{"as_of":"2026-08-11T17:06:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0fd2efda1ff9b14234e58751d0251fc58ebecedad058eb67c88c606c4577a79f","coverage":[{"denominator":37,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":37,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T05:29:20.783870Z","state":"measured"},{"denominator":40,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":40,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T15:04:28.416667Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-12T10:51:31.097429Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"cited_work":{"arxiv_id":"2509.05471","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.05471","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","venue":null,"work_id":"3194a621-d991-4e5f-99a2-4dd96bbbdc9e","year":2025},"citing_paper":{"arxiv_id":"2605.02187","last_updated":"2026-07-22T08:25:06Z","snapshot_observed_at":"2026-08-11T08:50:00.509790Z","submitted_at":"2026-05-04T03:35:17Z","title":"Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-05-08T18:42:06.418583Z"},"links":{"cited_paper":"/paper/2509.05471","citing_paper":"/paper/2605.02187"},"observation_digest":"sha256:b63c20b292a2989e8966c3a92cb61668d7bf2e419f1b0e024eab95d5416089e9","observation_id":"5466a475-5077-4378-8c26-90a6bacd12be","resolution":{"observed_at":"2026-05-09T06:15:38.406755Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.05471","snapshot_observed_at":"2026-08-02T15:04:28.416667Z","title":"Behind the mask: Benchmarking camouflaged jailbreaks in large language models.arXiv preprint arXiv:2509.05471, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.02187","last_updated":"2026-07-22T08:25:06Z","snapshot_observed_at":"2026-08-11T08:50:00.509790Z","submitted_at":"2026-05-04T03:35:17Z","title":"Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents","version":2},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-02T15:04:28.416667Z"},"links":{"cited_paper":"/paper/2509.05471","citing_paper":"/paper/2605.02187"},"observation_digest":"sha256:a7e32fe19bdef630714b316a7c1dcb855dfd171c221e897fc508452fe28b1d9b","observation_id":"4129f329-b740-4b0d-a0ee-7f6e9887212d","resolution":{"observed_at":"2026-08-02T15:04:28.416667Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"cited_work":{"arxiv_id":"2509.05471","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.05471","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","venue":null,"work_id":"3194a621-d991-4e5f-99a2-4dd96bbbdc9e","year":2025},"citing_paper":{"arxiv_id":"2605.03441","last_updated":"2026-05-05T07:25:33Z","snapshot_observed_at":"2026-08-10T21:29:00.284608Z","submitted_at":"2026-05-05T07:25:33Z","title":"Exposing LLM Safety Gaps Through Mathematical Encoding:New Attacks and Systematic Analysis","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-07T15:48:54.277233Z"},"links":{"cited_paper":"/paper/2509.05471","citing_paper":"/paper/2605.03441"},"observation_digest":"sha256:a4dd4fd4d21548630742897df22eef80862a9cad2c28deadddc61edb71b065c7","observation_id":"1967fa15-bd0c-4925-bb0e-3a21056b2f87","resolution":{"observed_at":"2026-05-12T10:51:31.100886Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2509.05471/citation-record","integrity":"/paper/2509.05471/integrity","json":"/paper/2509.05471/citation-record.json","paper":"/paper/2509.05471"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.303939Z","title":null,"venue":null,"work_id":"8a120469-db1f-43e9-973c-066a73b7e7d3","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.644874Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:b50e0f88215f5e80c589c7b64d84048172dd9699c5565197585d941437a9bf40","observation_id":"130deab5-a78f-40d6-928a-0e8c004405fd","resolution":{"observed_at":"2026-08-05T05:29:21.307502Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.291974Z","title":"S.; Yang, Q.; and Xie, X","venue":null,"work_id":"1342fcb2-7f30-4067-99ad-4e6a05b62f5c","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.649115Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:2ec5fb4fbdf5553c4ebbe6f8a69c33f63899832c46c229bbe4ea31f7fb4fcb46","observation_id":"3c8a8024-d983-41e2-883a-0d523f9de39a","resolution":{"observed_at":"2026-08-05T05:29:21.296284Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01318","last_updated":"2024-10-31T22:26:40Z","snapshot_observed_at":"2026-08-11T16:28:21.917686Z","submitted_at":"2024-03-28T02:44:02Z","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01318","snapshot_observed_at":"2026-08-05T05:29:20.652851Z","title":"J.; Tramèr, F.; Hassani, H.; and Wong, E","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.652851Z"},"links":{"cited_paper":"/paper/2404.01318","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:c1666cdaef871a2b1aed4754afaf45941908643e2568cfd274387d384f061fa5","observation_id":"1642cf1a-1665-4871-8fdb-755ec7eacd8a","resolution":{"observed_at":"2026-08-05T05:29:20.652851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11725","last_updated":"2024-06-18T05:14:02Z","snapshot_observed_at":"2026-08-04T22:10:54.310583Z","submitted_at":"2024-02-18T22:36:19Z","title":"How Susceptible are Large Language Models to Ideological Manipulation?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11725","snapshot_observed_at":"2026-08-05T05:29:20.658074Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.658074Z"},"links":{"cited_paper":"/paper/2402.11725","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:09a5d3e584cf61cfbc8402dbfd532d78a5304a86a8f153e3ffc680b852aa0360","observation_id":"44f343f4-5a40-4245-93f6-d4668b222b39","resolution":{"observed_at":"2026-08-05T05:29:20.658074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.279638Z","title":null,"venue":null,"work_id":"9e4fe0fe-d0c3-48c0-96e2-00c3dedaec0b","year":2023},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.662125Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:b9bd28df80b342882c82767c5827a0c758c2bd57741c38aa43c3c5775db5791b","observation_id":"9d8b6d3e-03b0-4e93-8600-f1e3108e3f72","resolution":{"observed_at":"2026-08-05T05:29:21.283408Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.269127Z","title":null,"venue":null,"work_id":"7c8ff967-3736-4724-8f37-240ce4c35f8a","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.665990Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:c315f3b1065350a1148005412a5ddc96a0d39080c4f7888a254c289a59ae9f77","observation_id":"47b889e6-82b5-4795-b995-50c27817a612","resolution":{"observed_at":"2026-08-05T05:29:21.272555Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.258491Z","title":null,"venue":null,"work_id":"cd558670-c7f7-4ec1-a432-f45c1716c247","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.670206Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:db4b1bffd50abc57fef111b1b5e153a1d7a4fceb53ca8dfedb2943655754f2d9","observation_id":"0a7a77b7-b6f4-4bfd-8c9b-a4a24ef48725","resolution":{"observed_at":"2026-08-05T05:29:21.262296Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.248127Z","title":null,"venue":null,"work_id":"23476f31-d614-43b0-937a-e0bd9bce68fe","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.673833Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:a9e10b0f101a514fd582416535183c2a78742568c797b143609bdc218ad11a3f","observation_id":"5e1d22db-9e76-42b7-8693-b57d01846dbb","resolution":{"observed_at":"2026-08-05T05:29:21.251815Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18510","last_updated":"2024-06-26T17:31:22Z","snapshot_observed_at":"2026-08-07T07:51:30.753226Z","submitted_at":"2024-06-26T17:31:22Z","title":"WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18510","snapshot_observed_at":"2026-08-05T05:29:20.677393Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.677393Z"},"links":{"cited_paper":"/paper/2406.18510","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:425878f7be05d235b05dd56c81fed978d867037dc59ccd55c06d7e1a44b05698","observation_id":"c9187f3a-3f91-4b80-a5ad-1ee823d3bf56","resolution":{"observed_at":"2026-08-05T05:29:20.677393Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.237939Z","title":null,"venue":null,"work_id":"221ef4e5-b8d6-46b3-a77c-e0cf8819ff59","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.681423Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:e3238e3ac43f5ea25ae845cae4ae3a2f6bec61c4c4d90cc2f226cacc8991f0e2","observation_id":"539eaedf-4c7a-4d9e-8e6f-ead6daf69190","resolution":{"observed_at":"2026-08-05T05:29:21.241442Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.15560","last_updated":"2025-03-18T22:30:17Z","snapshot_observed_at":"2026-08-09T12:25:31.655495Z","submitted_at":"2025-03-18T22:30:17Z","title":"Temporal Context Awareness: A Defense Framework Against Multi-turn Manipulation Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":"2503.15560","doi":null,"metadata_source":"pith","pith_arxiv_id":"2503.15560","snapshot_observed_at":"2026-08-05T05:29:21.041214Z","title":"Temporal Context Awareness: A Defense Framework Against Multi-turn Manipulation Attacks on Large Language Models","venue":"cs.CR","work_id":"4f6e87fd-662c-472d-beb1-d9cb4f1faff6","year":2025},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.685472Z"},"links":{"cited_paper":"/paper/2503.15560","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:ebc7877e74729ee43601ff501f43d7bf7efe94ec740789c67d2a216c022d33b0","observation_id":"5f322c81-9800-4cbf-9fac-f1240a07326a","resolution":{"observed_at":"2026-08-05T05:29:21.045977Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.225907Z","title":null,"venue":null,"work_id":"883199f5-6bcb-4ac9-88e4-8671490dc82d","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.690218Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:9532b1837ae690d35b3b52dc46a0fb76ea388b7be576c21aeb9e8c2eacf2e176","observation_id":"d608efb8-6a80-4e69-ae1c-29b57915d45f","resolution":{"observed_at":"2026-08-05T05:29:21.229746Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.215951Z","title":null,"venue":null,"work_id":"b58aa373-b897-4671-8733-93156a33383b","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.693990Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:f790d1109fc2e73453a5f5d632f7736875b1a81b0e48db460bd44d35105f3b73","observation_id":"8e75ad7c-3329-45b5-8f49-e1b95d3c5110","resolution":{"observed_at":"2026-08-05T05:29:21.219489Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18104","last_updated":"2024-06-10T11:20:43Z","snapshot_observed_at":"2026-08-11T09:53:29.541375Z","submitted_at":"2024-02-28T06:50:14Z","title":"Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18104","snapshot_observed_at":"2026-08-05T05:29:20.697468Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.697468Z"},"links":{"cited_paper":"/paper/2402.18104","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:d9b8dde2e9ce5285ae4811125a755ecdf1274b04ffa5e07e9ec2581d8562d301","observation_id":"85e85fed-f946-4490-8a21-e8e5b09fb212","resolution":{"observed_at":"2026-08-05T05:29:20.697468Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.204630Z","title":null,"venue":null,"work_id":"65ee37c5-da29-484e-b9be-2f067a18c4fc","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.702403Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:18d5346feec4f19dd48bd4428081fe45696427229ea19fc7da3aa17215da9169","observation_id":"8b2df224-79f0-43d1-aef9-4000cbda4743","resolution":{"observed_at":"2026-08-05T05:29:21.209018Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.194093Z","title":null,"venue":null,"work_id":"97504eed-d944-4fee-9f62-1991b6df843a","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.705872Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:e6b6d8f07ada1fee40f25085837369756ca89aaa75698b6f24fe596291b9055b","observation_id":"1f09b1cb-13ba-4b5a-b917-19aceddd02bd","resolution":{"observed_at":"2026-08-05T05:29:21.197592Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.03027","last_updated":"2024-11-24T06:22:37Z","snapshot_observed_at":"2026-08-06T14:20:00.145899Z","submitted_at":"2024-04-03T19:23:18Z","title":"JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.03027","snapshot_observed_at":"2026-08-05T05:29:20.709402Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.709402Z"},"links":{"cited_paper":"/paper/2404.03027","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:91ea682fb597b03a03f163d88a561037536895019afab2b8e22405fe4ef92394","observation_id":"e61eed51-1411-46a1-9a3a-a658b707ab34","resolution":{"observed_at":"2026-08-05T05:29:20.709402Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.182759Z","title":null,"venue":null,"work_id":"57de9318-7b3d-4630-9df9-3f3624208d1d","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.713313Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:98e32a873980a560f9807534dd64ce18b5763d2f9b7ab8c44df05cf1a1a8314c","observation_id":"36e2fad6-b00c-4529-8422-91cdf642ca30","resolution":{"observed_at":"2026-08-05T05:29:21.186560Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.172710Z","title":null,"venue":null,"work_id":"13beabf7-8234-46dc-bcd2-dbd5977df187","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.716789Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:87ab65de2c3eca992654188b91ae75988e890eb5c1f607aaf142c353d0a7e034","observation_id":"678b87e6-edec-41d0-9ce4-a28c0bdc9577","resolution":{"observed_at":"2026-08-05T05:29:21.176214Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.162484Z","title":null,"venue":null,"work_id":"06e46e37-e4ab-45c9-aef6-aa0062421222","year":2025},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.720522Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:5d27d24a0022ff817b276e8a98f8f4417b5cf10941cf22b706f3ee95ea31e6b0","observation_id":"21ce1f20-0477-42a6-94a4-27421899a287","resolution":{"observed_at":"2026-08-05T05:29:21.165848Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15236","last_updated":"2026-05-27T16:38:46Z","snapshot_observed_at":"2026-07-06T19:36:32.581033Z","submitted_at":"2024-10-20T00:00:56Z","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.15236","snapshot_observed_at":"2026-08-05T05:29:20.724735Z","title":"K.; Wen, Y.; Zhang, Y.; and Yin, C","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.724735Z"},"links":{"cited_paper":"/paper/2410.15236","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:b606b185be26a0eed53321f197813e34ad37099806f154de0cf6c4607a985687","observation_id":"d5a9b824-cead-4ec8-aab8-6a8358a9c49b","resolution":{"observed_at":"2026-08-05T05:29:20.724735Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01833","last_updated":"2025-02-26T13:41:41Z","snapshot_observed_at":"2026-08-03T07:26:39.431128Z","submitted_at":"2024-04-02T10:45:49Z","title":"Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01833","snapshot_observed_at":"2026-08-05T05:29:20.728932Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.728932Z"},"links":{"cited_paper":"/paper/2404.01833","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:8fcc14ec59bb4703c8a6732c43d3cec0e975ef0287bab98e6f7b6748523c686c","observation_id":"70ed739b-b90b-4e10-a7a2-84bf08457161","resolution":{"observed_at":"2026-08-05T05:29:20.728932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.150496Z","title":"A.; Shanto, M","venue":null,"work_id":"dd1cd507-2d6f-48c9-8592-9572041d50d3","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.733159Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:0d6709b2fa8b8d64c32cd9140c91c1e016bc74eb51462de925f1e7757bfd040b","observation_id":"eb8d1311-e254-44a8-a46b-39a4a490125b","resolution":{"observed_at":"2026-08-05T05:29:21.154903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.138549Z","title":"Do Anything Now","venue":null,"work_id":"81d72340-5e65-4799-b948-3ef91de6df65","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.736737Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:549de84a9ea85fad20632230ae98eba3fca6f8f654a89a97fa34b756b29c558a","observation_id":"41763b19-d78b-4809-ae25-d8bd9bd69ed0","resolution":{"observed_at":"2026-08-05T05:29:21.143025Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.09002","last_updated":"2025-03-18T01:50:42Z","snapshot_observed_at":"2026-08-09T12:16:20.820845Z","submitted_at":"2024-01-17T06:42:44Z","title":"AttackEval: How to Evaluate the Effectiveness of Jailbreak Attacking on Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.09002","snapshot_observed_at":"2026-08-05T05:29:20.739903Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.739903Z"},"links":{"cited_paper":"/paper/2401.09002","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:b6f22ef67d5af4a3868afd0c50a9d25a894dcfb64c7c60c929492f94cf36d337","observation_id":"39cb55dc-b955-4a99-bf30-db6c239e26a9","resolution":{"observed_at":"2026-08-05T05:29:20.739903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.128120Z","title":null,"venue":null,"work_id":"b1bccde7-a371-4401-aec6-e03103ffad8a","year":2023},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.743150Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:4bd88154c4c765a2a8ad7f501e20960277a8e0578995e9ebdf3457bbfa98f9d8","observation_id":"6e2e2f9b-6f7b-4aaf-a6c8-d3a89be5cfff","resolution":{"observed_at":"2026-08-05T05:29:21.131650Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.00473","last_updated":"2025-06-18T07:33:15Z","snapshot_observed_at":"2026-08-11T11:36:52.139823Z","submitted_at":"2024-11-30T13:21:15Z","title":"Jailbreak Large Vision-Language Models Through Multi-Modal Linkage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.00473","snapshot_observed_at":"2026-08-05T05:29:20.746385Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.746385Z"},"links":{"cited_paper":"/paper/2412.00473","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:6952ef16315a87110add894a0ade1434e91f4794b9d8a97b90228d738d5ad095","observation_id":"a057bd8f-f2a4-46b6-87ea-7906f5cff3b0","resolution":{"observed_at":"2026-08-05T05:29:20.746385Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.19820","last_updated":"2025-03-28T00:37:10Z","snapshot_observed_at":"2026-08-07T17:43:50.257604Z","submitted_at":"2025-02-27T06:49:16Z","title":"Foot-In-The-Door: A Multi-turn Jailbreak for LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.19820","snapshot_observed_at":"2026-08-05T05:29:20.750136Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.750136Z"},"links":{"cited_paper":"/paper/2502.19820","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:faba85c88beea373b5b7f3dd5bf62b9d80ea1e3262aea44fccd1a4ad4c8d24a1","observation_id":"f12dafa9-4b73-4da9-b2ba-a81607a4ecd4","resolution":{"observed_at":"2026-08-05T05:29:20.750136Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.03857","last_updated":"2024-10-08T08:34:38Z","snapshot_observed_at":"2026-08-11T16:50:15.267477Z","submitted_at":"2024-10-04T18:42:57Z","title":"You Know What I'm Saying: Jailbreak Attack via Implicit Reference","version":2},"cited_work":{"arxiv_id":"2410.03857","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.03857","snapshot_observed_at":"2026-08-05T05:29:20.847903Z","title":"You Know What I'm Saying: Jailbreak Attack via Implicit Reference","venue":"cs.CL","work_id":"c3ccde53-16e1-4e60-90f0-f0e60f2f5411","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.753804Z"},"links":{"cited_paper":"/paper/2410.03857","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:3be52489f616f5b994d9febc86c9d04b0042a882beb3ce64e08f77e2c916c8ed","observation_id":"812d8591-fe6e-46fa-8ed6-88db238755a0","resolution":{"observed_at":"2026-08-05T05:29:20.853861Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.117572Z","title":null,"venue":null,"work_id":"71cb1c7c-eb2b-4842-964d-52ee3479a0af","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.757667Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:021c80d5f1d697ae2edbe4224deb29262747179bce28769446d6e74a9eccf77d","observation_id":"3f7cf1d5-1351-4e8c-ba9f-7d556ad04f2e","resolution":{"observed_at":"2026-08-05T05:29:21.121132Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.106024Z","title":null,"venue":null,"work_id":"bb92a29f-9914-439a-9bfe-59a563c448eb","year":2025},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.760798Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:fdb62beda71ab635378db9008e2814ae21bf8e2a886ffee13c64c242446569a2","observation_id":"034db21d-7496-4fda-98e1-179007492669","resolution":{"observed_at":"2026-08-05T05:29:21.109988Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-08-11T01:06:25.294944Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-08-05T05:29:20.764183Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.764183Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:fe262e89a13d02bdfd71c734405a46839ead93395ab1bcd8df7dbb08a5f8e025","observation_id":"e3744395-287a-4ddc-9401-cb4a808358bb","resolution":{"observed_at":"2026-08-05T05:29:20.764183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.07045","last_updated":"2024-06-24T04:04:21Z","snapshot_observed_at":"2026-08-09T10:42:31.794884Z","submitted_at":"2023-09-13T15:56:50Z","title":"SafetyBench: Evaluating the Safety of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.07045","snapshot_observed_at":"2026-08-05T05:29:20.767922Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.767922Z"},"links":{"cited_paper":"/paper/2309.07045","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:467929a8319acf6ce2da748ccde8cde6866c37670d8d28b62edc934e1166ffe7","observation_id":"13039f77-573b-488c-935f-c28a25313167","resolution":{"observed_at":"2026-08-05T05:29:20.767922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:21.095077Z","title":null,"venue":null,"work_id":"f4d92dfb-2426-4d5f-acec-4c89465382e7","year":2024},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.771435Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:213672c4d7b2a306b33e67cce773d3b558b4ceef8bac8cbf6f56e08b2ce595e4","observation_id":"405cbcf2-60b8-49da-be36-3ca03783cf2c","resolution":{"observed_at":"2026-08-05T05:29:21.098809Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-05T05:29:20.775065Z","title":"Z.; and Fredrikson, M","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.775065Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:512995593b1a2bbbf4b7108ec05f7d554d3d1f2f9a82421d21e19dc31641b89c","observation_id":"4a4107dd-bafe-40dd-a6c4-efcbd9677e44","resolution":{"observed_at":"2026-08-05T05:29:20.775065Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:20.779911Z","title":", \" * write output.state after.block = add.period write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.779911Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:df716115ca2b549d3bb72218bac66bb8758a59161e48d3b5166103f57bf733da","observation_id":"4fe2a0e5-2231-4d50-a3d5-b810cf330f92","resolution":{"observed_at":"2026-08-05T05:29:20.779911Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T05:29:20.783870Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-05T05:29:20.783870Z"},"links":{"citing_paper":"/paper/2509.05471"},"observation_digest":"sha256:7ddde0f2acc689b2e6194b462355a96d016f95c6d325fa7a806ddd48c110a109","observation_id":"a8521700-1f05-4024-b5e2-5e2c867c959b","resolution":{"observed_at":"2026-08-05T05:29:20.783870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.05471","last_updated":"2025-09-05T19:57:38Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T22:55:04.705178Z","submitted_at":"2025-09-05T19:57:38Z","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models"},"reference_resolution":{"displayed":37,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":32,"verified_exact":2,"verified_fuzzy":3},"total_outbound_references":37},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 3 inbound Pith citation observations for arXiv:2509.05471."}