de1-9882-cf8ef8e6dd22","resolution":{"observed_at":"2026-08-06T04:47:24.554229Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:24.707168Z","title":"Entropy Rate Estimation for Markov Chains with Large State Space , booktitle =","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:24.707168Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:3cdaa5fe2f802374c1d7098bce8ea269040efc0224263b10106e463c1ef5b4ad","observation_id":"9443664b-5e78-4fdb-b4ae-70d53d0e2e15","resolution":{"observed_at":"2026-08-06T04:47:24.707168Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2020.acl-main.615","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":"Generalized Entropy Regularization or: There's Nothing Special about Label Smoothing , booktitle =","venue":null,"work_id":"ded0c2e1-ff70-415a-8172-9a7f358f899b","year":2020},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:24.860444Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:8df34d9325187a1169d8a616ed282f0ee6da32cffb5d8d05267d81d1cb27efac","observation_id":"6894b06d-8ed5-402f-92e0-5a4d0f02999f","resolution":{"observed_at":"2026-08-06T04:47:26.000793Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:27.801275Z","title":"Shannon , title =","venue":null,"work_id":"ce63b34b-de42-469f-b048-708e986f202f","year":1948},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.010222Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:23e6a0730b7357a5eebc4a5b20f88f420251dc73368ebe94c3231d6e8acfe791","observation_id":"cc5ecc72-7f73-4725-b4bb-b1c14e3c4b74","resolution":{"observed_at":"2026-08-06T04:47:27.806722Z","resolver_source":"arxiv_id_nonexistent","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.058042Z","title":"What does Attention in Neural Machine Translation Pay Attention to? , booktitle =","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.058042Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:c3adc0b9762ee768465edaae0e0f488b7615445aae6c2df98089d4611828cc75","observation_id":"23f494f7-cdc1-41f4-a666-705b5d9ae569","resolution":{"observed_at":"2026-08-06T04:47:25.058042Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.063039Z","title":"Entropy-based Attention Regularization Frees Unintended Bias Mitigation from Lists , booktitle =","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.063039Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:98bc1b0f6987fd7b03a92e2dca19b9e73dc6338421c974b6c6c7e33e32a3a333","observation_id":"f1e1890b-4151-44b2-9d2a-4c869dcdd797","resolution":{"observed_at":"2026-08-06T04:47:25.063039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.066419Z","title":"BaitAttack: Alleviating Intention Shift in Jailbreak Attacks via Adaptive Bait Crafting , booktitle =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.066419Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:d28a7c3c83959d36ff4ad3d83df7c1d3d20bb82d1ab746e5f1751ea45fbcc600","observation_id":"5f8d3817-ab9e-4e22-9ec3-fb5884bad7b4","resolution":{"observed_at":"2026-08-06T04:47:25.066419Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.069482Z","title":"Controlled Text Generation with Natural Language Instructions , booktitle =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.069482Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:6a1a04f01bfa1739fc3b45d7532d0c1bdf60789d6d98d1d06defe9f7edecc6ce","observation_id":"e9d27641-049e-411e-9429-58e7d31e42e5","resolution":{"observed_at":"2026-08-06T04:47:25.069482Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.14469","last_updated":"2024-06-17T03:01:58Z","snapshot_observed_at":"2026-08-07T22:57:56.263839Z","submitted_at":"2024-04-22T17:42:58Z","title":"SnapKV: LLM Knows What You are Looking for Before Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.14469","snapshot_observed_at":"2026-08-06T04:47:25.072723Z","title":"CoRR , volume =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.072723Z"},"links":{"cited_paper":"/paper/2404.14469","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:0b63fa60423705a121093be5dddb75cf5207283c4052eb6368dc0b258b4a0800","observation_id":"e1c78630-6f86-45e5-bf4d-504c42e10826","resolution":{"observed_at":"2026-08-06T04:47:25.072723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03684","last_updated":"2024-06-11T19:02:52Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:01:53Z","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03684","snapshot_observed_at":"2026-08-06T04:47:25.076141Z","title":"Pappas , title =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.076141Z"},"links":{"cited_paper":"/paper/2310.03684","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:0d10aa098ed5976062bf808385ee547b44f31b8fd33c4a84b726e08bf423e89a","observation_id":"5f659444-1eb3-4900-a5b9-b99afdb4d350","resolution":{"observed_at":"2026-08-06T04:47:25.076141Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.079566Z","title":"Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritization , booktitle =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.079566Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:c4b52174826a9032e3f39e166d5d09c4aa573fed61819c9390089fcc09058d76","observation_id":"84dfebf8-d365-4540-b54e-1d89361e6052","resolution":{"observed_at":"2026-08-06T04:47:25.079566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.082655Z","title":"and Stoica, Ion and Xing, Eric P","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.082655Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:677b951b079839e7ca4e224b18f9bcc9c96448cd00b81e937b5120921d2c8832","observation_id":"240cc201-76cd-4c8e-a7c1-f9a8723ddd89","resolution":{"observed_at":"2026-08-06T04:47:25.082655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06825","last_updated":"2023-10-10T17:54:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-10T17:54:58Z","title":"Mistral 7B","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06825","snapshot_observed_at":"2026-08-06T04:47:25.086087Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.086087Z"},"links":{"cited_paper":"/paper/2310.06825","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:f3399e800a6d0a30d41d878ec05fea438f8f39380f46aa9f69124937ebb334d9","observation_id":"ac6945f3-f405-4197-b10a-4586ddd3ad87","resolution":{"observed_at":"2026-08-06T04:47:25.086087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.089570Z","title":"LongBench:","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.089570Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:6a93ac1fe8993c0cdc8b4c82609cccf2497ac05c1437142420fc9af2db71486c","observation_id":"17428ba0-a9c2-45de-8fcf-8226c1647016","resolution":{"observed_at":"2026-08-06T04:47:25.089570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.093166Z","title":"Hashimoto , editor =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.093166Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:fc8e86041ee85513e4caa1bfdfe19a4984ae293966513097f60fb99cae313923","observation_id":"3296610d-420b-4c9a-a657-efc24edaea97","resolution":{"observed_at":"2026-08-06T04:47:25.093166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.096346Z","title":"ROUGE : A Package for Automatic Evaluation of Summaries","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.096346Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:1d69674508b1f30b167095f72112c7d61371605ec96cd1f246e0708145a61e22","observation_id":"a10ca096-16dd-4902-b7e7-971eb3b7478e","resolution":{"observed_at":"2026-08-06T04:47:25.096346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16873","last_updated":"2025-06-02T18:59:01Z","snapshot_observed_at":"2026-08-05T10:26:02.067012Z","submitted_at":"2024-04-21T22:18:13Z","title":"AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16873","snapshot_observed_at":"2026-08-06T04:47:25.099818Z","title":"CoRR , volume =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.099818Z"},"links":{"cited_paper":"/paper/2404.16873","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:19fed4e6d75bd0c8e0e1ef6e776df7c69e61c85bb40eb2ad0456ebe545a66438","observation_id":"a8d067be-6877-4e4f-af8b-c8240083be68","resolution":{"observed_at":"2026-08-06T04:47:25.099818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07921","last_updated":"2024-11-24T18:03:43Z","snapshot_observed_at":"2026-08-08T01:20:41.374144Z","submitted_at":"2024-04-11T17:05:50Z","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07921","snapshot_observed_at":"2026-08-06T04:47:25.104226Z","title":"CoRR , volume =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.104226Z"},"links":{"cited_paper":"/paper/2404.07921","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:94a818788af0b31fb3cef270edde9ac2d2718c5f90fbba1de413f5bf355b7355","observation_id":"28913264-2a3c-462d-a4db-7165349957c0","resolution":{"observed_at":"2026-08-06T04:47:25.104226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.19937","last_updated":"2024-10-25T19:18:22Z","snapshot_observed_at":"2026-07-06T19:39:59.961070Z","submitted_at":"2024-10-25T19:18:22Z","title":"RobustKV: Defending Large Language Models against Jailbreak Attacks via KV Eviction","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.19937","snapshot_observed_at":"2026-08-06T04:47:25.108472Z","title":"CoRR , volume =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.108472Z"},"links":{"cited_paper":"/paper/2410.19937","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:ace9ee7859c47ae68cc0091e4f3dd812977281a6453b122a128d8d684343b8f4","observation_id":"7c035543-a51e-4ded-9e62-4a46244f5525","resolution":{"observed_at":"2026-08-06T04:47:25.108472Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.112045Z","title":"Forty-first International Conference on Machine Learning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.112045Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:7ecd029034839d32dc5b973cbf7f54dfc884026d91ca32a9d3049d15d6bc870a","observation_id":"bdc42b29-3b87-43e9-a6cf-48eb35192df1","resolution":{"observed_at":"2026-08-06T04:47:25.112045Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.115115Z","title":"Cambridge (Mass.) , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.115115Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:3dc1267c923e14c14a229b1605eca90a109361ddda9b68df1cb75d41352f8967","observation_id":"ca48cc06-146f-4c59-b53f-b0e421f5677c","resolution":{"observed_at":"2026-08-06T04:47:25.115115Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.13860","last_updated":"2024-03-10T13:58:08Z","snapshot_observed_at":"2026-07-06T15:31:18.144952Z","submitted_at":"2023-05-23T09:33:38Z","title":"Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.13860","snapshot_observed_at":"2026-08-06T04:47:25.119079Z","title":"CoRR , volume =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.119079Z"},"links":{"cited_paper":"/paper/2305.13860","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:0dfce2795710bfa94eba213df1ddc783455c4eb83a066221fa87edc0838f1a21","observation_id":"83dafb67-4289-4765-998c-66035bb5d752","resolution":{"observed_at":"2026-08-06T04:47:25.119079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.122830Z","title":"The Twelfth International Conference on Learning Representations,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.122830Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:5a8e2befa0bc5e3dfd909d874bc82f26604ef5890fce406ab415fb32cfc7c486","observation_id":"7d6fc5db-10f9-453a-ae5f-0f1dfe37cfab","resolution":{"observed_at":"2026-08-06T04:47:25.122830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.03271","last_updated":"2024-11-13T17:10:20Z","snapshot_observed_at":"2026-08-08T23:11:42.451311Z","submitted_at":"2024-02-05T18:28:44Z","title":"Uncertainty of Thoughts: Uncertainty-Aware Planning Enhances Information Seeking in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.03271","snapshot_observed_at":"2026-08-06T04:47:25.126972Z","title":"Uncertainty of Thoughts: Uncertainty-Aware Planning Enhances Information Seeking in Large Language Models , journal =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.126972Z"},"links":{"cited_paper":"/paper/2402.03271","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:542c7eb6c0f5f9ee4e833cb809812e76ef84d1300a2dac8f62fba92d96a49772","observation_id":"7eab2cfe-ff35-47ea-b193-636ce276f383","resolution":{"observed_at":"2026-08-06T04:47:25.126972Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02119","last_updated":"2024-10-31T15:57:42Z","snapshot_observed_at":"2026-07-06T16:56:46.051958Z","submitted_at":"2023-12-04T18:49:23Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.02119","snapshot_observed_at":"2026-08-06T04:47:25.130779Z","title":"CoRR , volume =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.130779Z"},"links":{"cited_paper":"/paper/2312.02119","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:312e3fd80b73c18d0aa2a52da8de2b95b2708264068f78f4c65b3431b41cc71c","observation_id":"7c19d35d-06fe-4cab-9ace-2fb85f4c9c6d","resolution":{"observed_at":"2026-08-06T04:47:25.130779Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.134843Z","title":"Constituency Parsing with a Self-Attentive Encoder , booktitle =","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.134843Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:59b22b7279d7bd4ebd0f292725b82b66fd6a61d5793fbb1c268f6954040aedff","observation_id":"86f5ac7a-f936-476b-af8e-d1f145e992fa","resolution":{"observed_at":"2026-08-06T04:47:25.134843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.138343Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.138343Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:2f90cd49ef325e7e5b08757771c444250093ad70bf65c0d550f39aac5e6547bb","observation_id":"60559ba7-5bad-4563-8330-db684460bab5","resolution":{"observed_at":"2026-08-06T04:47:25.138343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.142775Z","title":"Moses: Open Source Toolkit for Statistical Machine Translation , booktitle =","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.142775Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:64cb722b2aa3e1f93d935574f2dd44e30697e6a95a368f1701fe2e8b627de2b0","observation_id":"92d87fb3-dad1-4b95-b6b0-58f9c72ba017","resolution":{"observed_at":"2026-08-06T04:47:25.142775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.146201Z","title":"The Second Tiny Papers Track at","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.146201Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:4ae98d355d5e7df7c427d3825f8609b0690e3c1cb83e90f158000aa4039f8043","observation_id":"1b1cb66b-27b9-458f-ae20-a170e172979c","resolution":{"observed_at":"2026-08-06T04:47:25.146201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.08660","last_updated":"2024-11-29T02:35:47Z","snapshot_observed_at":"2026-08-04T04:24:17.015186Z","submitted_at":"2024-10-11T09:39:11Z","title":"RePD: Defending Jailbreak Attack through a Retrieval-based Prompt Decomposition Process","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.08660","snapshot_observed_at":"2026-08-06T04:47:25.150652Z","title":"CoRR , volume =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.150652Z"},"links":{"cited_paper":"/paper/2410.08660","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:1be0fdc5af505d26fc9bef4e3f90107e0d4491c1a64aeeeb9b54a76ca3532bbc","observation_id":"b7988d8a-89bf-474b-93e7-a3c872f3f9d3","resolution":{"observed_at":"2026-08-06T04:47:25.150652Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.154435Z","title":"Proceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (Volume 1: Long Papers),","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.154435Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:8095f8ea2d1f1ab1169f6ed48a0e831b17978e14677c38abef88ccf39d826731","observation_id":"c1cfcda2-590f-4fa8-b15e-01f4c01ba1f1","resolution":{"observed_at":"2026-08-06T04:47:25.154435Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.160626Z","title":"Linguistic Obfuscation Attacks and Large Language Model Uncertainty","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.160626Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:7ca5a68a646a11592e0cbd631fa53a98dc23d9853ed3af278310578d40f76289","observation_id":"363f505c-5be9-44aa-8a1e-0946f08cd27b","resolution":{"observed_at":"2026-08-06T04:47:25.160626Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.163993Z","title":"Baseline defenses for adversarial attacks against aligned language models , url =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.163993Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:93843cf567272781bfbff4532b195a9c83dee80fd2e3c16831607e6050c33fd1","observation_id":"1e8d6386-4b6b-475d-b8d4-75e4ed0bfcc3","resolution":{"observed_at":"2026-08-06T04:47:25.163993Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.167197Z","title":"Jailbreak and guard aligned language models with only few in-context demonstrations , url =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.167197Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:4d0f3d55619ed45a333a897b3b25c3eec9f40f3868cf58ec5c6dcad6edffbe4c","observation_id":"0572b867-c3ee-4b32-8ab2-8116a4cadc7d","resolution":{"observed_at":"2026-08-06T04:47:25.167197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.177110Z","title":"Entropy- and Distance-Regularized Attention Improves Low-Resource Neural Machine Translation , booktitle =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.177110Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:acb5135df4afcd612b1b9c102701629da32a794e88514d2f2f332aa3adc3142c","observation_id":"9f0920ac-b2e9-463e-9d48-bc9051477632","resolution":{"observed_at":"2026-08-06T04:47:25.177110Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18118","last_updated":"2024-12-24T14:26:36Z","snapshot_observed_at":"2026-07-06T18:37:08.729847Z","submitted_at":"2024-06-26T07:15:44Z","title":"SafeAligner: Safety Alignment against Jailbreak Attacks via Response Disparity Guidance","version":4},"cited_work":{"arxiv_id":"2406.18118","doi":"10.48550/arxiv.2406.18118","metadata_source":"pith","pith_arxiv_id":"2406.18118","snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":"SafeAligner: Safety Alignment against Jailbreak Attacks via Response Disparity Guidance","venue":"cs.CR","work_id":"4d63591a-c197-4c50-b824-71b1c254601d","year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.180930Z"},"links":{"cited_paper":"/paper/2406.18118","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:0f7a0e57a0dafcbe1dfc731297ea73a334f2725caf900c27d5c1c83727779667","observation_id":"bae73e10-f23a-4f3f-aef0-d335a9fce043","resolution":{"observed_at":"2026-08-06T04:47:25.845928Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3649449","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":"Pre-Trained Language Models for Text Generation:","venue":"ACM Computing Surveys","work_id":"fc5e6d02-921c-46fb-b3c2-585635d82741","year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.184223Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:d808b0b0edcca436bf1cfa03faca16787a8753f1145dddbc516a33706d7d294a","observation_id":"b1a6e08a-2f62-499b-8543-ee1742fa93bf","resolution":{"observed_at":"2026-08-06T04:47:25.831874Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.193774Z","title":"Zhao and Kelvin Guu and Adams Wei Yu and Brian Lester and Nan Du and Andrew M","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.193774Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:9b0656c2d212a2572328bce5d99b31a12d67efb7063d135ed308a78d31328a27","observation_id":"18d1b30f-ec20-4e5c-a5f0-820895b24f35","resolution":{"observed_at":"2026-08-06T04:47:25.193774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.197914Z","title":"MetaICL: Learning to Learn In Context , booktitle =","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.197914Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:4d94cce67c18b9cebf8a3346545a0a93c8db32848ff0cfa3d0c7da4356475b23","observation_id":"72c6cf0d-de0c-4fb9-b7f6-4a893b36f71f","resolution":{"observed_at":"2026-08-06T04:47:25.197914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.206467Z","title":"Intention Analysis Makes LLMs","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.206467Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:d7e306a3e125650430dcac30ea28b8f4621aee9f2cd4f171d8b4c988c3efc6d6","observation_id":"70196302-b992-4392-b08a-69143110e473","resolution":{"observed_at":"2026-08-06T04:47:25.206467Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.210421Z","title":"How Alignment and Jailbreak Work: Explain","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.210421Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:cc375e3e44c5af2a88c50f4647eb48bd9dd5190c36ccd6b96b8bdbfef798e832","observation_id":"f0e2f18f-529d-4dbd-8425-92f414b339cb","resolution":{"observed_at":"2026-08-06T04:47:25.210421Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.7717/peerj-cs.2374","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":"PeerJ Comput","venue":"PeerJ Computer Science","work_id":"29cbe0b4-d097-46be-99fe-e6cddca03c9f","year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.215275Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:89448d70cddf326aea8e11f0d8be879d4e193eff64c051a2e4ec48a11674773d","observation_id":"24007d6f-f2b0-4a59-95c4-aa172ff58fa1","resolution":{"observed_at":"2026-08-06T04:47:25.800552Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.219735Z","title":"Attack Prompt Generation for Red Teaming and Defending Large Language Models , booktitle =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.219735Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:73a3643143c3da1c179a86e2d2fec45c7b4f2dd978d7d07434614f4a282cd4e8","observation_id":"a073eb1d-e7ef-4156-b249-9a3328404f01","resolution":{"observed_at":"2026-08-06T04:47:25.219735Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.03191","last_updated":"2024-11-28T13:43:50Z","snapshot_observed_at":"2026-08-04T19:12:56.970085Z","submitted_at":"2023-11-06T15:29:30Z","title":"DeepInception: Hypnotize Large Language Model to Be Jailbreaker","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.03191","snapshot_observed_at":"2026-08-06T04:47:25.223831Z","title":"CoRR , volume =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.223831Z"},"links":{"cited_paper":"/paper/2311.03191","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:dfbdc8a916529a8aabc7099a205911ba33fa2fec4ee5218f5f515efc0be31795","observation_id":"dd14e349-c28d-47d8-ac2a-85c2f779f405","resolution":{"observed_at":"2026-08-06T04:47:25.223831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1002/asi.4630290313","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:07:33.414567Z","title":"Baratz , title =","venue":"Journal of the American Society for Information Science","work_id":"5f6d20ed-c983-4e7f-9f60-c5f3d0b1dc59","year":1978},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":78,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.233250Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:9f512f9e6514e2e3c24cb4535ec7c6f8009ef42eea0c4f3046c89afcc846fbae","observation_id":"13dfcf86-c9ab-4585-b6a7-6355e365c53c","resolution":{"observed_at":"2026-08-06T04:47:25.765691Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.237270Z","title":"Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction , booktitle =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.237270Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:05c0617ee14f896f8a19af8f11384c9ea8df53d6fa4208e92ba176a2afb6b6f6","observation_id":"c06a68ee-93e3-43dd-b662-e67acb8e06f7","resolution":{"observed_at":"2026-08-06T04:47:25.237270Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.242656Z","title":"Layer-Level Self-Exposure and Patch: Affirmative Token Mitigation for Jailbreak Attack Defense","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.242656Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:bfc2a176151b5d1e77fc02d4223d762f6f22a4a99e8535b6a79bcd47067c860e","observation_id":"3518894c-b202-4e05-80c3-ebdb77e58f73","resolution":{"observed_at":"2026-08-06T04:47:25.242656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.251376Z","title":"The Dark Side of Function Calling: Pathways to Jailbreaking Large Language Models , booktitle =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.251376Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:89db173445acdb025f826976e037949d6a193b49abd8d36d49b8158d3d48c447","observation_id":"c4bce729-d152-48ad-b39a-39c4175bae79","resolution":{"observed_at":"2026-08-06T04:47:25.251376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11084","last_updated":"2025-05-30T08:36:46Z","snapshot_observed_at":"2026-08-07T18:14:55.134268Z","submitted_at":"2025-02-16T11:43:39Z","title":"Rewrite to Jailbreak: Discover Learnable and Transferable Implicit Harmfulness Instruction","version":2},"cited_work":{"arxiv_id":"2502.11084","doi":null,"metadata_source":"pith","pith_arxiv_id":"2502.11084","snapshot_observed_at":"2026-08-06T04:47:27.344330Z","title":"Rewrite to Jailbreak: Discover Learnable and Transferable Implicit Harmfulness Instruction","venue":"cs.CL","work_id":"dcda6c4c-e363-4370-bb14-7e00c976fb10","year":2025},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.259952Z"},"links":{"cited_paper":"/paper/2502.11084","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:9be19a0fcebc066ddd4561be255bb8cbd0631fdb07c2acf40d720f74ef64bd7e","observation_id":"d0e2e961-8ecc-4650-a146-5e4b5d52edce","resolution":{"observed_at":"2026-08-06T04:47:27.349009Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.268512Z","title":"Proceedings of the Neural Information Processing Systems Track on Datasets and Benchmarks , pages =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":86,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.268512Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:c693bfcc40f3f62d886f1a6f87a7f6111be72384e4bca9a401a5db4bf6996b36","observation_id":"0d110ef1-6a15-433f-8729-ac3f195ad55f","resolution":{"observed_at":"2026-08-06T04:47:25.268512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.272535Z","title":"Findings of the Association for Computational Linguistics: ACL 2024 , pages=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":87,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.272535Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:084ffee31981930ba9b1f7dfd3b88f3b30e6a578b346305818851d5b23521ebb","observation_id":"9cedf998-d355-4f9c-a7cb-8d82a42e6a9a","resolution":{"observed_at":"2026-08-06T04:47:25.272535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.04368","last_updated":"2024-11-07T01:58:42Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-11-07T01:58:42Z","title":"Measuring short-form factuality in large language models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.04368","snapshot_observed_at":"2026-08-06T04:47:25.277099Z","title":"arXiv preprint arXiv:2411.04368 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":88,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.277099Z"},"links":{"cited_paper":"/paper/2411.04368","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:3f46dee548e38b7cf8b62bc5891f48247e167bca78dce7fa57a39fcd736270b7","observation_id":"3d62732f-eedf-4992-90d0-6df84b72ea84","resolution":{"observed_at":"2026-08-06T04:47:25.277099Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.281090Z","title":"The Twelfth International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":89,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.281090Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:7114e70bf8479331ba371808be2cf4524ebde375a732b7759ea44875c140f148","observation_id":"a8006431-c724-4277-9aac-e50ae2e0d3d4","resolution":{"observed_at":"2026-08-06T04:47:25.281090Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.285074Z","title":"Proceedings of the Neural Information Processing Systems Track on Datasets and Benchmarks , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":90,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.285074Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:d9d2f63a6d6198b752c332c5f95db7e593693c0b2eb21d7e1b8c539b0a730ff2","observation_id":"abaabf95-e299-4594-b64c-261201fd8cad","resolution":{"observed_at":"2026-08-06T04:47:25.285074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.317349Z","title":"The Thirteenth International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":97,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.317349Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:79b9a29965eae67ef5e97861db73a067bbe79cd41a272b9834a2c6811e25cdac","observation_id":"0729250e-f276-435f-94b9-7343aa15fff9","resolution":{"observed_at":"2026-08-06T04:47:25.317349Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.326091Z","title":"Communication theory , volume=","venue":null,"work_id":null,"year":1996},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":99,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.326091Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:02c43e02690047de1f21359f9b45e91232e2d648a5fdf7ea16ba2443f3a9d7e6","observation_id":"1494bbd0-6248-45e8-9970-2732273e9611","resolution":{"observed_at":"2026-08-06T04:47:25.326091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.330260Z","title":"1995 , publisher=","venue":null,"work_id":null,"year":1995},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":100,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.330260Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:f03af26fb7b821bc1f3df539db6f7ac11b39775a257b40d04c90710efdd0ee20","observation_id":"d00cb1df-6a9b-4bbb-883c-4f1a741dbaa1","resolution":{"observed_at":"2026-08-06T04:47:25.330260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.334970Z","title":"Trends in cognitive sciences , volume=","venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":101,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.334970Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:0c561d3abb4f51c5bf08c83287b017ba8390936458a1a546cd0e8967c13299f6","observation_id":"ca816e23-6557-406c-91c9-fd3e57df965b","resolution":{"observed_at":"2026-08-06T04:47:25.334970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.369365Z","title":"2024 , month=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":108,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.369365Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:f5594830e323b1d64e893f34c3a1588339d8c7b700bf0bedfd884b1abf0a3838","observation_id":"2f18300b-f2d1-41b9-8785-7ff8f5fc1af1","resolution":{"observed_at":"2026-08-06T04:47:25.369365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.379069Z","title":"QwQ: Reflect Deeply on the Boundaries of the Unknown , url =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":110,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.379069Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:23d4606f4616b43c31fccd46dfdf85aec57feb32d8b4862457f6bdfe6b34f48e","observation_id":"36d37510-f511-4990-88c5-a821196c5fb8","resolution":{"observed_at":"2026-08-06T04:47:25.379069Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.402012Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":115,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.402012Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:a3eed85408b5cd8953ce0af15091de74970720dd7e8b6a57f62abe13fbb5d418","observation_id":"bd813bac-0f99-4381-ae25-604a9b32a669","resolution":{"observed_at":"2026-08-06T04:47:25.402012Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.405231Z","title":", title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":116,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.405231Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:06fd71cc7082762b580de38c6819f5fefebe499195973ea18e1b2dd770eb8fc1","observation_id":"c4297303-9b4b-43b4-9aa7-5460a3134d68","resolution":{"observed_at":"2026-08-06T04:47:25.405231Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.409130Z","title":"Proceedings of the Computer Vision and Pattern Recognition Conference , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":117,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.409130Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:55a7c81b7185f4d7a8823fdef80229e15ff841efa45a0f38d1045cddb6547486","observation_id":"78656b56-a65e-4937-9b0f-81deb8033ec0","resolution":{"observed_at":"2026-08-06T04:47:25.409130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.412954Z","title":", title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":118,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.412954Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:4d5384471171dbbae9cfb848a3dc56ff1bf38c8f5f156aa369102ba06ddb09a0","observation_id":"4b161fc8-cad1-47bc-b8b5-2168d35bbe55","resolution":{"observed_at":"2026-08-06T04:47:25.412954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.19672","last_updated":"2024-07-29T03:26:22Z","snapshot_observed_at":"2026-08-08T01:31:18.364757Z","submitted_at":"2024-07-29T03:26:22Z","title":"SeaLLMs 3: Open Foundation and Chat Multilingual Large Language Models for Southeast Asian Languages","version":1},"cited_work":{"arxiv_id":"2407.19672","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.19672","snapshot_observed_at":"2026-08-06T04:47:26.642775Z","title":"SeaLLMs 3: Open Foundation and Chat Multilingual Large Language Models for Southeast Asian Languages","venue":"cs.CL","work_id":"d56e3111-0c4c-4ff8-88fd-d7c5d1bb8b11","year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":119,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.416569Z"},"links":{"cited_paper":"/paper/2407.19672","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:ba775c27b2c7d9e8684805c378aa353ac469a16382e5d47decdcc55e6be7e423","observation_id":"5d9ed9de-567a-417b-b4bb-ef3ee8b1b83d","resolution":{"observed_at":"2026-08-06T04:47:26.647570Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2109.10862","last_updated":"2021-09-27T21:12:49Z","snapshot_observed_at":"2026-08-04T13:56:39.444746Z","submitted_at":"2021-09-22T17:34:18Z","title":"Recursively Summarizing Books with Human Feedback","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2109.10862","snapshot_observed_at":"2026-08-06T04:47:25.420772Z","title":"arXiv preprint arXiv:2109.10862 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":120,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.420772Z"},"links":{"cited_paper":"/paper/2109.10862","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:2f6d461bb3f360f8a727ec8bfd4aa7941fa2cc50f0b07ffb21f72a69ee5f7707","observation_id":"01dd707c-d916-4be1-a539-cb156461a218","resolution":{"observed_at":"2026-08-06T04:47:25.420772Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.05862","last_updated":"2022-04-12T15:02:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-12T15:02:38Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.05862","snapshot_observed_at":"2026-08-06T04:47:25.424543Z","title":", title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":121,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.424543Z"},"links":{"cited_paper":"/paper/2204.05862","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:73736cafacbfcf42cd27f00bfc86f5488610b5e7fdee11fc0d3fbfb37541062e","observation_id":"f1d601b9-a726-4d89-b7a5-2715dc087c9e","resolution":{"observed_at":"2026-08-06T04:47:25.424543Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.05302","last_updated":"2023-10-07T07:01:26Z","snapshot_observed_at":"2026-08-09T04:25:12.977504Z","submitted_at":"2023-04-11T15:53:40Z","title":"RRHF: Rank Responses to Align Language Models with Human Feedback without tears","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.05302","snapshot_observed_at":"2026-08-06T04:47:25.428063Z","title":"arXiv preprint arXiv:2304.05302 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":122,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.428063Z"},"links":{"cited_paper":"/paper/2304.05302","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:80cae897293794e86db9a2f76d2ecc333954ba5c9a16a2b7cffa9b387d229692","observation_id":"6735acff-92f5-4e47-a1e8-a09b988f2502","resolution":{"observed_at":"2026-08-06T04:47:25.428063Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.08045","last_updated":"2024-06-03T11:34:05Z","snapshot_observed_at":"2026-08-07T07:16:15.041179Z","submitted_at":"2023-11-14T10:10:31Z","title":"Adversarial Preference Optimization: Enhancing Your Alignment via RM-LLM Game","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.08045","snapshot_observed_at":"2026-08-06T04:47:25.431886Z","title":"arXiv preprint arXiv:2311.08045 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":123,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.431886Z"},"links":{"cited_paper":"/paper/2311.08045","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:3a95bdf5baad8aceac56c7d0b066ede751a2a78331ba284e699a21aefb704f69","observation_id":"41920adb-1683-4200-8229-c1a719ed27e6","resolution":{"observed_at":"2026-08-06T04:47:25.431886Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-06T04:47:25.435933Z","title":"arXiv preprint arXiv:2312.06674 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":124,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.435933Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:cc3649042817ad92e4d1568d903a46fef0345066ca77a5a170c038e1a5f881e1","observation_id":"7ded2693-e7ac-44c7-9a55-76436bba48b2","resolution":{"observed_at":"2026-08-06T04:47:25.435933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.439206Z","title":"WildGuard: Open One-stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs , booktitle =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":125,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.439206Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:f3d2a1f3c4dd9c84d2d34a4aa41d6a2d27ada57a81c70204fd7c4d42e8fbbbb1","observation_id":"124b0350-2760-4f7e-b20e-1f16c3564d47","resolution":{"observed_at":"2026-08-06T04:47:25.439206Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.443067Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":126,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.443067Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:0fa9ddab8f864f807c69d075262de74889d13b76f3edee72d01a16973c96b408","observation_id":"e9f3ecc9-3037-4b72-84c4-e07cacb3ab50","resolution":{"observed_at":"2026-08-06T04:47:25.443067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.446317Z","title":"Advances in Neural Information Processing Systems , editor=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":127,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.446317Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:1686c55c90f45d1c6469593ae9291ad473a3400d46201b5cc68475c376c9c75e","observation_id":"6526227b-df7c-4f12-975b-78054af02f30","resolution":{"observed_at":"2026-08-06T04:47:25.446317Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.449331Z","title":"Nature Machine Intelligence , volume=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":128,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.449331Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:f697d998924136721e43e147a053b600b28a31d2547e9eecbc9808f8874434f7","observation_id":"b359990e-2384-4ad7-b1e0-a39c77335c92","resolution":{"observed_at":"2026-08-06T04:47:25.449331Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.452672Z","title":"R ^2 -Guard: Robust Reasoning Enabled","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":129,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.452672Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:f88e46114c9d180c0192d774fce046a8a8a44734fb83db254964708ce98ce415","observation_id":"ce84f680-4574-4c16-b59b-b57af2283133","resolution":{"observed_at":"2026-08-06T04:47:25.452672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.459774Z","title":"Intention Analysis Makes LLM s A Good Jailbreak Defender","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":131,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.459774Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:65659156a65cd6b1112851b84007a7fbf65acc8c291b46d572db9dee51fdc112","observation_id":"f0fc8aea-2e5b-4e63-82a5-02d81fae1a96","resolution":{"observed_at":"2026-08-06T04:47:25.459774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.463034Z","title":"ICLR 2025 Workshop on Bidirectional Human-AI Alignment , year=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":132,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.463034Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:c1da7992dbc19200ce7bc08247cf364d3f75a572dee630c7ae63faf71ad4bbb7","observation_id":"0afa17f4-6218-49be-8bf7-e5e7f6175f3c","resolution":{"observed_at":"2026-08-06T04:47:25.463034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.472656Z","title":"The Twelfth International Conference on Learning Representations,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":135,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.472656Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:45083e8d23971cd5b632da9aa9e198a8a286f39ea60d4979aa343d44657e2fb6","observation_id":"28e710ac-1742-4498-810c-7a01214204bc","resolution":{"observed_at":"2026-08-06T04:47:25.472656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.478908Z","title":"The Thirteenth International Conference on Learning Representations,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":137,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.478908Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:9bd5cf9d4f3febb4b55b53f004dc80dbba9e347c8887db573888012b66e45ffc","observation_id":"89fb7cc2-b44f-441e-b961-3d9725989ba0","resolution":{"observed_at":"2026-08-06T04:47:25.478908Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.485427Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":139,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.485427Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:0e753610e04db1413df5ea9268308482cd74a0e9c4e54888f874fbe92f17d00d","observation_id":"baa92770-d2e3-4211-af5f-411131d9fb81","resolution":{"observed_at":"2026-08-06T04:47:25.485427Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14132","last_updated":"2023-11-07T03:30:15Z","snapshot_observed_at":"2026-07-06T16:10:54.723336Z","submitted_at":"2023-08-27T15:20:06Z","title":"Detecting Language Model Attacks with Perplexity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14132","snapshot_observed_at":"2026-08-06T04:47:25.491763Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":141,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.491763Z"},"links":{"cited_paper":"/paper/2308.14132","citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:266f4ac45a8aee319debac229c2d8c49ce495f0cd814d407a15c3942e2945870","observation_id":"7785b622-6dda-4b27-aad4-23b43b6ed235","resolution":{"observed_at":"2026-08-06T04:47:25.491763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:47:25.494752Z","title":null,"venue":null,"work_id":null,"year":1995},"citing_paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","version":1},"reference_index":142,"source":"arxiv_source","source_observed_at":"2026-08-06T04:47:25.494752Z"},"links":{"citing_paper":"/paper/2508.03054"},"observation_digest":"sha256:f9b9fcb29f6aab24e4c258e7519786741be83c102ccc7bed70909cfa041eb254","observation_id":"a759f6b1-57ed-476d-a788-a50e8111befd","resolution":{"observed_at":"2026-08-06T04:47:25.494752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.03054","last_updated":"2025-08-05T03:58:15Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-08T05:44:09.712429Z","submitted_at":"2025-08-05T03:58:15Z","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":91,"verified_exact":8,"verified_fuzzy":0},"total_outbound_references":159},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 100 of 159 outbound references and 0 inbound Pith citation observations for arXiv:2508.03054."}