{"as_of":"2026-08-07T07:14:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a00bc01b0cc013571d37060624f9c9de2a9263499aed55206cfb0e881c56ac36","coverage":[{"denominator":66,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":66,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T14:51:03.815504Z","state":"measured"},{"denominator":68,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":68,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T16:46:16.287825Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-21T12:10:06.509534Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"cited_work":{"arxiv_id":"2508.20848","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.20848","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring.CoRR abs/2508.20848","venue":null,"work_id":"c63db2b5-484f-41f4-b5df-90a9a7095cb0","year":2025},"citing_paper":{"arxiv_id":"2603.04459","last_updated":"2026-05-14T18:30:07Z","snapshot_observed_at":"2026-07-06T22:47:50.848191Z","submitted_at":"2026-03-03T09:10:45Z","title":"Benchmark of Benchmarks: Unpacking Influence and Code Repository Quality in LLM Safety Benchmarks","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-21T12:09:55.500940Z"},"links":{"cited_paper":"/paper/2508.20848","citing_paper":"/paper/2603.04459"},"observation_digest":"sha256:03693f37e595ab5246f27c590545ed3382e97f8f4d88730ec954a1cdd9198efb","observation_id":"c1a0178b-f60e-4759-bf4c-87257e0992b9","resolution":{"observed_at":"2026-05-21T12:10:06.512435Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.20848","snapshot_observed_at":"2026-08-01T16:46:16.287825Z","title":"Junjie Chu, Mingjie Li, Ziqing Yang, Ye Leng, Chenhao Lin, Chao Shen, Michael Backes, Yun Shen, and Yang Zhang","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19424","last_updated":"2026-07-20T12:38:49Z","snapshot_observed_at":"2026-08-01T16:46:15.392549Z","submitted_at":"2026-07-20T12:38:49Z","title":"JailMeter: An Evidence-Based Evaluation Framework for Jailbreak Attacks on Large Language Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-01T16:46:16.287825Z"},"links":{"cited_paper":"/paper/2508.20848","citing_paper":"/paper/2607.19424"},"observation_digest":"sha256:926061ec6a224663e4f3dd1d634e28be4b0430f3475aa9bcb813f229a939ea27","observation_id":"796f7483-e403-446a-95b2-4f8c0b5b8507","resolution":{"observed_at":"2026-08-01T16:46:16.287825Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2508.20848/citation-record","integrity":"/paper/2508.20848/integrity","json":"/paper/2508.20848/citation-record.json","paper":"/paper/2508.20848"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.383969Z","title":"Generated data with fake privacy: Hidden dangers of fine- tuning large language models on generated data","venue":null,"work_id":"6d436306-dd4b-4d40-a080-8becd71d30cc","year":2025},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.611476Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:dfe2085bed703a5c2ca55b7cdfaf0c6f7e05fcd99abfad9671321c8c4364ed82","observation_id":"32ebab59-47bb-4818-98c3-26d242edbf90","resolution":{"observed_at":"2026-08-05T14:51:04.387810Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14132","last_updated":"2023-11-07T03:30:15Z","snapshot_observed_at":"2026-07-06T16:10:54.723336Z","submitted_at":"2023-08-27T15:20:06Z","title":"Detecting Language Model Attacks with Perplexity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14132","snapshot_observed_at":"2026-08-05T14:51:03.615051Z","title":"Detecting Language Model Attacks with Perplexity","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.615051Z"},"links":{"cited_paper":"/paper/2308.14132","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:7339e53c4ae73b74bee890cf18ad122c3f1dba16dd070e9c3c8a5e883f0821cc","observation_id":"42b06550-8600-4ab1-b19c-1ceb60b02c2c","resolution":{"observed_at":"2026-08-05T14:51:03.615051Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02151","last_updated":"2025-04-17T18:55:45Z","snapshot_observed_at":"2026-07-06T17:54:43.685212Z","submitted_at":"2024-04-02T17:58:27Z","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02151","snapshot_observed_at":"2026-08-05T14:51:03.619114Z","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.619114Z"},"links":{"cited_paper":"/paper/2404.02151","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:e306af3198f67073edd60c70870c6092e372ba009cc91998a036d6571acbc15d","observation_id":"1d857cd3-8e8c-4a28-8dc2-7bf6c511b82b","resolution":{"observed_at":"2026-08-05T14:51:03.619114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.09673","last_updated":"2025-02-21T03:12:17Z","snapshot_observed_at":"2026-08-04T11:23:06.872722Z","submitted_at":"2025-02-13T06:37:28Z","title":"Are Smarter LLMs Safer? Exploring Safety-Reasoning Trade-offs in Prompting and Fine-Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.09673","snapshot_observed_at":"2026-08-05T14:51:03.622906Z","title":"Are smarter llms safer? exploring safety- reasoning trade-offs in prompting and fine-tuning","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.622906Z"},"links":{"cited_paper":"/paper/2502.09673","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:3f0eb75ac5a341f4bd66c97f6bf8064129c9a9221f920a5cde399772d4fba8c0","observation_id":"f86bbfdc-109e-464b-9a01-fb34afe264e4","resolution":{"observed_at":"2026-08-05T14:51:03.622906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.00861","last_updated":"2021-12-09T21:40:22Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-12-01T22:24:34Z","title":"A General Language Assistant as a Laboratory for Alignment","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.00861","snapshot_observed_at":"2026-08-05T14:51:03.626250Z","title":"A General Language Assistant as a Laboratory for Alignment","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.626250Z"},"links":{"cited_paper":"/paper/2112.00861","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:f948cd9239a5114ea6ec2998afab1d9f2dbb59f7fb7f3657c8949802547a786b","observation_id":"570d32ca-4360-4119-ac7b-4de9a8d71d55","resolution":{"observed_at":"2026-08-05T14:51:03.626250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.374895Z","title":"A Ranking Method for Evaluating Constructed Responses","venue":null,"work_id":"cc4f4be4-c62f-4e78-aa44-fc8f89642153","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.629551Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:19681c3017d577a859f29f7f5347c7606cb25f9d0424ff03bb22f9d4dcb5bf65","observation_id":"defa2534-e48e-418d-b67b-46484af9e479","resolution":{"observed_at":"2026-08-05T14:51:04.378732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.366535Z","title":"Brookhart","venue":null,"work_id":"b0b546e4-1592-44a0-8d02-9d4d81811956","year":2018},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.633142Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:4f8d640c620192d3a20c945bfad48cee1b843452aaa6761a622678e7e35bf113","observation_id":"276994cd-d6c1-4f89-b9a5-3d6e6102ca0c","resolution":{"observed_at":"2026-08-05T14:51:04.369450Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.358405Z","title":null,"venue":null,"work_id":"3115c6a5-208e-49e8-b1dd-aaaa24e28f02","year":1993},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.636154Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:3fd6bb1a49084df255d0a3ab9e9d220144da16b4cfb98232c4bb39973e935dd3","observation_id":"069744d8-a374-41c0-a16f-5ff684800782","resolution":{"observed_at":"2026-08-05T14:51:04.361269Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01318","last_updated":"2024-10-31T22:26:40Z","snapshot_observed_at":"2026-08-02T14:59:12.115203Z","submitted_at":"2024-03-28T02:44:02Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01318","snapshot_observed_at":"2026-08-05T14:51:03.638815Z","title":"Pappas, Flo- rian Tramer, Hamed Hassani, and Eric Wong","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.638815Z"},"links":{"cited_paper":"/paper/2404.01318","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:ef60f7711e3125081c3efb4513690a1c3037c9cec81b979ce7a5d23718813c50","observation_id":"432efd07-3769-4701-825b-3683c23c7bc3","resolution":{"observed_at":"2026-08-05T14:51:03.638815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-05T14:51:03.642689Z","title":"Pappas, and Eric Wong","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.642689Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:f7ef139e1ac7d21aa9a5810c90c4739ee65be42b781234d06ac7e99e07b5ded9","observation_id":"bf91c4a7-08fe-49fa-9e7d-f6f5f0812138","resolution":{"observed_at":"2026-08-05T14:51:03.642689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05668","last_updated":"2025-05-26T12:56:04Z","snapshot_observed_at":"2026-07-06T17:27:24.955378Z","submitted_at":"2024-02-08T13:42:50Z","title":"JailbreakRadar: Comprehensive Assessment of Jailbreak Attacks Against LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05668","snapshot_observed_at":"2026-08-05T14:51:03.645921Z","title":"JailbreakRadar: Comprehen- sive Assessment of Jailbreak Attacks Against LLMs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.645921Z"},"links":{"cited_paper":"/paper/2402.05668","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:dc705982240e5ca485d7d3c68adc0f8d1370ac5e7e291e776d35b75d283087e5","observation_id":"914ffc20-a3ee-46f8-9239-f750fb86e931","resolution":{"observed_at":"2026-08-05T14:51:03.645921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.349855Z","title":"Reconstruct Your Previous Conversations! Comprehensively Investigating Privacy Leakage Risks in Conversations with GPT Models","venue":null,"work_id":"0bcac94d-50ea-49a1-86fd-6c39906cba04","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.648939Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:697395185fba1dffe2dd10fb98059a84e1005459df4ba2770d39c7146e94dbab","observation_id":"ed30b360-be18-4fab-aba4-4b45edff134d","resolution":{"observed_at":"2026-08-05T14:51:04.353045Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.341546Z","title":"DeepSeek-V3","venue":null,"work_id":"73db4594-6a36-49e2-beb9-0ae16c1aae45","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.651942Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:d5b43fa227b1f7184e979ab0efd5de626380a23d609e6385f2ab4c2415340ca7","observation_id":"c75e5d42-8785-40e9-87e5-d5f2edb0e818","resolution":{"observed_at":"2026-08-05T14:51:04.344587Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.333033Z","title":null,"venue":null,"work_id":"51f73ed6-733d-4dcf-83dd-21eb247a2d7d","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.655034Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:2a2c2c3727196d7904712ab657682ed09461b42860d5bb8b89d18c0f0a9aa6b1","observation_id":"2c916155-82f6-4eff-9e07-294e050bdfbe","resolution":{"observed_at":"2026-08-05T14:51:04.336098Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.315053Z","title":"Sheridan Center for Teaching and Brown University Learning","venue":null,"work_id":"1cadc72d-9282-4f5b-a269-53a89a8a3c80","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.661394Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:f61918b73976a0d24c0663c3fd06e00905a893f6465ce4c5955c7c3b87355bfd","observation_id":"60cdb11d-9ef6-4851-9fc6-6a4387f3f242","resolution":{"observed_at":"2026-08-05T14:51:04.318511Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.306400Z","title":"https://www.perspectiveapi.com","venue":null,"work_id":"da9bd1e9-d1b4-4730-9c23-1f130ec37c3f","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.664418Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:ec7119b2a545bfd15e0b0f98f17788cf235240f1af92e8249a803ee301fb985e","observation_id":"4e79d65e-b3c8-47d9-bbc6-429cd92901c8","resolution":{"observed_at":"2026-08-05T14:51:04.309398Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08679","last_updated":"2024-06-07T00:13:08Z","snapshot_observed_at":"2026-07-06T17:29:39.117068Z","submitted_at":"2024-02-13T18:58:48Z","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08679","snapshot_observed_at":"2026-08-05T14:51:03.667508Z","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.667508Z"},"links":{"cited_paper":"/paper/2402.08679","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:2717c13921bb7cd25e66c6130047aaad6216784b81470f0f673412b8c6a36e19","observation_id":"959cbe90-79e5-444a-8150-c924af79b856","resolution":{"observed_at":"2026-08-05T14:51:03.667508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.06972","last_updated":"2023-12-22T18:01:44Z","snapshot_observed_at":"2026-07-06T15:26:06.998516Z","submitted_at":"2023-05-11T16:55:19Z","title":"Spear Phishing With Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.06972","snapshot_observed_at":"2026-08-05T14:51:03.671313Z","title":"Large Language Models Can Be Used To Effectively Scale Spear Phishing Campaigns","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.671313Z"},"links":{"cited_paper":"/paper/2305.06972","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:7c673899199cb1113586b2301af633a09b53f21d3171e3f556f06a21fe956012","observation_id":"92f69221-07f3-48d4-b130-fd0428948258","resolution":{"observed_at":"2026-08-05T14:51:03.671313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06987","last_updated":"2023-10-10T20:15:54Z","snapshot_observed_at":"2026-07-06T16:30:46.321160Z","submitted_at":"2023-10-10T20:15:54Z","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06987","snapshot_observed_at":"2026-08-05T14:51:03.674278Z","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.674278Z"},"links":{"cited_paper":"/paper/2310.06987","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:ab7df1c047eb8410631f216de34d6fdb488eb084e8601a5246d2dfbaa696fa7a","observation_id":"543ae494-8b11-42e1-8688-f6e44d17fec7","resolution":{"observed_at":"2026-08-05T14:51:03.674278Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.296990Z","title":"Hunter, Richard M","venue":null,"work_id":"3da1b441-3bf6-4ac0-93bd-3580e801b323","year":1996},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.677966Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:12daaa4666705ef6562ef9cb13159ba16be9447311d52d42f7a81605a4bdea65","observation_id":"f2532c17-1cf9-421b-8aa6-0cb1c32ff0b9","resolution":{"observed_at":"2026-08-05T14:51:04.300861Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.288596Z","title":"Adjacent Words, Divergent Intents: Jailbreaking Large Lan- guage Models via Task Concurrency","venue":null,"work_id":"7fac1425-50d9-41d4-929d-db9a2de866c1","year":2025},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.680596Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:872147557db8af444d9ecb1ba3e563b843993e24231794f11330ba9ae2cd99f4","observation_id":"f51ea7c1-eb51-4dc7-9978-a3324a6ef96f","resolution":{"observed_at":"2026-08-05T14:51:04.291722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.280094Z","title":"Boone Jr and Deborah A","venue":null,"work_id":"7e7550cc-db67-4ef4-ab9b-f3105720d71c","year":2012},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.683574Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:a6e7a2bb60c2404bfdf65f3d1796f5188ee8f94b8e908a7d140b27fdf38350fc","observation_id":"69f9934b-b5b1-4be8-8bd1-a59ff717b30b","resolution":{"observed_at":"2026-08-05T14:51:04.283045Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.271486Z","title":"Analytic or Holistic: A Study of Agreement Between Different Grading Models","venue":null,"work_id":"5170fc9b-c008-4670-9bd7-c41cb145ee25","year":2018},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.687286Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:130316a3a8356983004063fe5bac685117f76d9cc67037ffcdc9faf275e8a9fa","observation_id":"809aa72a-269f-44a4-93b4-b4bc209e8fe2","resolution":{"observed_at":"2026-08-05T14:51:04.274508Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.263317Z","title":"Analytic or Holistic? A Study about How to Increase the Agreement in Teachers’ Grading","venue":null,"work_id":"586ef3c4-bd6a-4484-bb4d-f79e767fdbd2","year":2021},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.690077Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:e7032947b29b467e1c95b0890286e09d4f0a2af1f0619d20b360bb4a9aafec15","observation_id":"6b855f65-370a-4a6e-af8d-0c425d694e42","resolution":{"observed_at":"2026-08-05T14:51:04.266311Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.05733","last_updated":"2023-02-11T15:57:44Z","snapshot_observed_at":"2026-07-06T14:50:49.200455Z","submitted_at":"2023-02-11T15:57:44Z","title":"Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.05733","snapshot_observed_at":"2026-08-05T14:51:03.693056Z","title":"Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security At- tacks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.693056Z"},"links":{"cited_paper":"/paper/2302.05733","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:bca800c7aa330e80ffd03745c731aff0e4e8e3ab087f36a9a57e266f56b1f614","observation_id":"a6857368-c41a-444e-9b2e-866c399a234a","resolution":{"observed_at":"2026-08-05T14:51:03.693056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.254872Z","title":"Content Analysis: An Introduction to Its Methodology","venue":null,"work_id":"51848d4f-c8e3-4a26-9179-3444ec0375d8","year":2018},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.696362Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:7a9c788c251cc2a041fdacd99aae1b4b6c20f616012887ac5a6391cdbea4b057","observation_id":"a01e0788-4ac4-45e5-b567-ed88d7591702","resolution":{"observed_at":"2026-08-05T14:51:04.258180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.245925Z","title":"Richard Landis and Gary G","venue":null,"work_id":"19561726-bf7a-423d-97b4-2ae7ed4a9081","year":1977},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.699233Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:d8129d855d658c380c108c244097500911f89faf8846a3574838433cab73e1a0","observation_id":"7843f4d4-edf4-4335-8045-7ed3a554c2c4","resolution":{"observed_at":"2026-08-05T14:51:04.249629Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.237279Z","title":"LangGraph","venue":null,"work_id":"ba985a76-aef6-4def-847d-7071efca9abf","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.702140Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:71a5b880889cac74e02597426b2cac0fa21bc86c8b324bc39dba7aa7e8be4c09","observation_id":"eb9aea90-8afe-4ad8-9ab5-f07676fd8ac5","resolution":{"observed_at":"2026-08-05T14:51:04.240819Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.228342Z","title":"A technique for the measurement of attitudes","venue":null,"work_id":"318a198a-f5ca-4c86-bd43-e8bb72de5fcc","year":1932},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.704941Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:25b9c478addceb927d1277edf971cefb64f63eb8a43ce62beee1c768cd987f2b","observation_id":"ff788327-4c43-463e-831d-603c66ff10d8","resolution":{"observed_at":"2026-08-05T14:51:04.231331Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-05T14:51:03.707918Z","title":"Au- toDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.707918Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:a68e24c87e057a4e22d83f150a4662952738da9f4711404299e5e8ec17b64d92","observation_id":"3f1a82dc-90a6-4590-a0fe-d3dc646a1489","resolution":{"observed_at":"2026-08-05T14:51:03.707918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.220130Z","title":"Lipnevich, and Ig- nacio Mañez","venue":null,"work_id":"ca624d49-243d-4112-9da5-d9099e85f8f9","year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.711019Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:e6dbebd0e2cbbc89ae9267cd6e9392f6abdfd4db973feece5dfdefa46c9baa7a","observation_id":"c86dd371-6e4a-4f4f-b482-40c1f7ec3d11","resolution":{"observed_at":"2026-08-05T14:51:04.223124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.211641Z","title":"Designing Effective Rubrics for Peer As- sessment Methods","venue":null,"work_id":"80b0b367-57d0-48d5-accb-3d1a9da3f82e","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.714600Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:88fde535159caf8dcd559070d0d914361dfa4284921f4613aee7683af34800b9","observation_id":"8905b60c-123b-45f2-925c-30bbb64465ee","resolution":{"observed_at":"2026-08-05T14:51:04.214576Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-08-05T14:51:03.717384Z","title":"Forsyth, and Dan Hendrycks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.717384Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:0ce96a98dda0a4c56e376a46a120d5104a5d99dc171d7fd368ed1d613957a595","observation_id":"ccd19ec1-c342-4e8a-a7dc-896ea4cc9e2e","resolution":{"observed_at":"2026-08-05T14:51:03.717384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02119","last_updated":"2024-10-31T15:57:42Z","snapshot_observed_at":"2026-07-06T16:56:46.051958Z","submitted_at":"2023-12-04T18:49:23Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.02119","snapshot_observed_at":"2026-08-05T14:51:03.721078Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automati- cally","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.721078Z"},"links":{"cited_paper":"/paper/2312.02119","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:0abbe8c011749d1b06fb5648d4d216dc1367f90857439fe671087bfa11371997","observation_id":"dddcc0d3-a88e-4da8-9197-baa444be216f","resolution":{"observed_at":"2026-08-05T14:51:03.721078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.202316Z","title":"SaloRA: Safety-alignment preserved low-rank adaptation","venue":null,"work_id":"c1af10b6-6c5e-4142-90b7-e71cc02b03ed","year":2025},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.724119Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:e0ee5ac3a7941ea087a19b767dd9c0b723fe99799b8d7e04b678370d84d96b78","observation_id":"c2f4a60c-f7ec-41ac-a4e1-98609dbc8580","resolution":{"observed_at":"2026-08-05T14:51:04.206176Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.05980","last_updated":"2025-05-30T22:03:36Z","snapshot_observed_at":"2026-07-06T19:47:42.919421Z","submitted_at":"2024-11-08T21:26:57Z","title":"FactLens: Benchmarking Fine-Grained Fact Verification","version":3},"cited_work":{"arxiv_id":"2411.05980","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.05980","snapshot_observed_at":"2026-08-05T14:51:03.955896Z","title":"FactLens: Benchmarking Fine-Grained Fact Verification","venue":"cs.CL","work_id":"1d82c86b-6102-439a-bf3b-5d9579995c9b","year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.727127Z"},"links":{"cited_paper":"/paper/2411.05980","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:4516b9a7b320c6e3a7acf1223547afe650d1c0528f60ad275ec8736cb7d0ce4e","observation_id":"65ba034b-cdfe-4dda-b104-91ebfd1172b7","resolution":{"observed_at":"2026-08-05T14:51:03.959404Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.194172Z","title":"Scoring student answers to constructed-response questions and essays","venue":null,"work_id":"52267237-ca21-4041-a7a8-0b2fef1defa3","year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.730236Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:e052a698e9c97e816a167718a39cefbb9714a3517ad077850092ec1b6593e10f","observation_id":"2ef7296d-036f-4472-9590-6f12b071f888","resolution":{"observed_at":"2026-08-05T14:51:04.197220Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.185482Z","title":"Scoring student answers to constructed-response questions, essays, and open-response questions","venue":null,"work_id":"41eaaf65-b957-4c37-ba87-4749140195af","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.733096Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:f53a1f7b0a79a41dd257c8185ce35ea645b49fe1199f19c4ee1f7916631a829a","observation_id":"e5e12121-836a-4965-be8f-c6989b2e0ea8","resolution":{"observed_at":"2026-08-05T14:51:04.188950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.177226Z","title":"https://platform.openai.com/docs/guides/ moderation/overview","venue":null,"work_id":"29fdf16f-ea0c-44d2-bf65-a2a1de7276bb","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.736565Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:b48483bde82cca570d3b9e5561fbda28fcb0b006449f27bc26911cce8605c2cc","observation_id":"0205451e-2b92-4338-8bcc-6f89c9b2572f","resolution":{"observed_at":"2026-08-05T14:51:04.180549Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.168294Z","title":null,"venue":null,"work_id":"2b2e2abe-b640-4c80-ab14-42e84715ff85","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.739424Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:6b15bb299d44ceab10ec7803a7bfb0afc903bfbb655bbdfe87e7ef23a750df81","observation_id":"1ef456b9-07aa-43cf-967a-fccb36043cad","resolution":{"observed_at":"2026-08-05T14:51:04.171996Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.159841Z","title":null,"venue":null,"work_id":"60c98bb4-d9c1-4aaa-ae19-5e05003b99fb","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.742249Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:4e49e8f748715c7387cd43c061c26f5508272b3d1ed048233e8d42b5aef08095","observation_id":"2ad982ff-fbb7-4a0a-99b1-cf806f0b8629","resolution":{"observed_at":"2026-08-05T14:51:04.162824Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.150732Z","title":"GPT-4o-mini","venue":null,"work_id":"62acc9a5-a78d-4e7a-9068-82bb9205297a","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.745265Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:cfa2da5fe93d9312d7d5e76f02d06416fa59faacf51364919dc0b58e1a7e6fd2","observation_id":"e66838e6-bf79-488a-82f3-a1997c354503","resolution":{"observed_at":"2026-08-05T14:51:04.154437Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-05T14:51:03.748795Z","title":"GPT-4 Technical Report","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.748795Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:08c4488e86461765e5893793c4bf994213d4e0acef2e5588ab816cddd841c53b","observation_id":"c0a30e69-2fd0-4941-8de3-acfcad50430c","resolution":{"observed_at":"2026-08-05T14:51:03.748795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.142421Z","title":null,"venue":null,"work_id":"6b574846-5e4f-4bca-86f5-5c89337b4eb3","year":2022},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.751677Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:74460d85d89de919b67027afc1f7ab24e3e7ea1d8be618c411f17bc617e29ce9","observation_id":"cd8fdcd8-e055-4f04-bb01-21fa3a14f5cb","resolution":{"observed_at":"2026-08-05T14:51:04.145468Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03286","last_updated":"2022-02-07T15:22:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-02-07T15:22:17Z","title":"Red Teaming Language Models with Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03286","snapshot_observed_at":"2026-08-05T14:51:03.754420Z","title":"Francis Song, Trevor Cai, Ro- man Ring, John Aslanides, Amelia Glaese, Nat McAleese, and Geoffrey Irving","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.754420Z"},"links":{"cited_paper":"/paper/2202.03286","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:994963c49d4ec642cf7ad5903316c7af432e3e45d8170f857aa76fa32ef687ca","observation_id":"49441f07-c0c4-4a7f-b4fa-fafc20670bf2","resolution":{"observed_at":"2026-08-05T14:51:03.754420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.133798Z","title":"What’s Wrong–and What’s Right– with Rubrics","venue":null,"work_id":"9f6b51de-130c-4150-a835-e9674409b155","year":1997},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.757611Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:4750960ab368b79f6807324842aeb895d53ed0d8a13cad3050d33abdb4ed15ff","observation_id":"984346ee-a6e2-4f57-ad31-50977142e3ca","resolution":{"observed_at":"2026-08-05T14:51:04.136903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.124950Z","title":"Unsafe Diffusion: On the Gen- eration of Unsafe Images and Hateful Memes From Text-To- Image Models","venue":null,"work_id":"2dc5c85e-acbd-422e-86ed-7746f58476d0","year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.760288Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:1f37801602d7a6d91e81776746ed5cc49473ee1243bd4d2c7d9b7ed64590f489","observation_id":"0cd0e695-da34-4af5-91c4-84dceedbda55","resolution":{"observed_at":"2026-08-05T14:51:04.128292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.116473Z","title":null,"venue":null,"work_id":"5e07c2a2-2d6b-4273-a303-ece8bcd57712","year":2011},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.763150Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:242f4f7536064bcc2e4b90b846f862b618147d9b88c9b680de9a985f23582f53","observation_id":"32171dfa-5f8d-4376-9f7c-fc60394a0869","resolution":{"observed_at":"2026-08-05T14:51:04.119441Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14965","last_updated":"2024-03-27T04:38:44Z","snapshot_observed_at":"2026-08-07T01:32:47.981682Z","submitted_at":"2023-05-24T09:57:37Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14965","snapshot_observed_at":"2026-08-05T14:51:03.766731Z","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.766731Z"},"links":{"cited_paper":"/paper/2305.14965","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:9542f51d081665d7008d6ea05e415e6038967c7432ad01567c39a8cf0460041e","observation_id":"0217de0c-6e66-48c9-9d73-5d2d29e35de2","resolution":{"observed_at":"2026-08-05T14:51:03.766731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.107085Z","title":"Shabani and Jaleh Panahi","venue":null,"work_id":"8b1ec7d3-0a81-4517-911c-0163663ee1c7","year":2020},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.769849Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:a0e803e6a1f099d1b0a1e51e978f4765bb8f720b4e611666c09b71201cb81d0f","observation_id":"4e43e52e-d4ab-46fc-880b-5687e2665f24","resolution":{"observed_at":"2026-08-05T14:51:04.110110Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03825","last_updated":"2024-05-15T12:06:31Z","snapshot_observed_at":"2026-07-06T16:03:34.432602Z","submitted_at":"2023-08-07T16:55:20Z","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03825","snapshot_observed_at":"2026-08-05T14:51:03.772540Z","title":"Do Anything Now: Characterizing and Evaluat- ing In-The-Wild Jailbreak Prompts on Large Language Mod- els","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.772540Z"},"links":{"cited_paper":"/paper/2308.03825","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:82bb8429d6e54b4f1316c233b33d0986fe8f3567fdfacea9294372e0ad642173","observation_id":"cae8d7c0-f6d3-4352-a1d7-6a783abf1da2","resolution":{"observed_at":"2026-08-05T14:51:03.772540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.10260","last_updated":"2024-08-27T03:32:47Z","snapshot_observed_at":"2026-08-04T21:32:35.483431Z","submitted_at":"2024-02-15T18:58:09Z","title":"A StrongREJECT for Empty Jailbreaks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.10260","snapshot_observed_at":"2026-08-05T14:51:03.775476Z","title":"A StrongRE- JECT for Empty Jailbreaks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.775476Z"},"links":{"cited_paper":"/paper/2402.10260","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:576fba3e38f78196736469e211e741cb34095884ecea14055d391ce340466704","observation_id":"06d4c969-eda1-4d86-8101-484350effe8a","resolution":{"observed_at":"2026-08-05T14:51:03.775476Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.097345Z","title":"Analyzing and In- terpreting Data From Likert-Type Scales.Journal of Graduate Medical Education, 2013","venue":null,"work_id":"271118db-4f03-4d7b-9bcc-5dd8c2621627","year":2013},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.778753Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:fa468acbc5b5ef4fa8cdefefd2d2bb96a022ffb3f1fee6a204db32e1b6bac7ee","observation_id":"de08ded0-f4ee-4604-a4c1-b827934ad15a","resolution":{"observed_at":"2026-08-05T14:51:04.100375Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.088288Z","title":"TavilySearch","venue":null,"work_id":"cda8b2d5-7ec4-4195-807e-8311b8da981e","year":null},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.781458Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:929daa65c1dceed188a36b23b0808b177a699a0c2b1f71d235533abd638dc3e0","observation_id":"27a27e2a-4d0e-420c-9e35-e7701027fac8","resolution":{"observed_at":"2026-08-05T14:51:04.091307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.079574Z","title":null,"venue":null,"work_id":"d7182b4c-7ace-4f26-ba26-d0882babbd92","year":2018},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.784190Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:65dfe30367389f5e50a9ed3d2bea40d58208610b74927377ce9fac14c55cc627","observation_id":"e0882ab9-16a4-45cc-bbbf-62aa3c85f2ed","resolution":{"observed_at":"2026-08-05T14:51:04.082504Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.14374","last_updated":"2025-06-17T10:16:52Z","snapshot_observed_at":"2026-08-07T00:15:36.394369Z","submitted_at":"2025-06-17T10:16:52Z","title":"Excessive Reasoning Attack on Reasoning LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.14374","snapshot_observed_at":"2026-08-05T14:51:03.787053Z","title":"Excessive reasoning attack on reasoning llms","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.787053Z"},"links":{"cited_paper":"/paper/2506.14374","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:5c08f4a956b349dd26eb4900f335c3609f8ed42180e08d74b2ae60d5deacc23b","observation_id":"e19f20ff-3fd5-4c5c-9952-6277d53d0387","resolution":{"observed_at":"2026-08-05T14:51:03.787053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02483","snapshot_observed_at":"2026-08-05T14:51:03.790055Z","title":"Jail- broken: How Does LLM Safety Training Fail? CoRR abs/2307.02483, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.790055Z"},"links":{"cited_paper":"/paper/2307.02483","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:8dad79cd34c61dff4206e808e897c6a1580c1da8f34982b3dfbb4eacc04ccbcf","observation_id":"d6b0fcd8-cb2a-4750-ada1-0e90c47c201e","resolution":{"observed_at":"2026-08-05T14:51:03.790055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.18802","last_updated":"2024-11-07T03:14:38Z","snapshot_observed_at":"2026-08-05T22:52:02.742401Z","submitted_at":"2024-03-27T17:48:55Z","title":"Long-form factuality in large language models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.18802","snapshot_observed_at":"2026-08-05T14:51:03.793719Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.793719Z"},"links":{"cited_paper":"/paper/2403.18802","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:9eb17a0708f5fc06c5c40c4b5bf524005239ecdff2e2858612cc7ab907f55ac8","observation_id":"9e1a384a-f6b2-4472-b578-acd638b17247","resolution":{"observed_at":"2026-08-05T14:51:03.793719Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.11082","last_updated":"2024-06-03T12:19:16Z","snapshot_observed_at":"2026-07-06T15:18:26.300068Z","submitted_at":"2023-04-19T17:50:09Z","title":"Fundamental Limitations of Alignment in Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.11082","snapshot_observed_at":"2026-08-05T14:51:03.796947Z","title":"Fundamental Limitations of Alignment in Large Language Models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.796947Z"},"links":{"cited_paper":"/paper/2304.11082","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:9fe39eff370b28f488657bbc9b09ace9eaae3546fccd85c55cddb60f40e87eba","observation_id":"560af3c0-046c-40eb-90de-d44ddc6a6834","resolution":{"observed_at":"2026-08-05T14:51:03.796947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.03160","last_updated":"2024-07-03T14:35:16Z","snapshot_observed_at":"2026-08-05T17:30:34.776829Z","submitted_at":"2024-07-03T14:35:16Z","title":"SOS! Soft Prompt Attack Against Open-Source Large Language Models","version":1},"cited_work":{"arxiv_id":"2407.03160","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.03160","snapshot_observed_at":"2026-08-05T14:51:03.874099Z","title":"SOS! Soft Prompt Attack Against Open-Source Large Language Models","venue":"cs.CR","work_id":"28571f8c-e4c3-40a8-97b8-429ee557c043","year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.799897Z"},"links":{"cited_paper":"/paper/2407.03160","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:45c12054e84d566fd91b53ee199c0609735caee028bfc1942a0067976a62466a","observation_id":"2fad2d1a-a39a-4725-8aa5-02bb7f3be15b","resolution":{"observed_at":"2026-08-05T14:51:03.879519Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.02446","last_updated":"2024-01-27T22:54:52Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-03T21:30:56Z","title":"Low-Resource Languages Jailbreak GPT-4","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.02446","snapshot_observed_at":"2026-08-05T14:51:03.803021Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.803021Z"},"links":{"cited_paper":"/paper/2310.02446","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:f8382696546117a26f6592ad466d5dd81404b89766061f8b073c1fd5b0e01435","observation_id":"a0678564-32d8-4534-93d4-5716c60d3a32","resolution":{"observed_at":"2026-08-05T14:51:03.803021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-05T14:51:03.806170Z","title":"GPT- FUZZER: Red Teaming Large Language Models with Auto- Generated Jailbreak Prompts","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.806170Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:b303b81785ff95d2dd982f3be7cb2a6f4037c23f2781e443cecf0a25fda597a4","observation_id":"2b903e31-4c67-405b-b32e-22ce8c14b424","resolution":{"observed_at":"2026-08-05T14:51:03.806170Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.070892Z","title":"Parker, and Munmun De Choudhury","venue":null,"work_id":"ab24985b-316f-4ba5-87f1-c147a82fec0b","year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.809719Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:02fff512629cd0f3f0e5df2b21384514a59b480b93be2fd389647dfb8092a703","observation_id":"f5531412-abc6-4cc6-8172-d5c6707a2983","resolution":{"observed_at":"2026-08-05T14:51:04.073967Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16369","last_updated":"2025-07-02T07:27:32Z","snapshot_observed_at":"2026-07-06T18:05:20.955471Z","submitted_at":"2024-04-25T07:15:23Z","title":"Don't Say No: Jailbreaking LLM by Suppressing Refusal","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16369","snapshot_observed_at":"2026-08-05T14:51:03.812481Z","title":"Don’t Say No: Jailbreaking LLM by Sup- pressing Refusal","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.812481Z"},"links":{"cited_paper":"/paper/2404.16369","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:ae9c3cb449b4a3ab2b752e04f8b2e3807f7285ec5ceab5d87bcf8ca79747b80a","observation_id":"0acbcdc5-64f0-4ef2-937b-b660adecc5c2","resolution":{"observed_at":"2026-08-05T14:51:03.812481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-05T14:51:03.815504Z","title":"gather the necessary materials","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.815504Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:6f1ec8b348d518e9826648c3f0250f148c770419e9451ef3354ffe51359d535a","observation_id":"5e0ea74c-3664-4569-b173-93f2c7ef442e","resolution":{"observed_at":"2026-08-05T14:51:03.815504Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T14:51:04.324025Z","title":null,"venue":null,"work_id":"06b74bc5-7d1e-423a-93c9-9db142943c83","year":2019},"citing_paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","version":1},"reference_index":590,"source":"pdf_text","source_observed_at":"2026-08-05T14:51:03.658106Z"},"links":{"citing_paper":"/paper/2508.20848"},"observation_digest":"sha256:f3c239c32f464c361c725ec631a0b252fe575144f1483a7b35c3bc3c8fb62f8a","observation_id":"27fdc326-0ce0-4f47-9b3f-e8ce81cf1cfe","resolution":{"observed_at":"2026-08-05T14:51:04.327673Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.20848","last_updated":"2025-08-28T14:40:27Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-05T14:51:02.831302Z","submitted_at":"2025-08-28T14:40:27Z","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring"},"reference_resolution":{"displayed":66,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":35,"verified_exact":2,"verified_fuzzy":29},"total_outbound_references":66},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 66 of 66 outbound references and 2 inbound Pith citation observations for arXiv:2508.20848."}