{"as_of":"2026-08-09T20:34:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:434e0f017004bc86114fba6c40dff2564982f59336c922b7024a824d89270b71","coverage":[{"denominator":57,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":57,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T10:22:09.891717Z","state":"measured"},{"denominator":57,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":57,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2510.10271/citation-record","integrity":"/paper/2510.10271/integrity","json":"/paper/2510.10271/citation-record.json","paper":"/paper/2510.10271"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:03.574802Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:03.574802Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:09ee2295bfa7d42447705f9bb32d3834c25f649fbf8dccde5340e35ec6157c60","observation_id":"728944a9-36b5-42bf-8dcf-6d9781201f0d","resolution":{"observed_at":"2026-08-04T10:22:03.574802Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:03.743142Z","title":"Claude language model","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:03.743142Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:1e445dc9846eabdc8ee9e4e2a6a09891d9247554cd5944c814ac7cf5d3f229ad","observation_id":"f9afef46-94c6-439b-a238-efa59ab9e450","resolution":{"observed_at":"2026-08-04T10:22:03.743142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.05862","last_updated":"2022-04-12T15:02:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-12T15:02:38Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.05862","snapshot_observed_at":"2026-08-04T10:22:03.851082Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:03.851082Z"},"links":{"cited_paper":"/paper/2204.05862","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:b1be4097186499cdd358af0dd8d19ef36d4fa8073d9eece06b02cffdec950697","observation_id":"e6e35ae6-f758-4df9-9232-1737f71fd795","resolution":{"observed_at":"2026-08-04T10:22:03.851082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:03.951929Z","title":"Brown, B","venue":null,"work_id":null,"year":1901},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:03.951929Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:652155b25b1e27fe5f6dd6fa3a18fd4d06e27b9edd9d09b67b1c1ea958cae6c7","observation_id":"157e5ea5-58f2-4249-9d86-3801510b2d1c","resolution":{"observed_at":"2026-08-04T10:22:03.951929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.12712","last_updated":"2023-04-13T20:41:31Z","snapshot_observed_at":"2026-08-03T04:49:15.195814Z","submitted_at":"2023-03-22T16:51:28Z","title":"Sparks of Artificial General Intelligence: Early experiments with GPT-4","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.12712","snapshot_observed_at":"2026-08-04T10:22:04.039919Z","title":"Bubeck, V","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:04.039919Z"},"links":{"cited_paper":"/paper/2303.12712","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:a4177a00f6c9aff29bd697cd90f664e2990c7daff3a97ead9b6f2ac27a577726","observation_id":"d6bd7700-fd23-4a3b-90b9-e5313f27d944","resolution":{"observed_at":"2026-08-04T10:22:04.039919Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:04.186542Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:04.186542Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:21f9b6118ba9c6869b19b10895cfe645ae77158e907afb69febbaadf3e7a5bb2","observation_id":"e5a51e44-660e-4dca-8c73-cc93bccc1bb9","resolution":{"observed_at":"2026-08-04T10:22:04.186542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.10414","last_updated":"2024-11-15T18:34:07Z","snapshot_observed_at":"2026-08-06T19:21:24.933454Z","submitted_at":"2024-11-15T18:34:07Z","title":"Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.10414","snapshot_observed_at":"2026-08-04T10:22:04.265393Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:04.265393Z"},"links":{"cited_paper":"/paper/2411.10414","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:05269ffe76aa29d08e5e37d0245a10e47e711add5d76d5fc91231be8702b2d4c","observation_id":"a441a9e7-6922-4492-8447-1f81cf1845f1","resolution":{"observed_at":"2026-08-04T10:22:04.265393Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:04.400005Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:04.400005Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:2c4e4091a9e276a8a74c94fe172cad023f4415e7b4fbeb14fe69339264488144","observation_id":"71b6b507-8827-4a4b-89e5-17446252900a","resolution":{"observed_at":"2026-08-04T10:22:04.400005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.04805","last_updated":"2019-05-24T20:37:26Z","snapshot_observed_at":"2026-07-30T09:12:38.100527Z","submitted_at":"2018-10-11T00:50:01Z","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.04805","snapshot_observed_at":"2026-08-04T10:22:04.530244Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:04.530244Z"},"links":{"cited_paper":"/paper/1810.04805","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:393943dbfa17531e2f97571a5685b2f74605d4469addeea00f580b94949fcdbd","observation_id":"d4d3a143-1659-417a-8ea1-5d431b77529c","resolution":{"observed_at":"2026-08-04T10:22:04.530244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.17713","last_updated":"2024-11-18T21:42:17Z","snapshot_observed_at":"2026-08-09T03:38:09.634763Z","submitted_at":"2024-11-18T21:42:17Z","title":"Llama Guard 3-1B-INT4: Compact and Efficient Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.17713","snapshot_observed_at":"2026-08-04T10:22:04.668209Z","title":"Fedorov, K","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:04.668209Z"},"links":{"cited_paper":"/paper/2411.17713","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:99e1a60a36effd7dad29ba3f7962690081fcb2f500f054c4f25ea264c751b41a","observation_id":"8a1409cd-e4e7-4cf8-b9a7-1e46bbcb643f","resolution":{"observed_at":"2026-08-04T10:22:04.668209Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:04.805345Z","title":"Greshake, S","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:04.805345Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:4b54bd95103bca45fc4c7fe4cc6ddd30728a4eb501f333c9fd550f9e54219a3a","observation_id":"c2515446-b1cf-410e-89d9-8fd85e5b33ef","resolution":{"observed_at":"2026-08-04T10:22:04.805345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06987","last_updated":"2023-10-10T20:15:54Z","snapshot_observed_at":"2026-07-06T16:30:46.321160Z","submitted_at":"2023-10-10T20:15:54Z","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06987","snapshot_observed_at":"2026-08-04T10:22:04.978108Z","title":"Huang, S","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:04.978108Z"},"links":{"cited_paper":"/paper/2310.06987","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:b13fa4ea0e1fce3309a22dc88db067149ed53f01c5b407f612b76dedc909218f","observation_id":"46fb75b0-dfa3-4aea-bacd-daacb0f7926c","resolution":{"observed_at":"2026-08-04T10:22:04.978108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:05.110225Z","title":"Chat templates","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:05.110225Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:52e122eed48b1dfaeee9eaf816bb0dddbcd3caf6831acc74c29ed089c6801d58","observation_id":"348ba7af-6484-45eb-9468-ea3bc8554beb","resolution":{"observed_at":"2026-08-04T10:22:05.110225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:05.201710Z","title":"Introducing transformers","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:05.201710Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:3a93771984b06143c057ca34795f6b1f01d606193fa1aa78a39b09d58974ef50","observation_id":"c4fe4e10-2fd5-4049-ac51-974d7ac8adc6","resolution":{"observed_at":"2026-08-04T10:22:05.201710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:05.287506Z","title":"Huggingchat","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:05.287506Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:bdcc5d393ad918d495e421540ac61f678ecc4ca4364d401e41eeb5bc20362aa5","observation_id":"1ea74fc1-7106-433e-849b-7252cbd7db0e","resolution":{"observed_at":"2026-08-04T10:22:05.287506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-04T10:22:05.360275Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:05.360275Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:284320561da99a665eb56c755905632dbee96408fccab9fb2ab59a812a3e8cea","observation_id":"f4b9f4cb-8330-4ac1-99e6-8dd5e00d27b8","resolution":{"observed_at":"2026-08-04T10:22:05.360275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:05.453896Z","title":"Jiang, Z","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:05.453896Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:51d8b459b587e4939135ddecf255817af0d2ba01c29ddc0f34b7c40a11962be1","observation_id":"7e082453-b2f1-4756-8b56-0ce023bac7d6","resolution":{"observed_at":"2026-08-04T10:22:05.453896Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11753","last_updated":"2024-06-07T17:35:17Z","snapshot_observed_at":"2026-07-06T17:31:58.268105Z","submitted_at":"2024-02-19T00:43:31Z","title":"ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11753","snapshot_observed_at":"2026-08-04T10:22:05.603724Z","title":"Jiang, Z","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:05.603724Z"},"links":{"cited_paper":"/paper/2402.11753","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:97785c0134611d073a040ed23a58d32c0300e28cc9cc9183122ffcfc67e7df26","observation_id":"cfecbc81-ccc4-4dec-8d15-d5ce61015361","resolution":{"observed_at":"2026-08-04T10:22:05.603724Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:05.684647Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:05.684647Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:4798af79174d35f52eea8f0c65595d44fac085251905dd066f695711035b9e74","observation_id":"61f754cf-153a-424c-ade3-a88610db584b","resolution":{"observed_at":"2026-08-04T10:22:05.684647Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:05.789203Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:05.789203Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:c43d30ee007624c396bcb35d42e36228b0d5de29f08c7d5b3ed899a67d0085b3","observation_id":"e1524ba1-1d12-4b1c-908e-477526af40ea","resolution":{"observed_at":"2026-08-04T10:22:05.789203Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-08-06T02:57:30.438059Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-08-04T10:22:05.891059Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:05.891059Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:1541707f6a7a31c93e877ebe17cd97bfb714583f48e19b913d04303467da6335","observation_id":"6d006d8b-99f8-4df9-b8d8-2013a75c1818","resolution":{"observed_at":"2026-08-04T10:22:05.891059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-04T10:22:06.011277Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:06.011277Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:983226d37c5ae43a6382ee15b70b198579faafa740580377b9d4a021d574c91c","observation_id":"35f62a36-f6d6-4b33-99c6-d55049917d54","resolution":{"observed_at":"2026-08-04T10:22:06.011277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-04T10:22:06.138849Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:06.138849Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:c61022fc78dd5770c05b3ad0252ad2c5e50b97792cc46741c579123385bb0183","observation_id":"4e2f4869-4c54-4cdb-94cd-19e859b3735e","resolution":{"observed_at":"2026-08-04T10:22:06.138849Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:06.213915Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:06.213915Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:6c3f2f020e80ffeb41a7f9667b0b15f9fa65f056e9b26afda02d8f44a542b742","observation_id":"19b534a4-6e5a-464e-a412-efbfac4a5edf","resolution":{"observed_at":"2026-08-04T10:22:06.213915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:06.308868Z","title":"Introducing llama guard 3","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:06.308868Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:88559efbc92a8d6fd8067b36d5b107bf2c7eceb32783800ed19cdf8b425aa6d1","observation_id":"d4472f6e-e681-4e12-b2cb-0b71e3568005","resolution":{"observed_at":"2026-08-04T10:22:06.308868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:06.432278Z","title":"Introducing prompt guard","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:06.432278Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:034d9bc08d9ea86531f93d248cf4ec1e0527261c4d8552571ce73367acc5d5da","observation_id":"b3c4c724-acda-410e-bc94-752afa465cd1","resolution":{"observed_at":"2026-08-04T10:22:06.432278Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:06.556109Z","title":"Chat markup language chatml","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:06.556109Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:863a2c4a5a3d06784e37b9285ed638e636d70fa455abac26e35547f75caadf06","observation_id":"77c11ab9-d157-41b4-826b-b86b277221f5","resolution":{"observed_at":"2026-08-04T10:22:06.556109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:06.630050Z","title":"About ollama","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:06.630050Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:0e857939e4acbf3cc263d486607eb27d78994b4d70007a8236ffdbb78848ca92","observation_id":"cb2dbc81-a199-41f3-8738-a90e501bfeba","resolution":{"observed_at":"2026-08-04T10:22:06.630050Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:06.732089Z","title":"Create chat completion","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:06.732089Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:8a584d9128f0e38e9b42fe7c83c7809185dce0bc7d0f3b479fd4b6e42f0691c2","observation_id":"7831d7a6-2ff1-497d-85c3-21cb5b7100d0","resolution":{"observed_at":"2026-08-04T10:22:06.732089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:06.900198Z","title":"Introducing chatgpt","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:06.900198Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:fc116b77e9c72b51051d082bbce507883995030196e6e5fceb54252adb935a94","observation_id":"f29fc3a7-a5f8-4b2f-987c-f87ea6264736","resolution":{"observed_at":"2026-08-04T10:22:06.900198Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:07.032122Z","title":"OpenAI Completion API","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:07.032122Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:c9f2151480b870c4ddf5bd721fec6bfc1db352cc74cee8b54a00a80eaf585f44","observation_id":"ec899d2c-5b3f-46a5-8ce6-90a60ab65db3","resolution":{"observed_at":"2026-08-04T10:22:07.032122Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-04T10:22:07.198025Z","title":"Gpt-4 technical report.ArXiv, abs/2303.08774, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:07.198025Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:16a200cc4baaec4cf9dee3d04cc939119aae2f3cb5f6adbf3a51582de25b96fb","observation_id":"4104159c-59e3-4346-a2db-d1a66c7ac68e","resolution":{"observed_at":"2026-08-04T10:22:07.198025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:07.338362Z","title":"Introducing chatml format","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:07.338362Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:99e93cdba41de8b32341dd8107f0bcb6132c0e565474f9d4ef8572f8aca83e7e","observation_id":"33d5d6ac-45d1-4114-b1e6-cc9ab44fa55f","resolution":{"observed_at":"2026-08-04T10:22:07.338362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:07.511872Z","title":"Ouyang, J","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:07.511872Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:d0ed163e9c3b6dd6fc238cc6e4989b8ea8e802a3499a0766b33a44d4fcf3cc7f","observation_id":"e1b23f83-349b-4a6f-a17a-29970c58fde1","resolution":{"observed_at":"2026-08-04T10:22:07.511872Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.03277","last_updated":"2023-04-06T17:58:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-06T17:58:09Z","title":"Instruction Tuning with GPT-4","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.03277","snapshot_observed_at":"2026-08-04T10:22:07.661544Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:07.661544Z"},"links":{"cited_paper":"/paper/2304.03277","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:cd58bbf2580bd7a51538ab8afea41b1334ea362f3e770fd9530a23f76caf12d2","observation_id":"a54cfb71-6784-4158-b501-c151656a00ed","resolution":{"observed_at":"2026-08-04T10:22:07.661544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-04T10:22:07.828867Z","title":"Perez and I","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:07.828867Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:31f09052418100b578f58408d0fea9baf28e213cbb51eddb281b9b02df242102","observation_id":"375a933e-c847-4516-b0d9-e9a1dfb28f56","resolution":{"observed_at":"2026-08-04T10:22:07.828867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:07.897318Z","title":"About poe","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:07.897318Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:1462d9e9af9ff0f2bc1af899e92f43fa64416bc659adf19763cc3732bfc25a6d","observation_id":"7411ff87-2dfe-4889-b9ac-1bc99832d9ba","resolution":{"observed_at":"2026-08-04T10:22:07.897318Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:07.976952Z","title":"Introducing pytorch","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:07.976952Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:c990ecd7c78044b0319d51522b184b0eecc8bce238a0f34ce7911f41c29f2aa8","observation_id":"e7c54e29-1fe3-41a6-b55e-63eeb0b820a7","resolution":{"observed_at":"2026-08-04T10:22:07.976952Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:08.121307Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:08.121307Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:79b6f728f3e2d3979fbff13106f389dcce27440e14ef98f010550826122129e6","observation_id":"642bc178-87cc-4a5e-a3b9-3c081a68670d","resolution":{"observed_at":"2026-08-04T10:22:08.121307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:08.239250Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:08.239250Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:96c8cc93c9b5da72f2f7516e1742f60196ed31d55d6b61cb5a20b8782ba9d548","observation_id":"76317485-b3cf-4915-baf9-b699272536e3","resolution":{"observed_at":"2026-08-04T10:22:08.239250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:08.327732Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:08.327732Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:9cb9ce03da5452cd25353178a3a27633ebdf2d91a104878b15055027bede3df4","observation_id":"85d1fb85-fe48-4d98-8455-c4839a531f2e","resolution":{"observed_at":"2026-08-04T10:22:08.327732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:08.395182Z","title":"Taori, I","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:08.395182Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:4ce3f9f19fdef003ddd89f1a823351f1fce8a4fd32ccfbf4cc5d92c2d4b9ec10","observation_id":"63cb829f-3c6f-4408-af7f-e579dd4ee02a","resolution":{"observed_at":"2026-08-04T10:22:08.395182Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-04T10:22:08.461117Z","title":"Touvron, L","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:08.461117Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:9ee6a10ec8e54a1bb275d92e8a1528389dcc19da9ea4352ecdd44cfcc070d8ee","observation_id":"b02a5e29-0ffb-44a5-bff0-e3c8e8b5626f","resolution":{"observed_at":"2026-08-04T10:22:08.461117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-04T10:22:08.545695Z","title":"Toyer, O","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:08.545695Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:a6aa729149198f9224ca381439bc786acd0b96dc4a7af9c07edd4651671cb5a1","observation_id":"78279eed-d985-4b15-8846-15b52593e725","resolution":{"observed_at":"2026-08-04T10:22:08.545695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:08.612733Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:08.612733Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:b7575b82078329cc22f97fb50fcc4d93ff26337a888016520085b4d75d6e1efb","observation_id":"c13538bb-38e7-4803-888f-7ed55f07d2a7","resolution":{"observed_at":"2026-08-04T10:22:08.612733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.10560","last_updated":"2023-05-25T23:50:07Z","snapshot_observed_at":"2026-07-06T14:33:11.945106Z","submitted_at":"2022-12-20T18:59:19Z","title":"Self-Instruct: Aligning Language Models with Self-Generated Instructions","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.10560","snapshot_observed_at":"2026-08-04T10:22:08.696120Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:08.696120Z"},"links":{"cited_paper":"/paper/2212.10560","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:4d48d442640a07a2f312046361579df6a3729a8cc4ae60829239e565c8c5d60e","observation_id":"6d4b181d-9f7d-423a-bdce-6fc637912ce1","resolution":{"observed_at":"2026-08-04T10:22:08.696120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.14598","last_updated":"2025-03-01T21:45:36Z","snapshot_observed_at":"2026-07-06T18:34:29.513732Z","submitted_at":"2024-06-20T17:56:07Z","title":"SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.14598","snapshot_observed_at":"2026-08-04T10:22:08.785775Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:08.785775Z"},"links":{"cited_paper":"/paper/2406.14598","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:7eb0c61fa6b5a5e97cdb325746dd8c89d883f8050ec7fbd398d08700ce99f69d","observation_id":"158347e9-6d12-4fe2-bbca-df8c4297d188","resolution":{"observed_at":"2026-08-04T10:22:08.785775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:08.875820Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:08.875820Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:21c551d020e7c0377d5c7ae8083e443f2b4e51c4270b565f4a8ba09aedf505ef","observation_id":"bdd2357e-03ef-4e8f-b96c-871eaca5bcf3","resolution":{"observed_at":"2026-08-04T10:22:08.875820Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-04T10:22:08.950776Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:08.950776Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:cc218204a38853993032d0b2f0f514313d3d85ca154a835bc8b7293fd60251f3","observation_id":"7365ede4-3072-49fb-a459-9afcc30186b9","resolution":{"observed_at":"2026-08-04T10:22:08.950776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21772","last_updated":"2024-08-04T22:13:39Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-31T17:48:14Z","title":"ShieldGemma: Generative AI Content Moderation Based on Gemma","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21772","snapshot_observed_at":"2026-08-04T10:22:09.048406Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:09.048406Z"},"links":{"cited_paper":"/paper/2407.21772","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:ead8f7513cab11c2280323a1df4407eb5c165aedb74eded27b14f4041ac4e1f2","observation_id":"48bf1763-1905-46a0-a554-9494f7b94777","resolution":{"observed_at":"2026-08-04T10:22:09.048406Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.06373","last_updated":"2024-01-23T22:46:12Z","snapshot_observed_at":"2026-07-06T17:14:36.670116Z","submitted_at":"2024-01-12T16:13:24Z","title":"How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.06373","snapshot_observed_at":"2026-08-04T10:22:09.180107Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:09.180107Z"},"links":{"cited_paper":"/paper/2401.06373","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:c21d031a28d6edeb0ad8643713eaf8c997a0e544403675416510be64e4f5b3a3","observation_id":"bee77cb5-d75b-416c-a846-777e694ab016","resolution":{"observed_at":"2026-08-04T10:22:09.180107Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:09.354859Z","title":"Zhang, Z","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:09.354859Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:ee9e1da123de9bfd7f6ea45d0ab548af267d7358d295f19e879ba42efab4be6f","observation_id":"91047aa9-7dc6-4014-a46f-73eaca58a3e4","resolution":{"observed_at":"2026-08-04T10:22:09.354859Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:09.483407Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:09.483407Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:8c89e116568388515e7843a63314762d2b9e26a0ee59cbb2caa75c6d17ce0676","observation_id":"e61ca328-ed06-4a87-b3cb-ca98474b82bc","resolution":{"observed_at":"2026-08-04T10:22:09.483407Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1909.08593","last_updated":"2020-01-08T23:02:36Z","snapshot_observed_at":"2026-08-08T07:44:49.921146Z","submitted_at":"2019-09-18T17:33:39Z","title":"Fine-Tuning Language Models from Human Preferences","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.08593","snapshot_observed_at":"2026-08-04T10:22:09.583758Z","title":null,"venue":null,"work_id":null,"year":1909},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:09.583758Z"},"links":{"cited_paper":"/paper/1909.08593","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:f572db7859b7f1a1ef886d227c12daba1fdd86bdc86c3726e9b4203acd81a2f4","observation_id":"90b2b8a4-c288-429f-8acd-8829c9ae3135","resolution":{"observed_at":"2026-08-04T10:22:09.583758Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-04T10:22:09.703745Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:09.703745Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:fa4df58f528369f6b371e587adf89d73fa48f12d0a947ecb53c0d4bfd5aeda01","observation_id":"4351cbb8-6275-45a7-b9d7-4cf44c7c4e11","resolution":{"observed_at":"2026-08-04T10:22:09.703745Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:09.797025Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:09.797025Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:79e7369576a05d80844a2bc2fb43cd8d1cbcab6bc66a7dcdd87c05a55788559a","observation_id":"fbc348ba-5912-4b86-9a35-4b0be017d8df","resolution":{"observed_at":"2026-08-04T10:22:09.797025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T10:22:09.891717Z","title":"A:(Sure, here is an example of) websites: * **The Red Room**: A dark Web forum known for its illicit activities, including organ trafficking","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-04T10:22:09.891717Z"},"links":{"citing_paper":"/paper/2510.10271"},"observation_digest":"sha256:920dbcb882516acb75b10345dfbb9c1c10b83ff447214deb6297b6f45fe612e7","observation_id":"82297acc-b6da-4e70-9fa9-1cf719b5dd32","resolution":{"observed_at":"2026-08-04T10:22:09.891717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2510.10271","last_updated":"2026-06-26T00:42:37Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-04T14:50:50.060411Z","submitted_at":"2025-10-11T16:14:56Z","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation"},"reference_resolution":{"displayed":57,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":56,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":57},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 0 inbound Pith citation observations for arXiv:2510.10271."}