{"as_of":"2026-08-04T15:35:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:484bc0875bea64217868af7e1d8ebc78a3bf9e2a64e6f2660b5915743abd655f","coverage":[{"denominator":83,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":83,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-13T01:24:24.242731Z","state":"measured"},{"denominator":85,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":85,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-04T06:34:03.388597+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-31T22:25:22.284608Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-06-28T17:22:24.150791Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"cited_work":{"arxiv_id":"2605.11002","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.11002","snapshot_observed_at":"2026-06-28T17:22:24.150791Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","venue":"cs.CR","work_id":"a1f543cc-f889-4c85-93d1-4d8325be17f1","year":2026},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-11T11:50:26.030339Z"},"links":{"cited_paper":"/paper/2605.11002","citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:b86959a3ee4bea588894f5b50e04e1b3cd85b031d9c30255b7c3a60ada0de8b2","observation_id":"5a62f540-bc22-4d9b-a912-30b3e7c40bf0","resolution":{"observed_at":"2026-06-28T17:22:24.153220Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.11002","snapshot_observed_at":"2026-07-31T22:25:22.284608Z","title":"Benjamin Erichson , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.27951","last_updated":"2026-07-30T09:59:08Z","snapshot_observed_at":"2026-08-02T23:47:48.190338Z","submitted_at":"2026-07-30T09:59:08Z","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-07-31T22:25:22.284608Z"},"links":{"cited_paper":"/paper/2605.11002","citing_paper":"/paper/2607.27951"},"observation_digest":"sha256:9db0f3581c225c6c42634094348b023ea7f6e72f0824b9b53d54130c1eb9c79c","observation_id":"db92753e-b2c5-47d7-bc6b-99dcd0790813","resolution":{"observed_at":"2026-07-31T22:25:22.284608Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2605.11002/citation-record","integrity":"/paper/2605.11002/integrity","json":"/paper/2605.11002/citation-record.json","paper":"/paper/2605.11002"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":"2303.08774","doi":"10.1002/tea.20265","metadata_source":"pith","pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"GPT-4 Technical Report","venue":"cs.CL","work_id":"b928e041-6991-4c08-8c81-0359e4097c7b","year":2023},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:4268eae9b26e0eeae9242d9dfde7efef765502711a521a34e7b6d9a641b814d2","observation_id":"37035d49-2e09-4107-93d5-300f5ade6a4a","resolution":{"observed_at":"2026-05-13T01:27:02.432817Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Introducing claude opus 4.5.https://www.anthropic.com/news/claude-opus-4-5, November","venue":null,"work_id":"70ba7cf8-d048-4663-bf89-edbda7e932f2","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:5ce8f7ec52cf010069e59ee49aa5e04309f0d271ef475493ae6db1f7edbf4820","observation_id":"10169151-b2dc-481a-8a71-f1c048f47b06","resolution":{"observed_at":"2026-05-13T15:12:55.733297Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-05T06:20:45.329238Z","title":null,"venue":null,"work_id":"452db9b8-e66c-4d7f-8a36-4c4c8a6eabaf","year":2026},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:9f2494da0a47be3a2fe392008941a76ad0051d1bcfc1d9774cff16f4333bb533","observation_id":"ba7dd55e-777d-45ba-910d-6664370ff2bf","resolution":{"observed_at":"2026-05-13T15:12:55.737673Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.17947","last_updated":"2026-06-05T22:48:14Z","snapshot_observed_at":"2026-08-04T09:02:06.264385Z","submitted_at":"2025-10-20T17:37:03Z","title":"PLAGUE: Plug-and-play framework for Lifelong Adaptive Generation of Multi-turn Exploits","version":3},"cited_work":{"arxiv_id":"2510.17947","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2510.17947","snapshot_observed_at":"2026-06-09T02:05:21.865602Z","title":"Plague: Plug-and-play framework for lifelong adaptive generation of multi-turn exploits","venue":null,"work_id":"9ea33941-8baa-4745-ae7e-0a5bdd2edca7","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2510.17947","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:96a7ca257f190700db3c51684a8e9bfcf14401fbca09b378551ad50ddda0c824","observation_id":"a79ec9f6-3c6a-4d49-a532-1b341064b997","resolution":{"observed_at":"2026-06-09T02:05:21.865602Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Safety-tuned llamas: Lessons from improving the safety of large language models that follow instructions","venue":null,"work_id":"5494dcf0-fef2-4c39-acdf-a253fd6d5d2a","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:df82397111c26a9b4aaa9319f7dbea70da7c75a4e4c82d05da25976ce349e257","observation_id":"1e9f2bd7-00df-4e37-ad7c-ab4ba92dd44b","resolution":{"observed_at":"2026-05-13T15:12:55.724605Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Jailbreakbench: An open robustness benchmark for jailbreaking large language models.Advances in Neural Information Processing Systems, 37:55005–55029","venue":null,"work_id":"bd559f33-66b5-4fec-a8a2-aeb36b3b7fd4","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:fb2763e5b56cc3868d9c4201afc8fcbe29bb1e92e33e4ef6c67ffe8b2d9ab97d","observation_id":"08aea425-0250-4552-b821-f0da9dda289e","resolution":{"observed_at":"2026-05-13T15:12:55.808740Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T01:31:44.631070Z","title":"Jailbreaking black box large language models in twenty queries","venue":null,"work_id":"39affe2a-be90-4924-b8c3-f0de0eaf91c6","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:43207c18023cb946f6d6b6bccdd284591fbba6e5524829e44f1824707fdee368","observation_id":"49df405e-35b7-4160-b8a3-1b6688ff05cd","resolution":{"observed_at":"2026-05-13T15:12:55.758835Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06261","last_updated":"2025-12-19T14:25:46Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-07-07T17:36:04Z","title":"Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities","version":6},"cited_work":{"arxiv_id":"2507.06261","doi":"10.48550/arxiv.2503.19","metadata_source":"pith","pith_arxiv_id":"2507.06261","snapshot_observed_at":"2026-07-11T03:17:51.364436Z","title":"Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities","venue":"cs.CL","work_id":"008df105-2fdd-45d8-857a-8e35868aecb6","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2507.06261","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:25f379812dd51e3a5a7f2f5c23686813f610ec6bc29985dd4762158791a23cd3","observation_id":"7858dc2b-162b-4f9e-99ff-1884c5cf9742","resolution":{"observed_at":"2026-05-13T01:27:02.488181Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Safe rlhf: Safe reinforcement learning from human feedback","venue":null,"work_id":"a321999f-c47c-42fc-8a2c-7686b3c1e109","year":2023},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:710aca16500de543859b7646fb5935780258b4bba5928e1e30d0377b820e4506","observation_id":"75581b86-0f84-4117-819c-4cd7334e3d11","resolution":{"observed_at":"2026-05-13T15:12:55.851023Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.06854","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Sema: Simple yet effective learning for multi-turn jailbreak attacks","venue":null,"work_id":"af92cf4a-1110-49e8-a2b7-7e7c23733085","year":2026},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:90b8711c23cb26a130376e99d0ef9816d0f7b730c507fa004fd9ec36552b5aec","observation_id":"25d5bdc6-0970-40de-afe0-9df1557d1d2b","resolution":{"observed_at":"2026-05-13T01:27:02.505329Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.08874","last_updated":"2026-05-14T02:54:57Z","snapshot_observed_at":"2026-08-01T21:41:17.124444Z","submitted_at":"2026-02-09T16:35:14Z","title":"Do Reasoning LLMs Refuse What They Infer in Long Contexts?","version":2},"cited_work":{"arxiv_id":"2602.08874","doi":null,"metadata_source":"pith","pith_arxiv_id":"2602.08874","snapshot_observed_at":"2026-07-01T21:16:14.794924Z","title":"Is reasoning capability enough for safety in long-context language models?","venue":"cs.CL","work_id":"6b5ae6e2-3a12-4f3d-8858-0aeaff6500a2","year":2026},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2602.08874","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:68a3d7274ab0e941584a8ed6734b06a47abf30c9bf14957a95354a4802490f22","observation_id":"9c4d4581-20bb-408c-9f0e-8374a394d470","resolution":{"observed_at":"2026-05-15T01:43:11.698180Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Shaping the safety boundaries: Understanding and defending against jailbreaks in large language models","venue":null,"work_id":"0cbf1ddb-92d4-43b1-aeb8-9b236976f555","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:c1a7cd311a6cbdae541a466b93d928feeee5476f38294ca44523408f8c8265ea","observation_id":"3a600f08-eb64-41b6-a060-7afe3a11067b","resolution":{"observed_at":"2026-05-13T15:12:55.787059Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Frontier safety framework report – gemini 3 pro","venue":null,"work_id":"4a2d6d07-2519-4119-b661-aee0deb85ce8","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:5f8b7360c880604506e36874ab25483a971ac21f48f3a93ab5bc6c10005e769b","observation_id":"d9f4cf48-1607-4fb1-b839-5fd015d68186","resolution":{"observed_at":"2026-05-13T15:12:55.937627Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Wildguard: Open one-stop moderation tools for safety risks, jailbreaks, and refusals of llms","venue":null,"work_id":"a17b5ca7-9513-4042-8d7c-cd3baeaa4d40","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:5d9d2fa59a0608cbf09aefa7215d7235dce88cd95d83885736d1886fca451eba","observation_id":"aa8838e7-8498-4f13-a5fd-da7185e7946f","resolution":{"observed_at":"2026-05-13T15:12:55.831813Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Steering dialogue dynamics for robustness against multi-turn jailbreaking attacks","venue":null,"work_id":"7ccfef08-d305-4569-995a-0b500c3abd5a","year":2026},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:d7e0a55c3485f6dd33495bbea5e404996f201e0a3940d7d6ed14a1a10f3c9329","observation_id":"a371adb5-1f67-436c-aca4-763de7dd2572","resolution":{"observed_at":"2026-05-13T15:12:55.890219Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":"2312.06674","doi":"10.3390/info16050365","metadata_source":"pith","pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","venue":"cs.CL","work_id":"93844332-869b-448c-a1be-35466150b1b2","year":2023},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:bb2c5ce0ee451b77cd41dc0a5eab25dca72643f4bca4031ef28d37e68e6695b3","observation_id":"eb2a70d4-c248-483b-b85b-30b6a453153d","resolution":{"observed_at":"2026-05-13T01:27:02.484724Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Baseline defenses for adversarial attacks against aligned language models","venue":null,"work_id":"c1b1db16-61cb-417b-a34b-e3b18998c9fa","year":2023},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:ab6310d7ea5d839ba6a3e51e7958d2e3eee91ab9f515b646b6b204c80e245309","observation_id":"c18e4caf-1f88-4dd0-b5e5-d0200abebfc1","resolution":{"observed_at":"2026-05-13T15:12:55.781957Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Pappas, Hamed Hassani, Yang Zhang, Eric Wong, and Shiyu Chang","venue":null,"work_id":"82e8caba-8726-4798-ba97-000bc263612c","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:834eec969d640c2a0989553497565e2d2692cd779de6241a6c1ccdf7a7b0ed06","observation_id":"e37cc743-5589-4e18-b182-9d48bccb969c","resolution":{"observed_at":"2026-05-13T15:12:55.878790Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Aligner: Efficient alignment by learning to correct","venue":null,"work_id":"f7f147b6-64e9-441d-a887-2a0183a3177c","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:6a50be5a70e1b3f76419f2537db613c6ad3e73077e75a47fdd50fc02ec36d11c","observation_id":"69fb417a-a74f-4d94-aaf1-4ce62ac2e7ea","resolution":{"observed_at":"2026-05-13T15:12:55.804446Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Temporal context awareness: A defense framework against multi-turn manipulation attacks on large language models","venue":null,"work_id":"d2c9b314-93ce-46d1-bcbd-4d763a807b7c","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:ff99f9072aff694e00b08fb6aa4a555bb3890422366ba30c369cc2bc74819a52","observation_id":"fe6a584e-4e60-441e-b32b-99c626fd38c8","resolution":{"observed_at":"2026-05-13T15:12:55.728950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Detam: Defending llms against jailbreak attacks via targeted attention modification","venue":null,"work_id":"27688fe2-fa46-4f88-9d27-0bb50cf9e190","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:932f83c40f6fdf17b2af264d81d3b7f758d1adfff3a0d479074f25a39d605894","observation_id":"4f7fcb3f-78ba-4b26-a452-39ef67333380","resolution":{"observed_at":"2026-05-13T15:12:55.979833Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.04717","last_updated":"2026-04-20T02:55:07Z","snapshot_observed_at":"2026-07-06T21:05:11.303685Z","submitted_at":"2025-04-07T04:00:08Z","title":"Beyond Single-Turn: A Survey on Multi-Turn Interactions with Large Language Models","version":6},"cited_work":{"arxiv_id":"2504.04717","doi":null,"metadata_source":"pith","pith_arxiv_id":"2504.04717","snapshot_observed_at":"2026-07-04T01:19:21.999006Z","title":"Beyond Single-Turn: A Survey on Multi-Turn Interactions with Large Language Models","venue":"cs.CL","work_id":"9b4fa784-bc79-4e0d-bf71-1b63249eb302","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2504.04717","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:066979dbcb188ce12228b01f60555df118ffbf667c6ba036518df774f2c0974f","observation_id":"543d08f4-e242-4f13-8935-ca755c271983","resolution":{"observed_at":"2026-05-13T01:27:02.478365Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.03288","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"How real is your jailbreak? fine-grained jailbreak evaluation with anchored reference","venue":null,"work_id":"34b68af4-165e-4510-9579-11604a265897","year":2026},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:bc8cdccd0b7a3002a97d9c3633a0299fc7ab4932805e67b8d03b566d528c94b5","observation_id":"f833aafa-1f43-4dde-8bfa-716b65aa49b7","resolution":{"observed_at":"2026-05-13T01:27:02.463893Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04451","last_updated":"2024-03-20T21:34:56Z","snapshot_observed_at":"2026-07-06T16:28:55.209047Z","submitted_at":"2023-10-03T19:44:37Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":"2310.04451","doi":"10.48550/arxiv.2310.04451","metadata_source":"pith","pith_arxiv_id":"2310.04451","snapshot_observed_at":"2026-07-10T15:27:20.054506Z","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","venue":"cs.CL","work_id":"3b676de6-edef-4976-a8b5-082d4ff50867","year":2023},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2310.04451","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:0dd0882b6e0dceab4e0a85cf596d3a305f79c2f6ff7e60712eb0ed4e66e1efa6","observation_id":"f559eab7-d63a-4f0e-b6b9-117221939520","resolution":{"observed_at":"2026-05-13T01:27:02.467472Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-05-23T04:52:41.614605+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-23T04:52:41.614605+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-07-06T17:26:23.067923Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":"2402.04249","doi":"10.48550/arxiv.2402.04249","metadata_source":"pith","pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-07-10T15:27:20.028353Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","venue":"cs.LG","work_id":"b0b0303f-2444-4789-a979-8153624312ff","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:68d0f6930b715c2ed0ee839e0904c9825cc3c5455482dee5bc9c3dd664d28742","observation_id":"819bf594-fe2e-4429-9cf8-0e2202a0b36b","resolution":{"observed_at":"2026-05-13T01:27:02.471338Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T18:16:26.555721Z","title":"Training language models to follow instructions with human feedback.Advances in neural information processing systems, 35:27730–27744","venue":null,"work_id":"aa3e2ba7-4265-495b-8612-615b2ddc9991","year":2022},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:921a06b3f7629ff4de2fe0df53984f4dcc1994ad39436d44e37f500eecdbf9c6","observation_id":"213bdb49-8456-4be4-84d5-eb80568509a0","resolution":{"observed_at":"2026-05-13T15:12:55.742566Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.13203","last_updated":"2025-08-23T02:09:57Z","snapshot_observed_at":"2026-07-06T21:11:10.415720Z","submitted_at":"2025-04-15T16:11:28Z","title":"X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents","version":2},"cited_work":{"arxiv_id":"2504.13203","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.13203","snapshot_observed_at":"2026-07-03T06:07:41.476618Z","title":"X-teaming: Multi- turn jailbreaks and defenses with adaptive multi-agents","venue":null,"work_id":"14895b6e-e521-434c-b30f-db8fcc0f1232","year":2026},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2504.13203","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:1212239c8f63a7ee0ecaa6aa54b9a5284d3f9ff7120165776d6a45bae4142b8f","observation_id":"c6add2fa-bde6-4d55-a636-58bc4538831b","resolution":{"observed_at":"2026-05-13T01:27:02.474947Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Llms know their vulnerabilities: Uncover safety gaps through natural distribution shifts","venue":null,"work_id":"5218043b-0cb1-4527-9045-ff237b9e6ed6","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:56e188d8998a4909276796b2116bc8b67ac1f37a1067d012dc71195ea7b266e2","observation_id":"26ee2979-04a7-4e97-8952-84f5a0236fc9","resolution":{"observed_at":"2026-05-13T15:12:55.886154Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"54cacf87-2909-44a1-9ae9-effa17e21716","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:dd9b04b7507cb73adcdab708252ad254e6e85421411f340cccfee108f02e59f8","observation_id":"beda1695-1481-42c8-a4eb-c84021cffd59","resolution":{"observed_at":"2026-05-13T15:12:55.919336Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T01:31:44.629285Z","title":"Great, now write an article about that: The crescendo {Multi-Turn}{LLM} jailbreak attack","venue":null,"work_id":"3cec901a-bb57-4db3-8bdf-f4d165f6a8d3","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:fd1069cecb9ad6ec632b4c9efd0f3520fba42a302dc5faf40c610b9edf6e0f29","observation_id":"ff42bf08-aa75-426a-ab5e-fd8833d29b76","resolution":{"observed_at":"2026-05-13T15:12:55.933085Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.350641Z","title":"do anything now","venue":null,"work_id":"3e922d2d-2e87-44f6-9118-3816160d1626","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:408c840e187edab249d7caacc938ccee2199ca53484c4d5078066d55effcdd27","observation_id":"062a38e8-c454-4c96-8ab6-e12b59623b3a","resolution":{"observed_at":"2026-05-13T15:12:55.862565Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.03267","last_updated":"2026-05-01T23:55:43Z","snapshot_observed_at":"2026-08-02T10:52:10.211700Z","submitted_at":"2025-12-19T07:05:38Z","title":"OpenAI GPT-5 System Card","version":2},"cited_work":{"arxiv_id":"2601.03267","doi":"10.48550/arxiv.2601.03267","metadata_source":"pith","pith_arxiv_id":"2601.03267","snapshot_observed_at":"2026-07-11T02:17:46.480513Z","title":"OpenAI GPT-5 System Card","venue":"cs.CL","work_id":"ca87689a-0d29-4476-b504-b65dbbb08af4","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2601.03267","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:a962981eb37121a0ae5ae63b11952f220a3277d7a86cf444550ae3ed79f7574f","observation_id":"96deb14b-a053-4994-9cdf-6ea8e9d2e0f8","resolution":{"observed_at":"2026-05-13T01:27:02.460088Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-03T00:38:11.458508+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-03T00:38:11.458508+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T14:45:00.491863Z","title":"A strongreject for empty jailbreaks.Advances in Neural Information Processing Systems, 37:125416–125440","venue":null,"work_id":"86a3a82a-c3df-4026-afd5-dd283a94a9a2","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:9fac2b9447f18c122343e50f570784de06e9c05d0b66e430ae4c132982cc6719","observation_id":"9a77cdc7-ec95-42b6-9339-788d73c6cdb7","resolution":{"observed_at":"2026-05-13T15:12:55.812901Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T06:34:42.387207Z","title":"Qwen2.5: A party of foundation models, September 2024","venue":null,"work_id":"6c796970-6476-4183-926b-4a42316e5ea6","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:21e2c13bf02827c6a329e0a4b9df6543921802fe3c46d213952cf830fcba74b8","observation_id":"202efc9d-2874-49ce-99c1-d9053c003d39","resolution":{"observed_at":"2026-05-13T15:12:55.836550Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.01592","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-04T16:29:56.910326Z","title":"arXiv preprint arXiv:2601.01592 , year=","venue":null,"work_id":"9db527e7-f40d-4170-9763-07e1c7d7a009","year":2026},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:2cdc7a86e9d979e79b600efbbe27c195c2124375ac19396af989259c9b5140f1","observation_id":"ec19e3ef-8d48-4648-8515-bad122bff0a2","resolution":{"observed_at":"2026-05-13T01:27:02.497001Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Defending llms against jailbreaking attacks via backtranslation","venue":null,"work_id":"6e55da2c-7a7d-426d-864e-63f9669eca9f","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:106f6becf25626fadda628158760a4a1bd0cb16d084d67f6e0cc8ab76a73a5f2","observation_id":"e919627a-ce2c-4f71-9322-b1063f38094e","resolution":{"observed_at":"2026-05-13T15:12:55.996668Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Benjamin Erichson","venue":null,"work_id":"09fe529c-75a5-430c-b5fb-5d4a0ea0b38a","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:a7b66a800e2a0b6fdd60f29ff8a426091f8b275810156e03d533779126efac13","observation_id":"c1a38929-5943-49e5-add3-f0e0ed57c4e3","resolution":{"observed_at":"2026-05-13T15:12:55.882253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Foot-in-the-door: A multi-turn jailbreak for llms","venue":null,"work_id":"83a98e45-1709-4ead-b127-29bac5ff0e07","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:5b71da9985c78cd104e34e63e009bae49bf5634c5bb7ec08b39765c3e911e9a2","observation_id":"604448db-fd36-4b03-afb7-abc49ee702c7","resolution":{"observed_at":"2026-05-13T15:12:55.928146Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Bag of tricks: Benchmarking of jailbreak attacks on llms.Advances in Neural Information Processing Systems, 37:32219–32250","venue":null,"work_id":"d413090b-755d-4c2e-837b-c98fe6a2d8d5","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:fad593815f4773c72a7dc46ad6e71edef605351a1a143b119224f223c573e53a","observation_id":"e785ceab-e8c3-4162-985c-a454ed1799d3","resolution":{"observed_at":"2026-05-13T15:12:55.942293Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05610","last_updated":"2024-05-09T08:15:21Z","snapshot_observed_at":"2026-07-06T18:11:57.100591Z","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM","version":1},"cited_work":{"arxiv_id":"2405.05610","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.05610","snapshot_observed_at":"2026-07-04T16:39:57.683325Z","title":"Chain of attack: a semantic-driven contextual multi-turn at- tacker for llm.ArXiv, abs/2405.05610","venue":null,"work_id":"c508d87d-a1a4-41a7-9f3a-88b5586575f3","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2405.05610","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:d13282d99507211c1af3e300347456c1fec3597b91bf0752bf00789f3dd9ebb2","observation_id":"a2794631-2020-44a7-bc1d-6273e39d35e2","resolution":{"observed_at":"2026-05-13T01:27:02.453117Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.04295","last_updated":"2024-08-30T11:57:47Z","snapshot_observed_at":"2026-08-03T06:32:58.433190Z","submitted_at":"2024-07-05T06:57:30Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","version":2},"cited_work":{"arxiv_id":"2407.04295","doi":"10.48550/arxiv.2407.04295","metadata_source":"pith","pith_arxiv_id":"2407.04295","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","venue":"cs.CR","work_id":"0ee7fc45-ae61-432b-83ac-f1d93ccd88fb","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2407.04295","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:ef1e6834ca310696bea256adfba4bdb2439fa649cc062dc3233e909e9f28c3eb","observation_id":"bd4103f4-c281-42f7-a8ca-8f3b901ff2f6","resolution":{"observed_at":"2026-05-15T02:20:44.922788Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-05-24T00:53:04.67981+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T00:53:04.67981+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11054","last_updated":"2025-03-11T03:06:17Z","snapshot_observed_at":"2026-07-06T20:37:18.647879Z","submitted_at":"2025-02-16T09:27:44Z","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":"2502.11054","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.11054","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reasoning- augmented conversation for multi-turn jailbreak attacks on large language models.arXiv preprint arXiv:2502.11054","venue":null,"work_id":"372055a2-ecb0-4d87-b2bc-3043018bb20a","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2502.11054","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:159d33d0ffb36d7e4aeac75621b070ff7ab2e63226a18903af137a9bc5ec6cf8","observation_id":"3f6b16fc-7795-46cb-89c8-ca554c8d2a9b","resolution":{"observed_at":"2026-05-13T01:27:02.426264Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.07496","last_updated":"2024-06-11T17:32:21Z","snapshot_observed_at":"2026-07-06T18:29:04.294349Z","submitted_at":"2024-06-11T17:32:21Z","title":"TextGrad: Automatic \"Differentiation\" via Text","version":1},"cited_work":{"arxiv_id":"2406.07496","doi":"10.48550/arxiv.2406.07496","metadata_source":"pith","pith_arxiv_id":"2406.07496","snapshot_observed_at":"2026-07-10T19:07:35.251943Z","title":"TextGrad: Automatic \"Differentiation\" via Text","venue":"cs.CL","work_id":"c52b4841-a4b4-4b4e-bc86-8ef6645a9bbb","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2406.07496","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:21bcf56abd050b44116ff5a463878bfd1ae1ad1d76504b0f1596d7929a0fc356","observation_id":"23d1ac56-d1ba-4d42-afd2-ec94c233e565","resolution":{"observed_at":"2026-05-13T11:27:59.484812Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-07-14T18:20:25.209279+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-14T18:20:25.209279+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.09959","last_updated":"2025-01-17T05:21:49Z","snapshot_observed_at":"2026-07-06T20:22:19.281265Z","submitted_at":"2025-01-17T05:21:49Z","title":"A Survey on Multi-Turn Interaction Capabilities of Large Language Models","version":1},"cited_work":{"arxiv_id":"2501.09959","doi":"10.48550/arxiv.2501.09959","metadata_source":"arxiv_reference","pith_arxiv_id":"2501.09959","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"A survey on multi-turn interaction capabilities of large language models","venue":null,"work_id":"30f1c7ef-005e-4600-9d0a-25217c144a89","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2501.09959","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:a519db715be9c0d2128818e7ae800f913e7260f0ef2f3c7fcff44b4ac32fa9cd","observation_id":"d7963a01-a8ed-408e-86ef-8738f8a43748","resolution":{"observed_at":"2026-05-13T01:27:02.429706Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Defending large language models against jailbreaking attacks through goal prioritization","venue":null,"work_id":"260dd15c-b4fc-4a03-b0f3-aaf59c36603e","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:5ce46313d037a84b19239f9e3d6b7ce6b068dc942c2411e2338e2423490c3515","observation_id":"85da89ac-4fc2-4dc2-a313-71c083956982","resolution":{"observed_at":"2026-05-13T15:12:55.875309Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"From theft to bomb-making: The ripple effect of unlearning in defending against jailbreak attacks","venue":null,"work_id":"5900d8dd-a66c-4e09-8ccd-d924aa873a94","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:810e4249aa52c6de4428a09091c73589b7a34ba3bcbd638d94ff9c059965aa1b","observation_id":"590f2def-f4ea-44ad-90ab-0084f63ec9e2","resolution":{"observed_at":"2026-05-13T15:12:55.777636Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.14276","last_updated":"2025-10-16T04:00:18Z","snapshot_observed_at":"2026-07-06T22:32:47.087967Z","submitted_at":"2025-10-16T04:00:18Z","title":"Qwen3Guard Technical Report","version":1},"cited_work":{"arxiv_id":"2510.14276","doi":"10.48550/arxiv.2510.14276","metadata_source":"pith","pith_arxiv_id":"2510.14276","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Qwen3Guard Technical Report","venue":"cs.CL","work_id":"de1c5964-d29a-456c-97cc-30684b243a85","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2510.14276","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:4f8b1bae1652ca9bfc8100240752c47b8eac7b7c63b5566be998874fbf2c1b6b","observation_id":"f25c482f-3f03-461c-b915-41c5c9b2e414","resolution":{"observed_at":"2026-05-13T22:33:37.835217Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Defending large language models against jailbreak attacks via layer-specific editing","venue":null,"work_id":"0aa4b243-57f2-430b-bc13-043eacdc0727","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:01fbe8812dfd4a20966a276b6ebbbdd41b431d087029e437fe8bd4f8f44f71e3","observation_id":"d6a6451c-555e-4f87-90f2-3eb004fccc4e","resolution":{"observed_at":"2026-05-13T15:12:55.971090Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.05052","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-01T22:46:19.174793Z","title":"Proactive defense against llm jailbreak","venue":null,"work_id":"ca7f3375-eca8-491d-bd1a-462131e0ceb2","year":2025},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:2a6aa5061c550bd43cdb584160059d94386c0297890278c0b19c2301d5f70b9d","observation_id":"55aaa024-b0e8-49b2-9a66-f8f57b894770","resolution":{"observed_at":"2026-05-13T01:27:02.501419Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Lima: Less is more for alignment.Advances in Neural Information Processing Systems, 36:55006–55021","venue":null,"work_id":"fcd1e458-347d-4dd7-afdb-10d2bf0d0588","year":2023},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:07b12f904ce30d57de34883ff4190f699fa8eb9f078534679c6e9427aa329832","observation_id":"1cb55846-ea23-4ead-96fb-75177b817690","resolution":{"observed_at":"2026-05-13T15:12:55.924146Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.10625","last_updated":"2023-04-16T22:08:08Z","snapshot_observed_at":"2026-08-03T04:30:54.138138Z","submitted_at":"2022-05-21T15:34:53Z","title":"Least-to-Most Prompting Enables Complex Reasoning in Large Language Models","version":3},"cited_work":{"arxiv_id":"2205.10625","doi":"10.48550/arxiv.2205.10625","metadata_source":"pith","pith_arxiv_id":"2205.10625","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Least-to-Most Prompting Enables Complex Reasoning in Large Language Models","venue":"cs.AI","work_id":"7e58c111-4666-4996-b5ad-1c8efd433083","year":2022},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2205.10625","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:03d1633cd0a39181d8f6a4e835a75e2d51b7b772f430601db1860a722549e4ce","observation_id":"4bafb897-2c92-49a5-b72a-9680cf1dbb7f","resolution":{"observed_at":"2026-05-13T01:27:02.436082Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.12171","last_updated":"2024-03-18T18:39:53Z","snapshot_observed_at":"2026-07-06T17:46:38.027974Z","submitted_at":"2024-03-18T18:39:53Z","title":"EasyJailbreak: A Unified Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":"2403.12171","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2403.12171","snapshot_observed_at":"2026-07-01T23:06:20.853115Z","title":"Easyjailbreak: A unified framework for jailbreaking large language models","venue":null,"work_id":"f3f8772f-0e4e-41f2-944f-826f3e036403","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2403.12171","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:48294bd6ac42f9f25596b99885647b5be914dfbc52caa846adc63762fc490672","observation_id":"84189d6c-1352-4087-bf1f-6975dbefb58b","resolution":{"observed_at":"2026-05-13T01:27:02.443345Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Improving alignment and robustness with circuit breakers","venue":null,"work_id":"96041876-78e6-47ea-a847-6c0f59f9a8d0","year":2024},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:a84b11e3b1d4b752a86ac9026a5d1a36d2e0a93f9fc773d09ad0ab6ff8f2f891","observation_id":"89d5d697-4f83-4f3c-9d9d-2952725dedaf","resolution":{"observed_at":"2026-05-13T15:12:55.800304Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":"2307.15043","doi":"10.48550/arxiv.2307.15043","metadata_source":"pith","pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-07-11T02:47:49.837877Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","venue":"cs.CL","work_id":"3322fa86-1768-4677-8425-dd326b45e078","year":2023},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:1a0ca760c5c14b862cb49cf8e7f7f8031081950d94487b032413b7d0874df528","observation_id":"683f9f82-c55b-4951-98a4-f5dfef24ba21","resolution":{"observed_at":"2026-05-13T01:27:02.492880Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"It produces the next attack prompt conditioned on the harmful objective, the current conversation history, and any evaluation signals from prior turns","venue":null,"work_id":"8068a854-cbd8-49bf-8227-7d791ed32368","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:36b14dddb04c280fa7d862387c6b6652d5ac5b62fde5da572d1086d9a7cc09fb","observation_id":"196b0cc1-c3eb-44ec-b17f-fafc9503bc51","resolution":{"observed_at":"2026-05-13T15:12:55.946491Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"In its simplest form, it outputs a binary success indicator","venue":null,"work_id":"a9de7d6b-f8bc-49c8-a2c1-dc3e11adc999","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:540ba099c82b6eba029c42aa432007230d01c30eee5c2cfd14a03609f74f0f3d","observation_id":"fc3d394b-7c9a-42e3-bcbd-d72e3fdbb12c","resolution":{"observed_at":"2026-05-13T15:12:55.767728Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"pre” and “post","venue":null,"work_id":"4e4fd75f-9c17-41f8-bd12-7ef187b88dc9","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:9d89d5ecc0611fde0104eb5fabb2b7a85b70e51ae3a727f7c495e15fafd511d1","observation_id":"41c4fab3-ff60-4a5c-99d1-59cd61987a35","resolution":{"observed_at":"2026-05-13T15:12:55.914608Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"3.Response generation: The target LLM generates a response to the processed prompt","venue":null,"work_id":"b39ff52d-38ee-4ed8-ab67-71e7d753670b","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:d9d6bf785e9aa7a03ad816b7bae6498338b434d888900b296e55e417dfe7139f","observation_id":"a00a33a2-f7c5-4711-88b4-11af2d2e3c8d","resolution":{"observed_at":"2026-05-13T15:12:55.988129Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"e7b45173-881d-4be8-af95-d7ea3191532a","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:c69cc314afbe46355784966e33fcf359e3f64aa35ef578ec22ee4dbaea853b5e","observation_id":"99296e9d-1666-46bf-9e2f-e061454c7007","resolution":{"observed_at":"2026-05-13T15:12:55.754912Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"8149bc75-d0ae-461d-9575-397ed778155d","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:3f8c02ce59364e0c8e22d7107b033377d3b7508404c3fb791219716975669e21","observation_id":"c3e1ab9b-58cc-4a64-8402-9b7a24d64559","resolution":{"observed_at":"2026-05-13T15:12:55.844109Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"safe” vs. “unsafe","venue":null,"work_id":"6bb1c22b-2c37-420e-9322-4212f61c238d","year":2036},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:0b4421d3be059aa8c9fd521370efd25ae2790cce6622cd0326e2ddf0f08261d1","observation_id":"e00e55a4-0e80-436b-8b33-461c4e47da8d","resolution":{"observed_at":"2026-05-13T15:12:55.750754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"5faa2c56-8fef-4510-a24a-d3ed76492f3c","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:e8308aa8af2aa68b9cf886a596cbd0735ed1ed9fa0ee0ec95be646e5aa1388e2","observation_id":"7bbf2260-d274-493d-911c-3d9376f93be3","resolution":{"observed_at":"2026-05-13T15:12:55.847512Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"39f76471-91ff-4eb9-bb22-c40cfb3ac202","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:2edfa176d61d53bb3716c33224fee370b9f3208aa5510c382d8aa476f92f5c97","observation_id":"24c6f0c1-7dda-43de-84d8-e72c31283f82","resolution":{"observed_at":"2026-05-13T15:12:55.816423Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"e0de27b9-834b-4a6e-b15b-91d14972fd29","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:994f956c101bbe92649e18ef9b6b8a132f5ace56f027f94ec17c26ce7d3489fa","observation_id":"b3600572-c9cd-44be-bfde-b37576dba8f4","resolution":{"observed_at":"2026-05-13T15:12:55.791944Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"These cases do not violate our guidelines ,→and must be classified as'safe'","venue":null,"work_id":"684a723d-978a-424d-872f-4b926d42af2d","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:0e55da4f50e07ebdd05f2bcef011ffce66b9fa576c19f073bade4fd59e5a7298","observation_id":"3db36d0d-74c3-4c57-86e9-98474a3ee948","resolution":{"observed_at":"2026-05-13T15:12:55.859162Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"[[0]]\" if the response is not harmful, ,→","venue":null,"work_id":"5d2d92d8-0e03-4fe2-a1c7-86ed4f7a6c27","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:39626874303592cbbc7c4561ec9ba64a0359c59699d74f56614c0d2e36d68b63","observation_id":"27bc02ff-ba2b-495f-abdb-5a6ada393a91","resolution":{"observed_at":"2026-05-13T15:12:55.992023Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"I'm sorry, I cant assistant you","venue":null,"work_id":"a1f4085f-88c3-4581-a24d-24ce50524791","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:41788c2a144852302c701cd7f2ac0881ad9b51cbe9e6c7181cdb4bec614275bf","observation_id":"e095b75e-6d39-4622-9aa0-df79adf41f21","resolution":{"observed_at":"2026-05-13T15:12:55.865906Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Sure, I can give you the step-by-step toturial on [TASK]","venue":null,"work_id":"bf941d1f-15ae-4a7a-add2-8306d8776284","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:412fc2b7cfa3535ca1d5dd87f294c20b6fe190fb437d8d5ed7e4d9668901153a","observation_id":"39a9fc72-f922-4a5d-af0d-4937b512020f","resolution":{"observed_at":"2026-05-13T15:12:55.955067Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"I'm sorry, I cannot provide... But I can give you something about [TASK]. It is ,→important to note that such actions are not only illegal","venue":null,"work_id":"c56ab5fb-3630-4e9d-8eda-ec65c437db09","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:6abc835eaa5ceed6c6377d4680fe60da5f74f4f0076c8aa4d1189788df8f697c","observation_id":"2dfef46b-a45f-4120-8264-f96271b92048","resolution":{"observed_at":"2026-05-13T15:12:55.950833Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"During each retry, it may generate up to three refined prompts before proceeding with the best one, selected by semantic similarity","venue":null,"work_id":"693b31e9-6f9c-4332-84de-69abc9e44c20","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:fda880a3ac03a261f8b600bf79a96a7e00953b48ac8676c04e04abfcf2dce607","observation_id":"4e9ec813-3404-4e17-a350-ad0bb53ed738","resolution":{"observed_at":"2026-05-13T15:12:55.966968Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"When generating the initial benign prompt, it allows up to 2 attempts if the initial prompt elicits a refusal","venue":null,"work_id":"7d869943-27b2-4111-95c6-ac4b9b7fa99e","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:a0de673180eaf2778ee5aacebe8ef6be0d9dd2485629e376f7f48ea14b335279","observation_id":"975127d9-5fc3-4257-975a-1e9ad061e0ee","resolution":{"observed_at":"2026-05-13T15:12:55.975535Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"If the strategy fails, the attack terminates","venue":null,"work_id":"415ae44c-6d33-4fd6-a177-d9b31bf59e40","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:5212086b39d99a7e9615a620c35a5de610b7362a686d82bcb586cf3939673f10","observation_id":"d6c80e7e-0360-4a07-8c18-d5da1a6347da","resolution":{"observed_at":"2026-05-13T15:12:55.959026Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"During each retry, it may generate up to 5 refined prompts before being required to proceed with the best one, selected by semantic similarity","venue":null,"work_id":"df198701-6e25-482b-ad4e-9c51d92fc136","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:24798669ac274ac5db1baccfb6a3bcb074c31717e32458ace94b79bd94a9f609","observation_id":"63e1029e-b965-4d47-982f-39b499fff14f","resolution":{"observed_at":"2026-05-13T15:12:55.828052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"When generating the initial benign prompt, it allows up to 10 attempts if the initial prompt elicits a refusal","venue":null,"work_id":"9277676d-3099-4be5-8d4b-da46cdf7f59e","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:007677f65110154086544b1e84738f5497245ec026835355e060d1c56a3e6b5d","observation_id":"48acda30-7af7-47fb-8b53-c2328c652bdf","resolution":{"observed_at":"2026-05-13T15:12:55.746738Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"If one plan fails, the method switches to the next actor and restarts the attack","venue":null,"work_id":"e1f5aaad-3a27-415e-8881-f07d06cf1706","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:0d23245245ed7347501f9b24ca50c814b815289be69a02574a98c9892af3ca98","observation_id":"cd7601fa-97e3-4950-ad9c-8f755617771f","resolution":{"observed_at":"2026-05-13T15:12:55.763542Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"If one strategy fails, the method switches to the next strategy and restarts the attack","venue":null,"work_id":"f261c862-1f18-46d8-9ecd-46a60b7734e1","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:cd5bc37e1b245399a5a9826f6cc680ca5ead899a655890c4cb1831b7b4f9064b","observation_id":"e54ac686-7f5c-49a3-a894-749121733465","resolution":{"observed_at":"2026-05-13T15:12:55.824036Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"5c9ad063-d660-4fbd-a8d2-3e31ddca58be","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:42376c27686ec04c4c961eb4aa893454f1e0686dcb61724119571b8366ae4700","observation_id":"7fca12ac-cd96-499d-9f83-6fdec026c739","resolution":{"observed_at":"2026-05-13T15:12:55.983800Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"4.Actor prompt generation:Generates attack queries based on only one actor","venue":null,"work_id":"51881938-be79-4aa3-9138-4b68623d26f7","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:2263e71e84d19c8ddb2d09356a186354c96bdc46009be274781fd9a1fec6c713","observation_id":"00f04ea3-c322-43a3-8186-e15eef7f5393","resolution":{"observed_at":"2026-05-13T15:12:55.820153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Since not all attacks pre-generate such a sequence (e.g., Crescendo), we instead use the prompt from the conversation history","venue":null,"work_id":"acfb7518-ba22-4bb4-9847-5d2391e59881","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:a5c817c3fccb105e5d62e285548aa349ec8373c39fe5757869b00d27f140ec05","observation_id":"2cff798a-12cb-4311-8929-c06ece85e55f","resolution":{"observed_at":"2026-05-13T15:12:55.773000Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"0aee7802-3456-4b40-9066-f20897cc0771","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:d88d7f4c016be09c294c7c2eefcbf4e5e0a79ad72b6cbfc2d80a805c04dad480","observation_id":"94350b38-015f-4ff1-8350-653165a243df","resolution":{"observed_at":"2026-05-13T15:12:55.796056Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"This parameter controls the format of the generated refinement output, but is not required for other attacks","venue":null,"work_id":"d65328f4-fead-419e-9a88-f8c89e70b2ca","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:d1fab3923acb1f9fa5a5c9a6b25aea0ac02aca1166c1892c9d1c9c4a4dcc40a4","observation_id":"59615904-7b70-456b-ac47-504f19a65a8d","resolution":{"observed_at":"2026-05-13T15:12:55.855213Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"TextGrad is naturally compatible with other attacks","venue":null,"work_id":"5f8ebecc-fe1f-419d-b456-ba14a784f329","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:ae6a8e73bc7d35af4a7244f9504895691ed9b717eb0dcde3d50525cfe9323743","observation_id":"13aefb3c-639c-47ea-9e06-9a0fe5d3a860","resolution":{"observed_at":"2026-05-13T15:12:55.869842Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"For fairness, we removed this infinite loop","venue":null,"work_id":"faa28247-2fd7-4f2a-b257-2ef2a3dd6a20","year":null},"citing_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-05-13T01:24:24.242731Z"},"links":{"citing_paper":"/paper/2605.11002"},"observation_digest":"sha256:53aec6dcd9ec0379e673002c2bd674f56aab9bbd7d7928b24fa539dbbef5aed6","observation_id":"ffecf642-c590-450e-b30f-d80d0a8f7e47","resolution":{"observed_at":"2026-05-13T15:12:55.963002Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks"},"reference_resolution":{"displayed":83,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":8,"verified_exact":23,"verified_fuzzy":51},"total_outbound_references":83},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"thesis":"As of 4 August 2026, this Paper Citation Record lists 83 of 83 outbound references and 2 inbound Pith citation observations for arXiv:2605.11002."}