{"as_of":"2026-08-05T20:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:358f8d2a7d666d3d4bf26a7a32dc29e4a92d739e9b2c24724e7ca886200919c2","coverage":[{"denominator":36,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":36,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T23:49:35.105478Z","state":"measured"},{"denominator":38,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":38,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-28T01:16:07.252429Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-02T13:26:59.235537Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"cited_work":{"arxiv_id":"2509.06350","doi":null,"metadata_source":"pith","pith_arxiv_id":"2509.06350","snapshot_observed_at":"2026-07-02T13:26:59.235537Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","venue":"cs.CL","work_id":"04b40e87-5ec9-4c41-a4c2-d0418b62584c","year":2025},"citing_paper":{"arxiv_id":"2510.10073","last_updated":"2026-04-14T02:53:37Z","snapshot_observed_at":"2026-07-06T22:32:22.953630Z","submitted_at":"2025-10-11T07:18:12Z","title":"SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-18T08:14:51.102085Z"},"links":{"cited_paper":"/paper/2509.06350","citing_paper":"/paper/2510.10073"},"observation_digest":"sha256:884d3475dcd61f9b21456d5db6a3b3f08a490e54e598747d7a4708ca722988b9","observation_id":"f14962bb-d1b9-426c-855d-573156118ba3","resolution":{"observed_at":"2026-05-28T02:04:09.776894Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"cited_work":{"arxiv_id":"2509.06350","doi":null,"metadata_source":"pith","pith_arxiv_id":"2509.06350","snapshot_observed_at":"2026-07-02T13:26:59.235537Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","venue":"cs.CL","work_id":"04b40e87-5ec9-4c41-a4c2-d0418b62584c","year":2025},"citing_paper":{"arxiv_id":"2606.05609","last_updated":"2026-06-04T02:31:29Z","snapshot_observed_at":"2026-08-05T14:48:48.513078Z","submitted_at":"2026-06-04T02:31:29Z","title":"SlotGCG: Exploiting the Positional Vulnerability in LLMs for Jailbreak Attacks","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-06-28T01:16:07.252429Z"},"links":{"cited_paper":"/paper/2509.06350","citing_paper":"/paper/2606.05609"},"observation_digest":"sha256:a6052e3a3890a69caac263dc2bb46291b6bdf990e11e9017c75de27a3329077c","observation_id":"2b20212b-4671-41a4-885b-a21bb9a1148a","resolution":{"observed_at":"2026-07-02T13:26:59.236770Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2509.06350/citation-record","integrity":"/paper/2509.06350/integrity","json":"/paper/2509.06350/citation-record.json","paper":"/paper/2509.06350"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T23:49:30.190943Z","title":", \" * write output.state after.block = add.period write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:30.190943Z"},"links":{"citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:28cac8f9313c179dcee0084e5e51af6c0528a5f40c0f32d8e45bb547fe098a7a","observation_id":"aa51d40e-c465-4cb2-b745-a06239e897e6","resolution":{"observed_at":"2026-08-04T23:49:30.190943Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T23:49:30.364861Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:30.364861Z"},"links":{"citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:35824fd59f53de9b6fbb546aa6bd49a8d5484a7eda2307d553a2aebd451d4da5","observation_id":"7e36d0d4-6a70-4846-b64c-37e56941607c","resolution":{"observed_at":"2026-08-04T23:49:30.364861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.12345","last_updated":"2024-03-19T13:35:03Z","snapshot_observed_at":"2026-07-06T15:06:30.864553Z","submitted_at":"2023-03-22T07:09:29Z","title":"Impact of the Hubble tension on the $r$-$n_s$ contour","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.12345","snapshot_observed_at":"2026-08-04T23:49:30.535335Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:30.535335Z"},"links":{"cited_paper":"/paper/2303.12345","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:55044a01b0f8e6f4a20e85c84f72f36850a15ac6fe4d034a78e2780fed98d972","observation_id":"09206e93-c3dc-439c-98fc-d2b088e49426","resolution":{"observed_at":"2026-08-04T23:49:30.535335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T23:49:40.110117Z","title":"Y.; and Furlotte, N","venue":null,"work_id":"e73fda76-7a13-4c5a-bd87-e6f263c2b9ec","year":2023},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:30.666767Z"},"links":{"citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:461e36b9f57c9f7cc2a289da293e51ca1b8bf818cd20a050ea82d00f1c7155f6","observation_id":"a4de695e-1a9d-49dd-b8c6-c65e1574ee04","resolution":{"observed_at":"2026-08-04T23:49:40.364587Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2005.14165","last_updated":"2020-07-22T19:47:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-05-28T17:29:03Z","title":"Language Models are Few-Shot Learners","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.14165","snapshot_observed_at":"2026-08-04T23:49:30.812438Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:30.812438Z"},"links":{"cited_paper":"/paper/2005.14165","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:f9f6614dbef91019bb17488ac1c51823f1e92e5cb4735fa9318f220b6fc1186c","observation_id":"729a4d6a-fdd1-4874-8a2c-428ae43a4626","resolution":{"observed_at":"2026-08-04T23:49:30.812438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.03109","last_updated":"2023-12-29T02:12:03Z","snapshot_observed_at":"2026-08-05T13:54:21.157165Z","submitted_at":"2023-07-06T16:28:35Z","title":"A Survey on Evaluation of Large Language Models","version":9},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.03109","snapshot_observed_at":"2026-08-04T23:49:30.928316Z","title":"S.; Yang, Q.; and Xie, X","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:30.928316Z"},"links":{"cited_paper":"/paper/2307.03109","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:6ab1d93aa3ab1fd6aca70d3d42c976601e1c5ce71edcad578e25bb6e4357cfc1","observation_id":"16ce4e93-a64d-458d-85b8-1e1609d953d9","resolution":{"observed_at":"2026-08-04T23:49:30.928316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06839","last_updated":"2024-08-12T03:53:35Z","snapshot_observed_at":"2026-07-06T16:30:41.852589Z","submitted_at":"2023-10-10T17:59:58Z","title":"LongLLMLingua: Accelerating and Enhancing LLMs in Long Context Scenarios via Prompt Compression","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06839","snapshot_observed_at":"2026-08-04T23:49:31.086098Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:31.086098Z"},"links":{"cited_paper":"/paper/2310.06839","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:0cfed4b0ae4a4d5cd1bb8e1223b36f8196a6b0961085a440e076ad8fd6fe61db","observation_id":"22544567-450a-40b2-898b-ce14e6e5183c","resolution":{"observed_at":"2026-08-04T23:49:31.086098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.12307","last_updated":"2024-03-08T15:26:38Z","snapshot_observed_at":"2026-07-06T16:21:57.649550Z","submitted_at":"2023-09-21T17:59:11Z","title":"LongLoRA: Efficient Fine-tuning of Long-Context Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.12307","snapshot_observed_at":"2026-08-04T23:49:31.173708Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:31.173708Z"},"links":{"cited_paper":"/paper/2309.12307","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:54d1a63cd7862ca9103e16bccff56001d62fd89cd381b7c967f734727e19bfb6","observation_id":"0f8d20c9-6c59-42ba-8322-c14424ea7fa2","resolution":{"observed_at":"2026-08-04T23:49:31.173708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.13508","last_updated":"2023-10-20T13:53:11Z","snapshot_observed_at":"2026-08-05T13:47:03.487084Z","submitted_at":"2023-10-20T13:53:11Z","title":"Social Robot Mediator for Multiparty Interaction","version":1},"cited_work":{"arxiv_id":"2310.13508","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.13508","snapshot_observed_at":"2026-08-04T23:49:37.597457Z","title":"Social Robot Mediator for Multiparty Interaction","venue":"cs.RO","work_id":"9691f33f-0071-4198-932c-b5a16d348d41","year":2023},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:31.294489Z"},"links":{"cited_paper":"/paper/2310.13508","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:6c791fc9d262c3a0b942ba3e2fb460dec2f62848310b0f818184186f78f66962","observation_id":"330f9e95-5436-43a7-b5ee-c782ad1dc548","resolution":{"observed_at":"2026-08-04T23:49:37.712551Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T23:49:39.798211Z","title":null,"venue":null,"work_id":"57a13290-272c-492d-9382-9340eacc3cc3","year":2022},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:31.414744Z"},"links":{"citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:e9840e80a0874f5f4d5adb8d42ddc5ef1c6a027a875d1a6bb7afd803573a9635","observation_id":"9f55f3e6-6714-4b57-9ed6-aba9cd365ab5","resolution":{"observed_at":"2026-08-04T23:49:39.856141Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.01926","last_updated":"2025-06-03T08:19:31Z","snapshot_observed_at":"2026-08-05T13:47:03.105968Z","submitted_at":"2025-03-02T12:10:17Z","title":"Unnatural Languages Are Not Bugs but Features for LLMs","version":2},"cited_work":{"arxiv_id":"2503.01926","doi":null,"metadata_source":"pith","pith_arxiv_id":"2503.01926","snapshot_observed_at":"2026-08-04T23:49:37.160258Z","title":"Unnatural Languages Are Not Bugs but Features for LLMs","venue":"cs.CL","work_id":"827d7795-98eb-49bb-b559-576d32ad8d8e","year":2025},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:31.494734Z"},"links":{"cited_paper":"/paper/2503.01926","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:ce58917618613e8c8fb416a9c924b6d3ed6fbb016d9c1fa94536e1270fbff08a","observation_id":"1707c030-0716-4eea-97fc-733090aa6ecd","resolution":{"observed_at":"2026-08-04T23:49:37.303507Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T23:49:39.505864Z","title":null,"venue":null,"work_id":"cd00ff0a-adb5-4005-91db-5d4139aa3f5d","year":2022},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:31.604822Z"},"links":{"citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:9591a7d4542f114509a127d46a4558ea44c6ef444b8add190235eef011596cd7","observation_id":"62547fea-8ced-4d29-841b-d60c1858a6bf","resolution":{"observed_at":"2026-08-04T23:49:39.664750Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T23:49:39.210703Z","title":null,"venue":null,"work_id":"977cda7e-2e7b-4cde-a3a0-4a78f131c361","year":2025},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:31.681444Z"},"links":{"citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:c1b074804c1682b4579bf869b6618a1c3614c0ce80281cd9e185bdb06bd811b6","observation_id":"c8f9f358-d955-405e-ab36-5608e21c63bd","resolution":{"observed_at":"2026-08-04T23:49:39.345907Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.21018","last_updated":"2024-06-05T16:35:49Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T17:07:15Z","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.21018","snapshot_observed_at":"2026-08-04T23:49:31.864821Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:31.864821Z"},"links":{"cited_paper":"/paper/2405.21018","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:257f505e387d47367b39cefd39186447f1a9e3f41b9e8cfa36a04f6b62b1f978","observation_id":"e212b26f-8e30-49ac-9c05-5609c0488114","resolution":{"observed_at":"2026-08-04T23:49:31.864821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15362","last_updated":"2026-05-19T04:19:17Z","snapshot_observed_at":"2026-07-06T19:36:36.994783Z","submitted_at":"2024-10-20T11:27:41Z","title":"Faster-GCG: Efficient Discrete Optimization Jailbreak Attacks against Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.15362","snapshot_observed_at":"2026-08-04T23:49:32.025844Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:32.025844Z"},"links":{"cited_paper":"/paper/2410.15362","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:2d3c9ac68730e1d43a7c0622cf4ca5670632da0fcaf48c61985562880c56a839","observation_id":"a4538ae3-ee10-4b8c-852c-47c8fdaa85fe","resolution":{"observed_at":"2026-08-04T23:49:32.025844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.08311","last_updated":"2024-04-12T08:11:45Z","snapshot_observed_at":"2026-08-05T13:47:01.825180Z","submitted_at":"2024-04-12T08:11:45Z","title":"emucxl: an emulation framework for CXL-based disaggregated memory applications","version":1},"cited_work":{"arxiv_id":"2404.08311","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.08311","snapshot_observed_at":"2026-08-04T23:49:36.774753Z","title":"emucxl: an emulation framework for CXL-based disaggregated memory applications","venue":"cs.DC","work_id":"70766415-07ed-4f1d-92d7-949c46433e34","year":2024},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:32.214267Z"},"links":{"cited_paper":"/paper/2404.08311","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:6d128241bfc0dacd06f3f324530980354ec7cdeb35bcd771e45b9972732069bf","observation_id":"32282921-3021-4a1c-be64-ead27ebb3a45","resolution":{"observed_at":"2026-08-04T23:49:36.886665Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.16034","last_updated":"2023-06-28T09:04:56Z","snapshot_observed_at":"2026-08-05T13:47:11.663287Z","submitted_at":"2023-06-28T09:04:56Z","title":"Stone Needle: A General Multimodal Large-scale Model Framework towards Healthcare","version":1},"cited_work":{"arxiv_id":"2306.16034","doi":null,"metadata_source":"pith","pith_arxiv_id":"2306.16034","snapshot_observed_at":"2026-08-04T23:49:36.309778Z","title":"Stone Needle: A General Multimodal Large-scale Model Framework towards Healthcare","venue":"cs.AI","work_id":"961cb756-6c5b-44d7-9290-254f8b8e19d1","year":2023},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:32.471476Z"},"links":{"cited_paper":"/paper/2306.16034","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:5d001ad5d9223c0468a527bf26bcefcd455802fd60df4275dd1465ba10117f59","observation_id":"d8e032d7-e3d4-4f06-90b2-45d5c8c28634","resolution":{"observed_at":"2026-08-04T23:49:36.464327Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1910.10683","last_updated":"2023-09-19T15:14:48Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2019-10-23T17:37:36Z","title":"Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformer","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.10683","snapshot_observed_at":"2026-08-04T23:49:32.715283Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:32.715283Z"},"links":{"cited_paper":"/paper/1910.10683","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:56e9195223d79cb0b5dbee2fd960eb49be5e6829a66ff2151ad00091682c968f","observation_id":"a3668094-9e16-4b0f-b3c8-520a3a3673ab","resolution":{"observed_at":"2026-08-04T23:49:32.715283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2002.12327","last_updated":"2020-11-09T15:33:50Z","snapshot_observed_at":"2026-07-06T09:00:43.755186Z","submitted_at":"2020-02-27T18:46:42Z","title":"A Primer in BERTology: What we know about how BERT works","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.12327","snapshot_observed_at":"2026-08-04T23:49:32.844886Z","title":"R.; Mańke, W.; Liu, H.; Dai, Z.; Shazeer, N.; and Le, Q","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:32.844886Z"},"links":{"cited_paper":"/paper/2002.12327","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:46b04e03e99c44993ef01e975d1bb58688ba0509a3518c22e18f297f0efa72fa","observation_id":"a7b6d9b3-1770-4955-966f-1ff062a0da16","resolution":{"observed_at":"2026-08-04T23:49:32.844886Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-04T23:49:33.034747Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:33.034747Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:b761119ead48949c191ed5be3ce11f4d109cbd62c20b90819209a310644bc8d7","observation_id":"8ead4090-a04e-4443-bb24-2576221b5893","resolution":{"observed_at":"2026-08-04T23:49:33.034747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-07-06T21:11:58.671097Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-04T23:49:33.164739Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:33.164739Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:0caf2aa0cb24c657a3803052a6bc4d67829aae64f3ca44a5a1e314eddb40e0d2","observation_id":"6c994ed2-b110-4413-872c-248d9ce14731","resolution":{"observed_at":"2026-08-04T23:49:33.164739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T23:49:38.943752Z","title":null,"venue":null,"work_id":"73d8415a-f552-41c5-bc09-2509a633f9ec","year":2023},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:33.304741Z"},"links":{"citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:607fa57bb4665454b73626baa72a2dbc6e0477684e5e135813a5a9577fb484cb","observation_id":"3e71d8da-56ed-4021-b36d-092366adddfe","resolution":{"observed_at":"2026-08-04T23:49:39.080621Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14286","last_updated":"2024-09-13T08:59:47Z","snapshot_observed_at":"2026-08-05T13:47:04.535489Z","submitted_at":"2023-05-23T17:30:10Z","title":"Equivariant Neural Simulators for Stochastic Spatiotemporal Dynamics","version":3},"cited_work":{"arxiv_id":"2305.14286","doi":null,"metadata_source":"pith","pith_arxiv_id":"2305.14286","snapshot_observed_at":"2026-08-04T23:49:35.813316Z","title":"Equivariant Neural Simulators for Stochastic Spatiotemporal Dynamics","venue":"cs.LG","work_id":"7e7a92d9-121a-4f83-a73d-142426029490","year":2023},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:33.418921Z"},"links":{"cited_paper":"/paper/2305.14286","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:780f141600677251a243f44e35d22f7ac83d96ff4cbb26aebbf1de74a6742cfa","observation_id":"d14b7c7f-dc40-47a1-91cf-032f858f7c24","resolution":{"observed_at":"2026-08-04T23:49:35.913519Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.18927","last_updated":"2024-10-24T17:14:40Z","snapshot_observed_at":"2026-07-06T19:39:15.025945Z","submitted_at":"2024-10-24T17:14:40Z","title":"SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.18927","snapshot_observed_at":"2026-08-04T23:49:33.590413Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:33.590413Z"},"links":{"cited_paper":"/paper/2410.18927","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:5193c306748671f91260ba5cc6bda4d2c9d67913c9ebcf7a7e18a2e354bfede2","observation_id":"6f9d33de-3907-4cc7-bea3-49308d3b109b","resolution":{"observed_at":"2026-08-04T23:49:33.590413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T23:49:38.633515Z","title":null,"venue":null,"work_id":"9311e1c0-d7aa-4891-8de0-6ebff2a4b02d","year":2025},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:33.698707Z"},"links":{"citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:237ad660ee4001b99010dbf4fdb683c601e69d4e2fea9579760676cf18c56f64","observation_id":"0b4a2640-5866-435d-9472-74c91a4ae105","resolution":{"observed_at":"2026-08-04T23:49:38.829740Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T23:49:38.307537Z","title":null,"venue":null,"work_id":"05414a7e-7c31-4bd1-b1bb-8b8fb6dab9ad","year":2023},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:33.790322Z"},"links":{"citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:d68d3aa24cfa1401f46d9c77d0e2d33bbad24447a7edade40f92e3ba1b0282db","observation_id":"1137c4b8-ff53-42c2-b937-bf7d4bfe7f94","resolution":{"observed_at":"2026-08-04T23:49:38.434749Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T23:49:38.063650Z","title":null,"venue":null,"work_id":"5dac5e64-fc6b-49d4-8fd6-a86433d22c54","year":2023},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:33.887060Z"},"links":{"citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:f9c58780c0972b2e55fbc508a45764785a7ca6e0d27c40e49fb57eb8a6ad4be2","observation_id":"b2dd0e0d-836d-4df8-9192-b94b235f7935","resolution":{"observed_at":"2026-08-04T23:49:38.176435Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-08-04T23:49:34.007406Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:34.007406Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:50b721a97587307d3f3145c3cfc29f9fdb4b2ce6769ebf8f92eccf792c7b3065","observation_id":"6192e4c4-7169-4b8a-a793-ee68d0708d74","resolution":{"observed_at":"2026-08-04T23:49:34.007406Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.15092","last_updated":"2025-03-19T10:44:37Z","snapshot_observed_at":"2026-08-03T20:15:51.813763Z","submitted_at":"2025-03-19T10:44:37Z","title":"Towards Understanding the Safety Boundaries of DeepSeek Models: Evaluation and Findings","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.15092","snapshot_observed_at":"2026-08-04T23:49:34.110574Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:34.110574Z"},"links":{"cited_paper":"/paper/2503.15092","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:afe4a77073967fea400af896d33fc41af21b6e52a3109f00a2c84e782b6cd9db","observation_id":"092c07a6-0209-4253-b96a-1ab344e9593d","resolution":{"observed_at":"2026-08-04T23:49:34.110574Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.12345","last_updated":"2024-03-19T01:28:01Z","snapshot_observed_at":"2026-08-02T00:43:38.021160Z","submitted_at":"2024-03-19T01:28:01Z","title":"Performance Portable Monte Carlo Particle Transport on Intel, NVIDIA, and AMD GPUs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.12345","snapshot_observed_at":"2026-08-04T23:49:34.202460Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:34.202460Z"},"links":{"cited_paper":"/paper/2403.12345","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:d870e54efeb5611236732254a94561040c1da5cd790763895450c6f85c8e42a6","observation_id":"e39c9d4d-7e9e-409b-ab22-01ea1c9a6625","resolution":{"observed_at":"2026-08-04T23:49:34.202460Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.01229","last_updated":"2025-03-02T12:27:07Z","snapshot_observed_at":"2026-07-06T18:08:43.280741Z","submitted_at":"2024-05-02T12:18:14Z","title":"Boosting Jailbreak Attack with Momentum","version":2},"cited_work":{"arxiv_id":"2405.01229","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.01229","snapshot_observed_at":"2026-08-04T23:49:35.381416Z","title":"Boosting Jailbreak Attack with Momentum","venue":"cs.LG","work_id":"f5e55629-1fe1-4d1c-b230-b5fe00ae839f","year":2024},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:34.337808Z"},"links":{"cited_paper":"/paper/2405.01229","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:39c1d018e0ea6dcb90dbaf0a04d4a3edeb9476e4a4630b82044ca3cbfecdd4c7","observation_id":"01cfcb7a-1a99-4e96-a390-b424a194a186","resolution":{"observed_at":"2026-08-04T23:49:35.611126Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.18223","last_updated":"2026-03-18T05:34:39Z","snapshot_observed_at":"2026-08-05T19:47:26.061830Z","submitted_at":"2023-03-31T17:28:46Z","title":"A Survey of Large Language Models","version":19},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.18223","snapshot_observed_at":"2026-08-04T23:49:34.550242Z","title":"X.; Zhou, K.; Li, J.; Tang, T.; Zhang, X.; Chen, Y.; Shao, Y.; Dong, Z.; Wu, Y.; Zhang, J.; and Wei, F","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:34.550242Z"},"links":{"cited_paper":"/paper/2303.18223","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:7fe986e4c0a8b57e2a15c40649d96dddf87ba67906c1bff459bfafccc6c7f341","observation_id":"75d5e268-bd1b-4aa7-a9af-b68d95812e47","resolution":{"observed_at":"2026-08-04T23:49:34.550242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.01251","last_updated":"2024-11-08T06:07:51Z","snapshot_observed_at":"2026-07-06T17:38:38.108579Z","submitted_at":"2024-03-02T16:23:44Z","title":"Accelerating Greedy Coordinate Gradient and General Prompt Optimization via Probe Sampling","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.01251","snapshot_observed_at":"2026-08-04T23:49:34.687283Z","title":"L.; Kawaguchi, K.; Goyal, A.; and Shieh, M","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:34.687283Z"},"links":{"cited_paper":"/paper/2403.01251","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:a376c236ff2c54d5b634347fb0da3be2505c5b2dab29bfe22b87028ba58f9dc3","observation_id":"7233c499-1f38-4026-973e-5363cb70c3e5","resolution":{"observed_at":"2026-08-04T23:49:34.687283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05685","last_updated":"2023-12-24T02:01:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-06-09T05:55:52Z","title":"Judging LLM-as-a-Judge with MT-Bench and Chatbot Arena","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05685","snapshot_observed_at":"2026-08-04T23:49:34.834441Z","title":"P.; Zhang, H.; Gonzalez, J","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:34.834441Z"},"links":{"cited_paper":"/paper/2306.05685","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:c798f010c6d3b3d8ac0cfb62726c4bb6449ad575e9d9a177748cb241c818846d","observation_id":"e8de947b-8b25-4cb3-871d-ecce4390806c","resolution":{"observed_at":"2026-08-04T23:49:34.834441Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10400","last_updated":"2024-02-21T13:37:07Z","snapshot_observed_at":"2026-08-02T07:16:04.509348Z","submitted_at":"2023-09-19T08:03:38Z","title":"PoSE: Efficient Context Window Extension of LLMs via Positional Skip-wise Training","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10400","snapshot_observed_at":"2026-08-04T23:49:35.026746Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:35.026746Z"},"links":{"cited_paper":"/paper/2309.10400","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:d88127891f6b5f5ddadddbf1dc1d5de109cc8c2ec5dfc9aa31eb5e2501990b10","observation_id":"0bc0acdb-c669-4004-98c1-3c25790a6fcb","resolution":{"observed_at":"2026-08-04T23:49:35.026746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-04T23:49:35.105478Z","title":"Z.; and Fredrikson, M","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-04T23:49:35.105478Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2509.06350"},"observation_digest":"sha256:f914f0e9693522e286a61f55facaeaca9e4c12ada2c531e3e5f9ad8b83a7a94f","observation_id":"3de6eace-19db-48d0-a228-3fccc8d9d638","resolution":{"observed_at":"2026-08-04T23:49:35.105478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.06350","last_updated":"2026-01-27T23:14:36Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-04T23:49:28.733609Z","submitted_at":"2025-09-08T05:45:37Z","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?"},"reference_resolution":{"displayed":36,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":29,"verified_exact":6,"verified_fuzzy":1},"total_outbound_references":36},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 2 inbound Pith citation observations for arXiv:2509.06350."}