{"as_of":"2026-08-17T01:19:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:affbbcac42009455beffdcc167b3c4d7be1fe2b83ea58ec6eded1b38871a6e4e","coverage":[{"denominator":42,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":42,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T17:18:24.547758Z","state":"measured"},{"denominator":43,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":43,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-28T15:05:31.392966Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T22:46:19.137548Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"cited_work":{"arxiv_id":"2508.14128","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.14128","snapshot_observed_at":"2026-07-01T22:46:19.137548Z","title":"arXiv preprint arXiv:2508.14128 , year=","venue":null,"work_id":"a9ea5f40-76af-42d5-b33f-110c939b36d8","year":null},"citing_paper":{"arxiv_id":"2606.01738","last_updated":"2026-06-01T06:02:15Z","snapshot_observed_at":"2026-08-13T03:16:25.213548Z","submitted_at":"2026-06-01T06:02:15Z","title":"THRD: A Training-Free Multi-Turn Defense Framework for Jailbreak Attacks on Large Language Models","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-06-28T15:05:31.392966Z"},"links":{"cited_paper":"/paper/2508.14128","citing_paper":"/paper/2606.01738"},"observation_digest":"sha256:732c55c7312a5990716702d449379f23b9c6a5c508a6f8b76958a92d213d25af","observation_id":"7a4c9139-d73f-4215-9c51-04edcccb1edd","resolution":{"observed_at":"2026-07-01T22:46:19.140570Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2508.14128/citation-record","integrity":"/paper/2508.14128/integrity","json":"/paper/2508.14128/citation-record.json","paper":"/paper/2508.14128"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:23.836284Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.836284Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:ccfde7aff82b604ff3385895ec4212e0c40ed5191017487c97442144237b1c44","observation_id":"b21dbddc-8897-432f-8b33-072bffa3fb3d","resolution":{"observed_at":"2026-08-15T17:18:23.836284Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:23.841243Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.841243Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:5294d45b6729c1aceeebef3ae508d1c12ae30704f9979d124a72e58dda7f5368","observation_id":"6a625aa6-8eb1-4b4a-8094-dfd709ceed2c","resolution":{"observed_at":"2026-08-15T17:18:23.841243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.00580","last_updated":"2025-02-01T22:26:30Z","snapshot_observed_at":"2026-08-11T14:52:49.480062Z","submitted_at":"2025-02-01T22:26:30Z","title":"Defense Against the Dark Prompts: Mitigating Best-of-N Jailbreaking with Prompt Evaluation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.00580","snapshot_observed_at":"2026-08-15T17:18:23.845618Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.845618Z"},"links":{"cited_paper":"/paper/2502.00580","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:419d746942245209ebcee7ad15e802586ca5ff077ce3e445186da2f15b9294e8","observation_id":"25b35c97-8634-4097-b9db-4af25988495b","resolution":{"observed_at":"2026-08-15T17:18:23.845618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.05862","last_updated":"2022-04-12T15:02:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-12T15:02:38Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.05862","snapshot_observed_at":"2026-08-15T17:18:23.854082Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.854082Z"},"links":{"cited_paper":"/paper/2204.05862","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:c75e408195c32171c9806ef62178e9d0c39adea84aee44613e7cabce7b4e8b45","observation_id":"ba2bd0da-7b4d-4330-b484-009b4357471d","resolution":{"observed_at":"2026-08-15T17:18:23.854082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:23.858171Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.858171Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:268deaba737666086d524d1bd7888e9eec1fb4dab9427a3289faaf5b60a67e0f","observation_id":"f6369855-e149-4e79-8301-f637c305044e","resolution":{"observed_at":"2026-08-15T17:18:23.858171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:25.134914Z","title":null,"venue":null,"work_id":"aca3a405-e67c-40d3-afc0-8f24afa59100","year":2025},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.862164Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:dc98ad2f7e7e8566790f73e90971ae195500d251c3ec69c4ed213f222bfb4764","observation_id":"cb9ae506-3747-4db2-936a-a7134a12bd19","resolution":{"observed_at":"2026-08-15T17:18:25.198207Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:23.911006Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.911006Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:554a3debda4493640faa0f789c303ab4d379233dbd985df3d7034c9f51fb3cb4","observation_id":"8718ca29-3d61-4d47-b009-343b673bb111","resolution":{"observed_at":"2026-08-15T17:18:23.911006Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.08715","last_updated":"2023-10-25T07:30:51Z","snapshot_observed_at":"2026-08-16T15:15:58.700562Z","submitted_at":"2023-07-16T01:07:15Z","title":"MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbots","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.08715","snapshot_observed_at":"2026-08-15T17:18:23.991367Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:23.991367Z"},"links":{"cited_paper":"/paper/2307.08715","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:a888116632fa950fb70da418506ebf73a6aed9614c15d6e854af89de758db0c9","observation_id":"72e0a2ac-d86b-4f7b-ad99-c0df552fc49a","resolution":{"observed_at":"2026-08-15T17:18:23.991367Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.043440Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.043440Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:705c21596546ad209e4a845336ed7a445fb41097417e984a0aa16adb67e69ab8","observation_id":"808e25c4-ef67-42e7-88c7-804fa487d624","resolution":{"observed_at":"2026-08-15T17:18:24.043440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.972375Z","title":null,"venue":null,"work_id":"f96edb50-4533-4926-8ef7-23c080bf570a","year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.047933Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:06dcc3b1b6e07570356326cb489c65d020c35514f052af0460acbc810ab45a17","observation_id":"63bb63b2-31b1-46ae-abe5-4b9fff638b27","resolution":{"observed_at":"2026-08-15T17:18:24.977870Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.959524Z","title":null,"venue":null,"work_id":"9dd0b1bc-b1c3-4462-9586-56a15f33944b","year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.052082Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:634d10fc3e9eba951470ad7ec5144fd6cb96563a8612275a1200d803e13bfcb8","observation_id":"dc5ea72d-d1c4-4eb0-9349-d6689d6f1041","resolution":{"observed_at":"2026-08-15T17:18:24.963534Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-08-14T15:42:19.849118Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-15T17:18:24.056670Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.056670Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:d521fb9af8ad23e86889c09cb088ca41215ca30f0a7ad76499f6a368b66d3a23","observation_id":"38315330-2b91-4dba-9a8a-d1e18a95aba8","resolution":{"observed_at":"2026-08-15T17:18:24.056670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00515","last_updated":"2024-11-10T22:02:27Z","snapshot_observed_at":"2026-08-14T16:40:35.729198Z","submitted_at":"2024-06-01T17:48:15Z","title":"A Survey on Large Language Models for Code Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00515","snapshot_observed_at":"2026-08-15T17:18:24.062636Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.062636Z"},"links":{"cited_paper":"/paper/2406.00515","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:3faeb4f5d0ec5e335c72d21ffe8a2742f79f6227ebabb0ca9c85b25fa3874ded","observation_id":"5359bfd0-3ab2-4b16-8d33-d3e824638c2b","resolution":{"observed_at":"2026-08-15T17:18:24.062636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.02705","last_updated":"2025-02-04T19:47:09Z","snapshot_observed_at":"2026-08-16T15:02:58.647281Z","submitted_at":"2023-09-06T04:37:20Z","title":"Certifying LLM Safety against Adversarial Prompting","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.02705","snapshot_observed_at":"2026-08-15T17:18:24.068355Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.068355Z"},"links":{"cited_paper":"/paper/2309.02705","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:f38e6c18eb6134350c1f0e73fb9cd526d2dd0c5fdd27f9e3e3fe0203cdd7d9f2","observation_id":"b89c6b03-55ef-4ed4-9aa2-6f69f0c2266d","resolution":{"observed_at":"2026-08-15T17:18:24.068355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.03191","last_updated":"2024-11-28T13:43:50Z","snapshot_observed_at":"2026-08-15T16:37:22.396444Z","submitted_at":"2023-11-06T15:29:30Z","title":"DeepInception: Hypnotize Large Language Model to Be Jailbreaker","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.03191","snapshot_observed_at":"2026-08-15T17:18:24.073098Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.073098Z"},"links":{"cited_paper":"/paper/2311.03191","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:e03fbf5ff7f326734c2fbc3379fad43df56bb3f8bf662b47bef7f03157f9292c","observation_id":"45ffd897-6a5c-46b9-8210-5d3e010fa631","resolution":{"observed_at":"2026-08-15T17:18:24.073098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2109.07958","last_updated":"2022-05-08T02:43:02Z","snapshot_observed_at":"2026-08-03T16:26:48.747700Z","submitted_at":"2021-09-08T17:15:27Z","title":"TruthfulQA: Measuring How Models Mimic Human Falsehoods","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2109.07958","snapshot_observed_at":"2026-08-15T17:18:24.077783Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.077783Z"},"links":{"cited_paper":"/paper/2109.07958","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:c2e0ca966b2722e7ffa0468ed907dce3dca9ec8e6d897e1557cba5b960bc3949","observation_id":"b440d42a-a7bc-4b86-b98f-e93716c188b9","resolution":{"observed_at":"2026-08-15T17:18:24.077783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.159749Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.159749Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:494e248713a4246a99c7e313958d349b8d48ffa5795bc26864f542fb54b0325e","observation_id":"fa3022d8-2eff-4367-812b-ede65b2f2795","resolution":{"observed_at":"2026-08-15T17:18:24.159749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2004.08994","last_updated":"2020-04-29T21:16:31Z","snapshot_observed_at":"2026-07-06T09:13:32.098523Z","submitted_at":"2020-04-20T00:07:18Z","title":"Adversarial Training for Large Neural Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.08994","snapshot_observed_at":"2026-08-15T17:18:24.255509Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.255509Z"},"links":{"cited_paper":"/paper/2004.08994","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:6605c8ab76601270a186a02e89f9545adcd96b4ea95f7814b8d7518a292271f7","observation_id":"29f875ac-d076-47de-a075-4792c3dc2f59","resolution":{"observed_at":"2026-08-15T17:18:24.255509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-16T14:36:14.029419Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-15T17:18:24.297455Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.297455Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:5e00901eb572f76ec1fe77e11450a25d5baa9d115f5d16f2a035f4d99f5fd88e","observation_id":"bb85aea9-8412-42e2-ac1f-80be3b4e27e8","resolution":{"observed_at":"2026-08-15T17:18:24.297455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.13860","last_updated":"2024-03-10T13:58:08Z","snapshot_observed_at":"2026-07-06T15:31:18.144952Z","submitted_at":"2023-05-23T09:33:38Z","title":"Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.13860","snapshot_observed_at":"2026-08-15T17:18:24.345011Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.345011Z"},"links":{"cited_paper":"/paper/2305.13860","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:cf580f81c9f2b6277e188536e6ed2e540d37a6ed99f8902e07dbc3d60a964ccc","observation_id":"53b64bda-378b-4c3d-9278-6949c0d320c2","resolution":{"observed_at":"2026-08-15T17:18:24.345011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.348738Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.348738Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:27cbedc6382821e7ef432bc32cea10e6672e6dc25535957807986f9c7a7d7baf","observation_id":"9ad29245-ac97-41b5-b163-07b78dcc6e0b","resolution":{"observed_at":"2026-08-15T17:18:24.348738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07725","last_updated":"2021-11-16T07:16:21Z","snapshot_observed_at":"2026-08-14T21:55:51.503935Z","submitted_at":"2016-05-25T04:25:45Z","title":"Adversarial Training Methods for Semi-Supervised Text Classification","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1605.07725","snapshot_observed_at":"2026-08-15T17:18:24.352429Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.352429Z"},"links":{"cited_paper":"/paper/1605.07725","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:7d27e8ae43c1b521e2fb68b57edb9c3aa8c7807733b737d45c75f915dbd5c4a1","observation_id":"33169a3d-b5dd-48c2-862e-4992e3f0e42a","resolution":{"observed_at":"2026-08-15T17:18:24.352429Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.928736Z","title":null,"venue":null,"work_id":"ce675762-52e7-4426-92e8-3a80d7117296","year":2022},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.357127Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:977a2cb695f2031920e67e8237853309b7e778f56249c4e5267fe69f1df2c048","observation_id":"9f48f048-04f5-46d7-ba4e-59406b395105","resolution":{"observed_at":"2026-08-15T17:18:24.936588Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.915241Z","title":null,"venue":null,"work_id":"332ec938-07d9-4695-90dd-8b51e546dad5","year":2022},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.360788Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:1a60d4be2779112de4a4ad1591291d3ee4df6c4322824b93e40f4de5b4a06ade","observation_id":"e00ae17a-30ec-426c-88ad-c9b022a0f5c4","resolution":{"observed_at":"2026-08-15T17:18:24.919225Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.07308","last_updated":"2024-05-02T14:28:39Z","snapshot_observed_at":"2026-08-16T15:08:33.743480Z","submitted_at":"2023-08-14T17:54:10Z","title":"LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.07308","snapshot_observed_at":"2026-08-15T17:18:24.364382Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.364382Z"},"links":{"cited_paper":"/paper/2308.07308","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:56535c8443730940c56306ad49ceae8a7d12d8747f2efcc86e15835454b5677f","observation_id":"40517f2b-f079-4556-b67e-060f20315da9","resolution":{"observed_at":"2026-08-15T17:18:24.364382Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.368280Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.368280Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:d854ee2c7218477c70479bebead0561596bb06ef14be7f3283086c66523598c8","observation_id":"2e3bd67b-b70e-47ca-87a3-22ed91554e04","resolution":{"observed_at":"2026-08-15T17:18:24.368280Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.371770Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.371770Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:f9aec3eb752e2328f741ce4c8245b57ded437cf4b8390c3671d9196ec1313382","observation_id":"adc47f9c-1f8f-44ff-9ebd-9a908546e502","resolution":{"observed_at":"2026-08-15T17:18:24.371770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03684","last_updated":"2024-06-11T19:02:52Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:01:53Z","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03684","snapshot_observed_at":"2026-08-15T17:18:24.375047Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.375047Z"},"links":{"cited_paper":"/paper/2310.03684","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:ca75d08b6f4697eb62ffa9d85e1456bc1f244bc5a87879426b59cdf117ec4333","observation_id":"a99a2c4e-ca2c-45d6-a9cf-a752f9ad4129","resolution":{"observed_at":"2026-08-15T17:18:24.375047Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1910.01108","last_updated":"2020-03-01T02:57:50Z","snapshot_observed_at":"2026-08-07T19:07:36.327251Z","submitted_at":"2019-10-02T17:56:28Z","title":"DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lighter","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.01108","snapshot_observed_at":"2026-08-15T17:18:24.378544Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.378544Z"},"links":{"cited_paper":"/paper/1910.01108","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:503d510bf4fca00d5180e6f55f16a49d696c5d257172d00496d45f52a70aaf44","observation_id":"2c956736-36ef-4ce6-9c90-a70debe2a595","resolution":{"observed_at":"2026-08-15T17:18:24.378544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.383213Z","title":"do anything now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.383213Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:ca43af73d020568bfef2c336e103f04119f1e1f8dc5cea57157857d2b88a607c","observation_id":"c35cc092-4f23-4e03-b447-f48aaa674b12","resolution":{"observed_at":"2026-08-15T17:18:24.383213Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.11805","last_updated":"2025-05-09T21:04:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-19T02:39:27Z","title":"Gemini: A Family of Highly Capable Multimodal Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.11805","snapshot_observed_at":"2026-08-15T17:18:24.386818Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.386818Z"},"links":{"cited_paper":"/paper/2312.11805","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:f3a743d83cbe22afab514a17d1eabcd27d17ed86fa6817fea97e14464211dea8","observation_id":"03674a41-4441-42b2-a585-f7eb820f9798","resolution":{"observed_at":"2026-08-15T17:18:24.386818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-15T17:18:24.406179Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.406179Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:238ef0ebaeff104c4f16764ebdb9a8d35abf2c0902de03477ac03be880eb9811","observation_id":"c502a9d0-3caf-4443-add6-5d4d105dfc2c","resolution":{"observed_at":"2026-08-15T17:18:24.406179Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.451652Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.451652Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:bebb18fdf2f0671ead071c5dadb1a11b1bfae760880e03e2cd0b2438cf687fce","observation_id":"aeac5cf0-572b-443f-ba15-6d3c33c5bea2","resolution":{"observed_at":"2026-08-15T17:18:24.451652Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06387","last_updated":"2024-05-25T07:01:15Z","snapshot_observed_at":"2026-08-16T14:53:33.115609Z","submitted_at":"2023-10-10T07:50:29Z","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06387","snapshot_observed_at":"2026-08-15T17:18:24.500459Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.500459Z"},"links":{"cited_paper":"/paper/2310.06387","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:3ca8800fb40e6e376fe871c0c803200c8f44cd4ac0064a104c9c21dc1c1369c1","observation_id":"2380904f-c806-4730-9838-7803ec4e6629","resolution":{"observed_at":"2026-08-15T17:18:24.500459Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.04359","last_updated":"2021-12-08T16:09:48Z","snapshot_observed_at":"2026-08-09T15:17:43.394064Z","submitted_at":"2021-12-08T16:09:48Z","title":"Ethical and social risks of harm from Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.04359","snapshot_observed_at":"2026-08-15T17:18:24.517800Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.517800Z"},"links":{"cited_paper":"/paper/2112.04359","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:52623fbd9689fa72317fe84100caff1a2301422579182cbf52b5082f42e2bc3c","observation_id":"e55aa009-5a75-49c1-bd11-7fe66dcbd69f","resolution":{"observed_at":"2026-08-15T17:18:24.517800Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13494","last_updated":"2024-05-29T21:45:35Z","snapshot_observed_at":"2026-08-16T14:16:45.543749Z","submitted_at":"2024-02-21T03:09:21Z","title":"GradSafe: Detecting Jailbreak Prompts for LLMs via Safety-Critical Gradient Analysis","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13494","snapshot_observed_at":"2026-08-15T17:18:24.522585Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.522585Z"},"links":{"cited_paper":"/paper/2402.13494","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:131caf0c2bd7a0f8817f9fccd8336da57d2f62cfd8a7128cd3bed78791c2a9c5","observation_id":"f5211b63-741e-489f-85ed-1ad0003c27f5","resolution":{"observed_at":"2026-08-15T17:18:24.522585Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.526892Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.526892Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:9b16908993a523f42fcb4081be5838481e5289cfb7d79c271bbd9c6b38b94656","observation_id":"6a4ff412-6e43-4353-a38e-e4cbc92b6678","resolution":{"observed_at":"2026-08-15T17:18:24.526892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08983","last_updated":"2024-07-25T22:59:44Z","snapshot_observed_at":"2026-08-16T14:18:44.958632Z","submitted_at":"2024-02-14T06:54:31Z","title":"SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08983","snapshot_observed_at":"2026-08-15T17:18:24.530751Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.530751Z"},"links":{"cited_paper":"/paper/2402.08983","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:3dfd26bb495072578d7c8bba21e84bae0cdc27168be0b72ff45dd039b624dd54","observation_id":"96de0cf0-6bb9-40b9-aedd-464a115827b4","resolution":{"observed_at":"2026-08-15T17:18:24.530751Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.17256","last_updated":"2025-07-23T18:43:18Z","snapshot_observed_at":"2026-08-16T14:23:07.919279Z","submitted_at":"2024-01-30T18:48:37Z","title":"Weak-to-Strong Jailbreaking on Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.17256","snapshot_observed_at":"2026-08-15T17:18:24.534370Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.534370Z"},"links":{"cited_paper":"/paper/2401.17256","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:ae37689bd00c1987818da4213e16b366a4df2b754e38a103461665ec1041fa6f","observation_id":"f2f4d9b8-4bd6-4321-bdbd-65f60f741f7e","resolution":{"observed_at":"2026-08-15T17:18:24.534370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.538665Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.538665Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:09090827674b9694d2a637a9dfcb9a4ad5f3e9a6beecf28f3591089a07f359fc","observation_id":"79aea991-97db-4f3a-8208-520229993454","resolution":{"observed_at":"2026-08-15T17:18:24.538665Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:18:24.854726Z","title":null,"venue":null,"work_id":"449b9e03-788f-425d-bf21-a18c9756c3af","year":2024},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.542555Z"},"links":{"citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:5216c01f58c465e7699b68f3dcc35ca3cf669c0dc331063d689b00ef1d0603c7","observation_id":"4f9e2b1a-2160-4955-9704-1024b5f612d1","resolution":{"observed_at":"2026-08-15T17:18:24.860253Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-15T17:18:24.547758Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-15T17:18:24.547758Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2508.14128"},"observation_digest":"sha256:8684605da0fcce69f3b5736e74a8a08c1c6195f4563166ee7505b747aab59620","observation_id":"8641fe62-af2c-4775-bb6d-e7f08dfb417e","resolution":{"observed_at":"2026-08-15T17:18:24.547758Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.14128","last_updated":"2025-08-19T04:17:21Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T13:56:24.195662Z","submitted_at":"2025-08-19T04:17:21Z","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection"},"reference_resolution":{"displayed":42,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":42,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":42},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 1 inbound Pith citation observation for arXiv:2508.14128."}