{"as_of":"2026-08-21T01:34:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:cdb291c00a5be0e2a1d409f4ceecf2a5ed23b33d41300aa84ed3d3b40b037f49","coverage":[{"denominator":44,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":44,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T20:09:23.495258Z","state":"measured"},{"denominator":45,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":45,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-25T23:47:47.892277Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T17:20:00.263185Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"cited_work":{"arxiv_id":"2602.24009","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2602.24009","snapshot_observed_at":"2026-07-20T02:18:26.452367Z","title":"Jailbreak foundry: From papers to runnable at- tacks for reproducible benchmarking.arXiv preprint arXiv:2602.24009, 2026","venue":null,"work_id":"21430c0c-6c07-4988-acd2-494240923020","year":2026},"citing_paper":{"arxiv_id":"2606.24081","last_updated":"2026-06-23T02:49:10Z","snapshot_observed_at":"2026-08-12T15:04:24.043659Z","submitted_at":"2026-06-23T02:49:10Z","title":"PixJail: Self-Evolving Paper-to-Pipeline Reproduction for Text-to-Image Jailbreak Evaluation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-25T23:47:47.892277Z"},"links":{"cited_paper":"/paper/2602.24009","citing_paper":"/paper/2606.24081"},"observation_digest":"sha256:c9131d83c499e6cb05431e9811d42114a397e71c0bbc176e906d7f8fb35f1ed1","observation_id":"561ce16a-769f-4d87-8587-2b973eb01e80","resolution":{"observed_at":"2026-07-20T02:18:26.452367Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2602.24009/citation-record","integrity":"/paper/2602.24009/integrity","json":"/paper/2602.24009/citation-record.json","paper":"/paper/2602.24009"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:20.945685Z","title":"2.Secondary:the JBF-LIBcontractC(interfaces, I/O schema, parameterization hooks, and required metadata)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:20.945685Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:9f15787f5370a077ab51fe48566a72716e524d18eac54d050d6734fef830aba5","observation_id":"af927317-8982-400a-981e-643808514c92","resolution":{"observed_at":"2026-08-02T20:09:20.945685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:21.179451Z","title":"Do NOT read the paper markdown","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:21.179451Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:a0c320dc6957fdd356a285441fb40303f0a20c19c1ca5164e196dfea3652e6f1","observation_id":"f82a955a-c04a-401b-88e2-47ca55772ae5","resolution":{"observed_at":"2026-08-02T20:09:21.179451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:20.990775Z","title":"Partial/Equivalent","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:20.990775Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:c45639e5cd39ce702c5609fcb8cdaeb5690ed9eae57731cfcfe3b2727d1643e4","observation_id":"02f35f7a-460c-4056-946d-dfa70b4bd673","resolution":{"observed_at":"2026-08-02T20:09:20.990775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.03191","last_updated":"2024-11-28T13:43:50Z","snapshot_observed_at":"2026-08-18T06:50:23.685098Z","submitted_at":"2023-11-06T15:29:30Z","title":"DeepInception: Hypnotize Large Language Model to Be Jailbreaker","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.03191","snapshot_observed_at":"2026-08-02T20:09:19.848778Z","title":"Li, X., Zhou, Z., Zhu, J., Yao, J., Liu, T., and Han, B","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:19.848778Z"},"links":{"cited_paper":"/paper/2311.03191","citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:7a062c8a653d986b7c28398fe4f0b33b8edcfb4494b3645c2197d7f887992fa3","observation_id":"c89d7e5e-bf9b-4724-9165-5d8e08cffe17","resolution":{"observed_at":"2026-08-02T20:09:19.848778Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:21.444279Z","title":"method_name_gen","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:21.444279Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:7360b54e0565f81eb7e382476c8fc1dcd0fa9df134c0ff0a1a6fca6c96555869","observation_id":"67abfa06-0580-4fe0-b0bc-57fe69cbf225","resolution":{"observed_at":"2026-08-02T20:09:21.444279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.01848","last_updated":"2025-04-07T12:15:49Z","snapshot_observed_at":"2026-07-06T21:03:06.857885Z","submitted_at":"2025-04-02T15:55:24Z","title":"PaperBench: Evaluating AI's Ability to Replicate AI Research","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.01848","snapshot_observed_at":"2026-08-02T20:09:20.123350Z","title":"Starace, G., Jaffe, O., Sherburn, D., Aung, J., Chan, J","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:20.123350Z"},"links":{"cited_paper":"/paper/2504.01848","citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:8f3508b9caa14830ddffa2658b8c9915eeb769a2b0c917a2b66b195618be1214","observation_id":"3244be22-c2e9-4041-bf4b-96e80ff2eef1","resolution":{"observed_at":"2026-08-02T20:09:20.123350Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:23.253806Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:23.253806Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:87c724e8b54b45f58fd3454c75a852443443aa06155ee04ab32101685c5fc710","observation_id":"3ea78d79-5613-4237-982c-3e86620ac0fa","resolution":{"observed_at":"2026-08-02T20:09:23.253806Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:23.307800Z","title":"Changes Since Previous Iteration","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:23.307800Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:c2b0daf297bff134d318a567dca951e4d0cf864f1ae0f65aedadd91acd0140a9","observation_id":"bd457550-f4e1-4fe5-9d8d-ba140ed705fd","resolution":{"observed_at":"2026-08-02T20:09:23.307800Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:20.782777Z","title":"ISBN 979-8-89176-256-5","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:20.782777Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:5bcb936d590d567fd9ef0b5c2703a4bd4b8ac0626afd2dd4b74aa806dfb3c6bb","observation_id":"7f83d8d7-c344-4be4-b740-d70fce8a83e9","resolution":{"observed_at":"2026-08-02T20:09:20.782777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:21.082248Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:21.082248Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:bc441155074c6191188fec2248b74afb172fc0e2d4117c3105a42cb0d9ee8c22","observation_id":"fc98bd43-3b02-43e7-bafd-ea2b2482ed2f","resolution":{"observed_at":"2026-08-02T20:09:21.082248Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:21.284500Z","title":"No jailbreak","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:21.284500Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:cd8fe634138911223965ae403bd6e58f4a28787ae968729c0f93231199a42cc4","observation_id":"9b55a9d7-abe9-40bf-8cc9-c0008b109b3b","resolution":{"observed_at":"2026-08-02T20:09:21.284500Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:21.373236Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:21.373236Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:742da25682f76a8488948e07cbad28d37620cd113f2003f53e934fa77055966c","observation_id":"7cc9b865-b164-40ee-8380-4943b461a473","resolution":{"observed_at":"2026-08-02T20:09:21.373236Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:21.496542Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:21.496542Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:c4b1f8bbc970501c44bf62b5c57c55e1258f20546a3bbb79379190787093a477","observation_id":"0f24feb4-fc90-4746-b785-0e32df0b32f0","resolution":{"observed_at":"2026-08-02T20:09:21.496542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:21.544321Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:21.544321Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:5fbb876a70bc46c00e1c77b5620b5537b85d0276e03e7879972803cab617e9d5","observation_id":"831d5e99-90c3-43aa-beaf-310e53aec128","resolution":{"observed_at":"2026-08-02T20:09:21.544321Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:21.633181Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:21.633181Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:0e0ea7bd412ca476bf9d0b7478c6d5380e4308d536d454c3e87b1032f1eb0f2f","observation_id":"9e29a3f9-992a-43f2-90c3-459540dc37a7","resolution":{"observed_at":"2026-08-02T20:09:21.633181Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:21.729275Z","title":"status\":","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:21.729275Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:31e44f479ed1691758a252fba1f2e1f31271863371761018c1c3d381554cca3f","observation_id":"9086cfb4-cc43-441a-a922-2aa870f357e4","resolution":{"observed_at":"2026-08-02T20:09:21.729275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:21.790893Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:21.790893Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:72605cae59d68fa41e9b7ba3b46811991141dfc445a370d8018b4a126b23c321","observation_id":"919dd31c-49db-4260-9307-824f3000ed32","resolution":{"observed_at":"2026-08-02T20:09:21.790893Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:21.845187Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:21.845187Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:40c32db25409a7129c29c7883308757bb589ca5b293a246a6b09aaf31f1a5f9d","observation_id":"1922ddee-fccf-42ef-ad85-8ff12f014959","resolution":{"observed_at":"2026-08-02T20:09:21.845187Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:21.924315Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:21.924315Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:8140ea2aca907ccac9a9a6ccbedebf6ceb2c02e3ab2b812d57f0698057915d58","observation_id":"8c53efc7-31f2-4898-a355-ce3ab608e647","resolution":{"observed_at":"2026-08-02T20:09:21.924315Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:21.990657Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:21.990657Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:028fe6498bce60915e92717f7c0400bcec484ad2bb3e28ae762c6dd547678a43","observation_id":"973eda85-ca29-49c0-a5b8-859f3010d417","resolution":{"observed_at":"2026-08-02T20:09:21.990657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:22.079458Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:22.079458Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:cd3e9433f14cdfbde73da6f12b17a9119ad7a7ed179a4d23cea5a93055447ac0","observation_id":"c87b090c-2656-475e-8c28-1e8cc7f0c877","resolution":{"observed_at":"2026-08-02T20:09:22.079458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:22.182438Z","title":"Previous audit said 100% Fidelity, so I'll just quickly confirm","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:22.182438Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:f5a7167412bc6bcf39099c9254cd8a68b0ba9723b165f58604cd4a9407bba30e","observation_id":"e157fc6d-e410-4bbc-9c5d-10e7dbd47d66","resolution":{"observed_at":"2026-08-02T20:09:22.182438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:22.281944Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:22.281944Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:4a585f97d9d2bec26d9df7f712624a68abadd7ac0840f0d8f8658eab5e323af9","observation_id":"d54b8b79-25e3-43f1-96d2-42ff99117202","resolution":{"observed_at":"2026-08-02T20:09:22.281944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:22.376937Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:22.376937Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:8d0d2a2a2b78a44ba8b59156a5e308f48e96ffa89e4aa1ae335ac752e13297bb","observation_id":"8b67f578-3fbe-449c-849d-03ddd1595927","resolution":{"observed_at":"2026-08-02T20:09:22.376937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:22.434835Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:22.434835Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:32a37332c5b53424641727ca090d0e24f0a5b475fea7254b1406b7e791ec2008","observation_id":"d2382246-c93b-4892-868f-475d2b66eeca","resolution":{"observed_at":"2026-08-02T20:09:22.434835Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:22.524884Z","title":"target model","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:22.524884Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:59776f90d75f00a821b8e86df337702d1839e816b3d43eb152a5131f92195df4","observation_id":"a913ec5c-b736-4165-ace4-0fb05e9b6c4a","resolution":{"observed_at":"2026-08-02T20:09:22.524884Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:22.599629Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:22.599629Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:0133ca2ba3d5fdbd4faf96587af6f0241205721dc685bbea4671cbc47bbb8e4a","observation_id":"db84a3cd-a7bf-4fc1-b5c5-b7fae44262c1","resolution":{"observed_at":"2026-08-02T20:09:22.599629Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:22.684587Z","title":"## Audit Iteration 2 - 2025-11-25","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:22.684587Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:19e4517ec1b404f46b20a8841ce3bb07b1eb2ec839d120de84f0283f36600084","observation_id":"9c0e864e-4d59-49fb-9a17-b0acbfd403dd","resolution":{"observed_at":"2026-08-02T20:09:22.684587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:22.782581Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:22.782581Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:753fbe09ec86be8acccb9373faee462b51372da238d54236b7050a885f33b3d9","observation_id":"4dd48bb0-83b3-4e68-aebb-9d59c3cad684","resolution":{"observed_at":"2026-08-02T20:09:22.782581Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:22.874463Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:22.874463Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:7b7debba2e68f98d39581224cf78110e8b824a861faef878ba4a97ea20f70711","observation_id":"6ea0b846-f62e-4c97-88d1-b6b8f6893e2d","resolution":{"observed_at":"2026-08-02T20:09:22.874463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:22.974483Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:22.974483Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:4d6619739125df53565f9e2320428228ce5616a7afc01feb556887d6db478e92","observation_id":"d2e62197-2cdf-4beb-b903-02f3f1c793b2","resolution":{"observed_at":"2026-08-02T20:09:22.974483Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:23.048156Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:23.048156Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:e140780646023065075050d3993226578701d0bc2c87861b3e7ca045306d9b73","observation_id":"20b98207-0f3a-4263-8b64-dab5851fd9ce","resolution":{"observed_at":"2026-08-02T20:09:23.048156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:23.120385Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:23.120385Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:d56ae9bc436a0d0e1bd1286ffec7b7cbfe1df9ade400b652fbac00aab0cdee89","observation_id":"57505047-9149-42fa-b451-e34789462d13","resolution":{"observed_at":"2026-08-02T20:09:23.120385Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:23.185932Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:23.185932Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:023068d36e967edb674d565c417e4477a8ac2c4285d2b4e715974e3118430cf3","observation_id":"deb74399-f36c-4829-a5ac-ad3d8a4347d0","resolution":{"observed_at":"2026-08-02T20:09:23.185932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:23.397008Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:23.397008Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:b54dc454898e88f29e5295cfb94a1d1ca5b009d197d83d55cb138f69c29fa830","observation_id":"00efe6ff-e076-495a-99bf-d0556c26028f","resolution":{"observed_at":"2026-08-02T20:09:23.397008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:23.495258Z","title":"## Differences Likely Causing the ASR Gap","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:23.495258Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:423b7ca238c11ace415e9737e3ddb277aefdd8c3fcdffcccef6771c4a55b95cc","observation_id":"4610308f-fe77-401e-ac08-8d3857872dbb","resolution":{"observed_at":"2026-08-02T20:09:23.495258Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-08-02T20:09:20.449467Z","title":"findings-emnlp.92/","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:20.449467Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:7858295bfe3f3085835643a5a740c8fd7512238b4508237247edf86911b25db5","observation_id":"c5369618-48a5-40cd-bd44-9bedb21936e9","resolution":{"observed_at":"2026-08-02T20:09:20.449467Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-08-13T17:20:44.002518Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-02T20:09:19.703113Z","title":"findings-acl.100/","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:19.703113Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:0aae31a7c4646f30f40d0de165dec519e2c15303da0fd7aace958d3bb5fe9c4b","observation_id":"ae59b66e-2230-4086-9e67-18c44df4b547","resolution":{"observed_at":"2026-08-02T20:09:19.703113Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:19.458387Z","title":"naacl-long.118/","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":118,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:19.458387Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:5e76a653791c279861bf7d799988938375bafb936db8963b6ba2321640e7b79d","observation_id":"ec5b4e1c-bef4-4113-b556-28da7331eac3","resolution":{"observed_at":"2026-08-02T20:09:19.458387Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:20.235224Z","title":"emnlp-main.190/","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":190,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:20.235224Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:2a5c75238ae9e9a79c658b7cfcadc8d0e8637eedff575d023bbd214cbbb8fc1b","observation_id":"8293fc86-fda4-4018-bbb9-28b3eb9f298c","resolution":{"observed_at":"2026-08-02T20:09:20.235224Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:20.848201Z","title":"findings-acl.298/","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":298,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:20.848201Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:7a455f23577cd564dd8d9f6b4f32571122aaa06353bcb000add91a42e5249b10","observation_id":"a1506e1d-e8fc-417f-bdca-35024556a6df","resolution":{"observed_at":"2026-08-02T20:09:20.848201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:20.346077Z","title":"emnlp-main.314/","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":314,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:20.346077Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:aa67f80dbf8dced6b3cc508e54603e6d468d80935c99eb5ce52e808870f12f09","observation_id":"a98764b3-57a3-44be-ac4b-bd28dd231f7c","resolution":{"observed_at":"2026-08-02T20:09:20.346077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.20662","last_updated":"2026-04-24T06:03:13Z","snapshot_observed_at":"2026-08-15T07:09:57.099867Z","submitted_at":"2025-05-27T03:15:21Z","title":"AutoReproduce: Automatic AI Experiment Reproduction with Paper Lineage","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.20662","snapshot_observed_at":"2026-08-02T20:09:20.654843Z","title":"findings-acl.408/","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":408,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:20.654843Z"},"links":{"cited_paper":"/paper/2505.20662","citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:002599378e95bf1c4e329e8caef4c55cc228e83591e56ffa16c13dab9a050ed2","observation_id":"d1b9c970-39be-4b93-a59a-92488c447419","resolution":{"observed_at":"2026-08-02T20:09:20.654843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T20:09:19.973344Z","title":"ISBN 9798331314385","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking","version":4},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-02T20:09:19.973344Z"},"links":{"citing_paper":"/paper/2602.24009"},"observation_digest":"sha256:41027fff8a026ff1790146a243232ef5c5fc40671589748a5b29447ac8e385ff","observation_id":"ab6fd475-b453-40a4-af2c-ed1a6b0eeb97","resolution":{"observed_at":"2026-08-02T20:09:19.973344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2602.24009","last_updated":"2026-07-17T11:02:54Z","latest_version":4,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-17T11:18:56.448276Z","submitted_at":"2026-02-27T13:32:53Z","title":"Jailbreak Foundry: From Papers to Runnable Attacks for Reproducible Benchmarking"},"reference_resolution":{"displayed":44,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":42,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":44},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 44 of 44 outbound references and 1 inbound Pith citation observation for arXiv:2602.24009."}