Paper Citation Record · LEDGER

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?

As of 5 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 2 inbound Pith citation observations for arXiv:2509.06350.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2509.06350 v2

Coverage vector

measured 36 of 36 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-04T23:49:35.105478Z

measured 38 of 38 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-05T06:32:48.257954+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-06-28T01:16:07.252429Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-07-02T13:26:59.235537Z

Reference resolution

36 of 36 outbound references displayed

verified exact6
verified fuzzy1
unresolved29
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation aa51d40e-c465-4cb2-b745-a06239e897e6 · outbound

This paper cites , " * write output.state after.block = add.period write newline.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? , " * write output.state after.block = add.period write newline

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:30.190943Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7e36d0d4-6a70-4846-b64c-37e56941607c · outbound

This paper cites write newline.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? write newline

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:30.364861Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 09206e93-c3dc-439c-98fc-d2b088e49426 · outbound

This paper cites Impact of the Hubble tension on the $r$-$n_s$ contour.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Impact of the Hubble tension on the $r$-$n_s$ contour

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:30.535335Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a4de695e-1a9d-49dd-b8c6-c65e1574ee04 · outbound

This paper cites Y.; and Furlotte, N.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Y.; and Furlotte, N

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-08-04T23:49:40.364587Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 729a4d6a-fdd1-4874-8a2c-428ae43a4626 · outbound

This paper cites Language Models are Few-Shot Learners.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Language Models are Few-Shot Learners

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:30.812438Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 16ce4e93-a64d-458d-85b8-1e1609d953d9 · outbound

This paper cites A Survey on Evaluation of Large Language Models.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? A Survey on Evaluation of Large Language Models

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:30.928316Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 22544567-450a-40b2-898b-ce14e6e5183c · outbound

This paper cites LongLLMLingua: Accelerating and Enhancing LLMs in Long Context Scenarios via Prompt Compression.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? LongLLMLingua: Accelerating and Enhancing LLMs in Long Context Scenarios via Prompt Compression

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:31.086098Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0f8d20c9-6c59-42ba-8322-c14424ea7fa2 · outbound

This paper cites LongLoRA: Efficient Fine-tuning of Long-Context Large Language Models.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? LongLoRA: Efficient Fine-tuning of Long-Context Large Language Models

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:31.173708Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 330f9e95-5436-43a7-b5ee-c782ad1dc548 · outbound

This paper cites Social Robot Mediator for Multiparty Interaction.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Social Robot Mediator for Multiparty Interaction

Reference 9

Resolution: verified exact; local_arxiv, observed 2026-08-04T23:49:37.712551Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 9f55f3e6-6714-4b57-9ed6-aba9cd365ab5 · outbound

This paper cites an unresolved cited work.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Unresolved cited work

Reference 10

Resolution: unresolved; raw_fallback, observed 2026-08-04T23:49:39.856141Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 1707c030-0716-4eea-97fc-733090aa6ecd · outbound

This paper cites Unnatural Languages Are Not Bugs but Features for LLMs.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Unnatural Languages Are Not Bugs but Features for LLMs

Reference 11

Resolution: verified exact; local_arxiv, observed 2026-08-04T23:49:37.303507Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 62547fea-8ced-4d29-841b-d60c1858a6bf · outbound

This paper cites an unresolved cited work.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Unresolved cited work

Reference 12

Resolution: unresolved; raw_fallback, observed 2026-08-04T23:49:39.664750Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation c8f9f358-d955-405e-ab36-5608e21c63bd · outbound

This paper cites an unresolved cited work.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Unresolved cited work

Reference 13

Resolution: unresolved; raw_fallback, observed 2026-08-04T23:49:39.345907Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation e212b26f-8e30-49ac-9c05-5609c0488114 · outbound

This paper cites Improved Techniques for Optimization-Based Jailbreaking on Large Language Models.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Improved Techniques for Optimization-Based Jailbreaking on Large Language Models

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:31.864821Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a4538ae3-ee10-4b8c-852c-47c8fdaa85fe · outbound

This paper cites Faster-GCG: Efficient Discrete Optimization Jailbreak Attacks against Aligned Large Language Models.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Faster-GCG: Efficient Discrete Optimization Jailbreak Attacks against Aligned Large Language Models

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:32.025844Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 32282921-3021-4a1c-be64-ead27ebb3a45 · outbound

This paper cites emucxl: an emulation framework for CXL-based disaggregated memory applications.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? emucxl: an emulation framework for CXL-based disaggregated memory applications

Reference 16

Resolution: verified exact; local_arxiv, observed 2026-08-04T23:49:36.886665Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation d8e032d7-e3d4-4f06-90b2-45d5c8c28634 · outbound

This paper cites Stone Needle: A General Multimodal Large-scale Model Framework towards Healthcare.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Stone Needle: A General Multimodal Large-scale Model Framework towards Healthcare

Reference 17

Resolution: verified exact; local_arxiv, observed 2026-08-04T23:49:36.464327Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation a3668094-9e16-4b0f-b3c8-520a3a3673ab · outbound

This paper cites Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformer.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformer

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:32.715283Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a7b6d9b3-1770-4955-966f-1ff062a0da16 · outbound

This paper cites A Primer in BERTology: What we know about how BERT works.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? A Primer in BERTology: What we know about how BERT works

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:32.844886Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8ead4090-a04e-4443-bb24-2576221b5893 · outbound

This paper cites LLaMA: Open and Efficient Foundation Language Models.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? LLaMA: Open and Efficient Foundation Language Models

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:33.034747Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6c994ed2-b110-4413-872c-248d9ce14731 · outbound

This paper cites Manipulating Multimodal Agents via Cross-Modal Prompt Injection.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Manipulating Multimodal Agents via Cross-Modal Prompt Injection

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:33.164739Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3e71d8da-56ed-4021-b36d-092366adddfe · outbound

This paper cites an unresolved cited work.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Unresolved cited work

Reference 22

Resolution: unresolved; raw_fallback, observed 2026-08-04T23:49:39.080621Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation d14b7c7f-dc40-47a1-91cf-032f858f7c24 · outbound

This paper cites Equivariant Neural Simulators for Stochastic Spatiotemporal Dynamics.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Equivariant Neural Simulators for Stochastic Spatiotemporal Dynamics

Reference 23

Resolution: verified exact; local_arxiv, observed 2026-08-04T23:49:35.913519Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 6f9d33de-3907-4cc7-bea3-49308d3b109b · outbound

This paper cites SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:33.590413Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0b4a2640-5866-435d-9472-74c91a4ae105 · outbound

This paper cites an unresolved cited work.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Unresolved cited work

Reference 25

Resolution: unresolved; raw_fallback, observed 2026-08-04T23:49:38.829740Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 1137c4b8-ff53-42c2-b937-bf7d4bfe7f94 · outbound

This paper cites an unresolved cited work.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Unresolved cited work

Reference 26

Resolution: unresolved; raw_fallback, observed 2026-08-04T23:49:38.434749Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation b2dd0e0d-836d-4df8-9192-b94b235f7935 · outbound

This paper cites an unresolved cited work.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Unresolved cited work

Reference 27

Resolution: unresolved; raw_fallback, observed 2026-08-04T23:49:38.176435Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 6192e4c4-7169-4b8a-a793-ee68d0708d74 · outbound

This paper cites Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:34.007406Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 092c07a6-0209-4253-b96a-1ab344e9593d · outbound

This paper cites Towards Understanding the Safety Boundaries of DeepSeek Models: Evaluation and Findings.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Towards Understanding the Safety Boundaries of DeepSeek Models: Evaluation and Findings

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:34.110574Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e39c9d4d-7e9e-409b-ab22-01ea1c9a6625 · outbound

This paper cites Performance Portable Monte Carlo Particle Transport on Intel, NVIDIA, and AMD GPUs.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Performance Portable Monte Carlo Particle Transport on Intel, NVIDIA, and AMD GPUs

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:34.202460Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 01cfcb7a-1a99-4e96-a390-b424a194a186 · outbound

This paper cites Boosting Jailbreak Attack with Momentum.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Boosting Jailbreak Attack with Momentum

Reference 31

Resolution: verified exact; local_arxiv, observed 2026-08-04T23:49:35.611126Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 75d5e268-bd1b-4aa7-a9af-b68d95812e47 · outbound

This paper cites A Survey of Large Language Models.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? A Survey of Large Language Models

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:34.550242Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7233c499-1f38-4026-973e-5363cb70c3e5 · outbound

This paper cites Accelerating Greedy Coordinate Gradient and General Prompt Optimization via Probe Sampling.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Accelerating Greedy Coordinate Gradient and General Prompt Optimization via Probe Sampling

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:34.687283Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e8de947b-8b25-4cb3-871d-ecce4390806c · outbound

This paper cites Judging LLM-as-a-Judge with MT-Bench and Chatbot Arena.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Judging LLM-as-a-Judge with MT-Bench and Chatbot Arena

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:34.834441Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0bc0acdb-c669-4004-98c1-3c25790a6fcb · outbound

This paper cites PoSE: Efficient Context Window Extension of LLMs via Positional Skip-wise Training.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? PoSE: Efficient Context Window Extension of LLMs via Positional Skip-wise Training

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:35.026746Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3de6eace-19db-48d0-a228-3fccc8d9d638 · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks? Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-04T23:49:35.105478Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation f14962bb-d1b9-426c-855d-573156118ba3 · inbound

SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents cites this paper.

SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?

Reference 30

Resolution: verified exact; arxiv_id, observed 2026-05-28T02:04:09.776894Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 2b20212b-4671-41a4-885b-a21bb9a1148a · inbound

SlotGCG: Exploiting the Positional Vulnerability in LLMs for Jailbreak Attacks cites this paper.

SlotGCG: Exploiting the Positional Vulnerability in LLMs for Jailbreak Attacks Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?

Reference 65

Resolution: metadata mismatch; local_arxiv, observed 2026-07-02T13:26:59.236770Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.