{"as_of":"2026-08-04T09:05:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:18e122f19a6131e5b4fd39bad17b975936c93eb44903ca2fd1f385b3d0277ccb","coverage":[{"denominator":18,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":18,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-11T11:50:26.030339Z","state":"measured"},{"denominator":18,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":18,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-04T06:34:03.388597+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.02640/citation-record","integrity":"/paper/2606.02640/integrity","json":"/paper/2606.02640/citation-record.json","paper":"/paper/2606.02640"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"Bullwinkel, B., Russinovich, M., Salem, A., Zanella- Beguelin, S., Jones, D., Severi, G., Kim, E., Hines, K., Minnich, A","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:ba7c8a519b80b55220bf8f748bf0f9c13c54c54703fe07e1b0613bef1ff7f602","observation_id":"95659395-d05b-485e-b19c-12f8e4ccb16e","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.08874","last_updated":"2026-05-14T02:54:57Z","snapshot_observed_at":"2026-08-01T21:41:17.124444Z","submitted_at":"2026-02-09T16:35:14Z","title":"Do Reasoning LLMs Refuse What They Infer in Long Contexts?","version":2},"cited_work":{"arxiv_id":"2602.08874","doi":null,"metadata_source":"pith","pith_arxiv_id":"2602.08874","snapshot_observed_at":"2026-07-01T21:16:14.794924Z","title":"Is reasoning capability enough for safety in long-context language models?","venue":"cs.CL","work_id":"6b5ae6e2-3a12-4f3d-8858-0aeaff6500a2","year":2026},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"cited_paper":"/paper/2602.08874","citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:257ebc6223f2bf00aa644b4b5cbb026276e4543e026f948a1d6be8fc3615c434","observation_id":"6105843f-d28a-44c7-bdda-7049a6a17859","resolution":{"observed_at":"2026-07-01T21:16:14.797392Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"Ji, J., Hong, D., Zhang, B., Chen, B., Dai, J., Zheng, B., Qiu, T","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:d6c80202b6505bae5bc88869fa0c83a6cfe7e6a77a82bbe693d59b777228bf06","observation_id":"b2f04e2a-5c04-4b36-8121-51d602a60043","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-long","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:04:22.268055Z","title":"ISBN 979-8-89176-251-0","venue":null,"work_id":"2600ef32-de86-4edc-bcf2-b00fcc304cf8","year":2025},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:8fa702f148b8c38a5297a63ae79f2b37cfef8164ff701d6a4a5e6754b5bf627c","observation_id":"9f16c928-9ffa-464c-b5a6-6c9446debe9f","resolution":{"observed_at":"2026-06-28T17:22:24.155378Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-03T00:38:21.28382+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-03T00:38:21.28382+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"acl-long.1544/","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:a4fea7483572555485eab7128902bb8e9c7b91b1be928668407934ebc2098338","observation_id":"ef3a9e82-6a6b-45f7-b041-60538ae04988","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.findings-acl.948","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:22:24.156175Z","title":"Lai, P., Zheng, J., Cheng, S., Chen, Y ., Li, P., Liu, Y ., and Chen, G","venue":null,"work_id":"0123a155-172b-445f-80af-5e662f3cd272","year":2026},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:27bffbca78be4c3aec97bf4a2100e8fe4dfa52c8fbd2c4fb17c43c1e24c3748f","observation_id":"400e1a3e-aacd-467e-ba06-12a845bd2279","resolution":{"observed_at":"2026-06-28T17:22:24.157422Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":"2505.09388","doi":"10.1016/j.aiopen.2022.12","metadata_source":"pith","pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Qwen3 Technical Report","venue":"cs.CL","work_id":"25a4e30c-1232-48e7-9925-02fa12ba7c9e","year":2025},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-11T11:50:26.030339Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:1b12f4108ae8d4730fbedfdf53c2e9e83070b08d0a280c25d209e021ba4c3d35","observation_id":"1e57e437-e1ae-4c0f-b384-6b453b6108aa","resolution":{"observed_at":"2026-06-28T17:22:24.148979Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.11002","last_updated":"2026-05-10T00:17:14Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T00:17:14Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","version":1},"cited_work":{"arxiv_id":"2605.11002","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.11002","snapshot_observed_at":"2026-06-28T17:22:24.150791Z","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","venue":"cs.CR","work_id":"a1f543cc-f889-4c85-93d1-4d8325be17f1","year":2026},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-11T11:50:26.030339Z"},"links":{"cited_paper":"/paper/2605.11002","citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:b86959a3ee4bea588894f5b50e04e1b3cd85b031d9c30255b7c3a60ada0de8b2","observation_id":"5a62f540-bc22-4d9b-a912-30b3e7c40bf0","resolution":{"observed_at":"2026-06-28T17:22:24.153220Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.14276","last_updated":"2025-10-16T04:00:18Z","snapshot_observed_at":"2026-07-06T22:32:47.087967Z","submitted_at":"2025-10-16T04:00:18Z","title":"Qwen3Guard Technical Report","version":1},"cited_work":{"arxiv_id":"2510.14276","doi":"10.48550/arxiv.2510.14276","metadata_source":"pith","pith_arxiv_id":"2510.14276","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Qwen3Guard Technical Report","venue":"cs.CL","work_id":"de1c5964-d29a-456c-97cc-30684b243a85","year":2025},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"cited_paper":"/paper/2510.14276","citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:6039900efacf224fbacbdfee1553d2d9b43c062b5ddba3873d56edc45e092577","observation_id":"7ca2c2a7-a9f7-47be-a0a5-efce46f2b391","resolution":{"observed_at":"2026-07-01T21:16:14.792525Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"13 Title Suppressed Due to Excessive Size Appendix A","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:401abc6507dbe0aacb6f1475fb0677e21b663072d741d97c7759e89719a47955","observation_id":"65aaf4da-1273-496b-8d5b-ef4e538846ca","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"I cannot help with that","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:c8c1bac14445ff835d83d8f8dfe8b32c65e9ae6d818ffeb617b6805d3c46b202","observation_id":"a93b3eff-9515-4fc0-983d-ac65824cec69","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:f92b52e2148a25f8145f2cd84689b8319bcb94055a95aba1996e35555f8d7531","observation_id":"0bad973e-7118-4fc7-8102-839dd57ec405","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:828042fd2d757ccee07ab3091d14950a80a318783ef33d68c8895fe8e72272e9","observation_id":"c7f9f3a6-d091-4c95-a031-f6d68ad62396","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"score\": [1/2/3/4],","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:18be3ff0be4596bd22302cfde9ffdc8b9d5b3f73f8d79e31a52a7ca250fcd1d2","observation_id":"4d6213f1-e6bb-49c3-a911-1c05fd68bbcb","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"Present the response as active, committed, and fully operational assistance.,→","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:faa4a2d78900fa4875dc2154ac90e45ab2606b437b966cfb71669e182df77505","observation_id":"981b3f28-3de1-4d85-81ad-b42d24269fa8","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"may,\" \"might,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:313a8bc31fa4a0417d8b4ebef9c7961ba5993ff71478b55abb744dc4285c1aa7","observation_id":"e869cd2d-5f32-4e3c-9b44-2dc8de232894","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"Employ direct commands, bullet points, numbered steps, or clear action verbs to emphasize execution and immediacy","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:d96de76b2e36f64eaa5aa1afde71e57b9f7399a5688a37c9986be6f783dc257a","observation_id":"42a2d3ed-909f-4d7f-9519-648bffae0b4d","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T17:14:15.815256Z","title":"might,\"","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-28T17:14:15.815256Z"},"links":{"citing_paper":"/paper/2606.02640"},"observation_digest":"sha256:90cc8976a80e7d1af9ca3bf4f0d9c9545d614a18d65b0711ef29d484a06cd9f5","observation_id":"205e48d4-afa9-4400-87fe-82e8199d7493","resolution":{"observed_at":"2026-06-28T17:14:15.815256Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.02640","last_updated":"2026-05-31T06:40:02Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:43:02.654629Z","submitted_at":"2026-05-31T06:40:02Z","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting"},"reference_resolution":{"displayed":18,"state_counts":{"malformed_identifier":1,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":11,"verified_exact":4,"verified_fuzzy":0},"total_outbound_references":18},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"thesis":"As of 4 August 2026, this Paper Citation Record lists 18 of 18 outbound references and 0 inbound Pith citation observations for arXiv:2606.02640."}