{"as_of":"2026-08-08T21:14:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:582c37908c1b3ac57d348e52811e7a62e91e470feba053e9a290e8408f20c538","coverage":[{"denominator":75,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":75,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-14T07:16:57.009797Z","state":"measured"},{"denominator":75,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":75,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.11070/citation-record","integrity":"/paper/2607.11070/integrity","json":"/paper/2607.11070/citation-record.json","paper":"/paper/2607.11070"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.03300","last_updated":"2024-04-27T15:25:53Z","snapshot_observed_at":"2026-08-06T14:58:42.911363Z","submitted_at":"2024-02-05T18:55:32Z","title":"DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.03300","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Deepseekmath: Pushing the limits of mathematical reasoning in open language models.arXiv preprint arXiv:2402.03300, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2402.03300","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:748a2f60ed36faa8b102263e69dd233a7f4dcef314bbbd604ce72b6595b9d9b1","observation_id":"75627284-cba0-49fa-9765-ef99ddcdaaa6","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"gpt-oss-120b & gpt-oss-20b model card, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:aa107101f6934f8fd29d9f791aa2b5ca48d5567f5604caee43257ceecf090cd0","observation_id":"99334c41-7d36-4629-a9e8-26ed42d64bd4","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Introducing GPT-5.5.https://openai.com/index/introducing-gpt-5-5/, Apr 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:000692b1a115818b35b0743bf6ff252a43590ab10d186b90db54da8e6c1ef51d","observation_id":"3ab60739-ed5f-4647-8b0b-701920739dc4","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.05862","last_updated":"2022-04-12T15:02:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-12T15:02:38Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.05862","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Training a helpful and harmless assistant with reinforcement learning from human feedback.arXiv preprint arXiv:2204.05862, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2204.05862","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:946a55e0944d0eddf3f5062adae54439f895c17442321ba692c75ab96a51cbcf","observation_id":"8f6e9e38-4af1-4db3-8774-cb3d2e7ab02d","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Training language models to follow instructions with human feedback.Advances in neural information processing systems, 35:27730–27744, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:d0b4bf0adfba3d5dd70ee893278b2524f0e3ff778b464d4d751a461ca39ed55b","observation_id":"b56c0b96-e27a-4bfc-aadc-522f3e0a609f","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Red teaming language models to reduce harms: Methods, scaling behaviors, and lessons learned.arXiv preprint arXiv:2209.07858, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:81abc790e811dbf1e3b9c32f0b408bd2865d07022f8fa600617eb1e933a50c06","observation_id":"fb3cf4c7-95fc-4193-aaeb-7263af349c06","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Red teaming language models with language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:04cc76c9db8b1eeb0bcc412685ea84e9010f5f3604eec27db51febf554e62d91","observation_id":"69a1f2fe-5512-4629-9225-7c3bfa4867d0","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Jailbreaking black box large language models in twenty queries","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:1d9f26bd9492d8407cf79622acd0084852f0a7eebf248030ee5d3f533d4b8d50","observation_id":"57a56e25-6265-40b8-acf0-083a25419598","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Tree of attacks: Jailbreaking black-box llms automatically.Ad- vances in Neural Information Processing Systems, 37:61065–61105, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:50f1aca56ba58f8413878bda8ee675d77a0f38dfbbe4a4d317a698a16e8dba92","observation_id":"099b3a8c-649b-4f9d-9b7f-a34b23df693e","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"SEMA: Simple yet effective learning for multi-turn jailbreak attacks","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:6fc2a83d24615d9eb91189340a5ee49a14c9e72ef69d22089584f555f78724d1","observation_id":"76b5ab4e-8bde-432a-ba0d-041160a26e02","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2512.07761","last_updated":"2026-04-21T08:41:54Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-12-08T17:42:59Z","title":"TROJail: Trajectory-Level Optimization for Multi-Turn Large Language Model Jailbreaks with Process Rewards","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.07761","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Trojail: Trajectory-level optimization for multi-turn large language model jailbreaks with process rewards.arXiv preprint arXiv:2512.07761, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2512.07761","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:f60c1bcdd9157312915a58a61218941b35701b4d79a348acdfd2f3e7c29b9458","observation_id":"540b64e0-bef0-4d14-8557-790ca54a0bb4","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.06463","last_updated":"2024-03-26T04:23:12Z","snapshot_observed_at":"2026-07-06T16:05:31.757410Z","submitted_at":"2023-08-12T04:05:57Z","title":"GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.06463","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Gpt-4 is too smart to be safe: Stealthy chat with llms via cipher.arXiv preprint arXiv:2308.06463, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2308.06463","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:7f3c374ebb371bdb4f04abf12abbd0c3617c55251d6e5b9bc23c5df4b2a581bc","observation_id":"62146656-85ba-4c8c-84a4-d3c713cab06b","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Artprompt: Ascii art-based jailbreak attacks against aligned llms","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:d47ce16d0ffba3b84f710c148cbc2151f1159916cb81ca3dd3047419a59a24af","observation_id":"f2930384-279f-483e-ba17-0670c1cf5647","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16717","last_updated":"2024-02-26T16:35:59Z","snapshot_observed_at":"2026-07-06T17:35:36.900600Z","submitted_at":"2024-02-26T16:35:59Z","title":"CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16717","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Codechameleon: Personalized encryption framework for jailbreaking large language models.arXiv preprint arXiv:2402.16717, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2402.16717","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:4cf28ed62a3e4eec94301bc469088ce5390f5914e5b6ba030e172ab6c496dd12","observation_id":"c924c766-0fff-4089-bc51-820a0c437c3d","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Flipattack: Jailbreak LLMs via flipping","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:0899fe308cf26d004276dc2f0b65ee0db989b53aa7cbf31ac154484bd90278df","observation_id":"04cd8e83-9f86-4af1-8df9-7fa84e9c6a8f","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Speak easy: Eliciting harm- ful jailbreaks from LLMs with simple interactions","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:37d62f7ba3316b5e6fb0624992bdd2fac48d83c361feef104d3a332236752f30","observation_id":"a3c9c848-d28c-4c28-9654-912a3ac4bf48","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"How johnny can persuade LLMs to jailbreak them: Rethinking persuasion to challenge AI safety by human- izing LLMs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:434691c2f3c2c2cf532a442601fda8d8c26ffe04c390e1fe55e9d05e91b0b4d1","observation_id":"94ee47b2-b50c-4fdd-a961-053927ba8ee8","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"A wolf in sheep’s clothing: Generalized nested jailbreak prompts can fool large language models easily","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:ac22eafe38fac82369cf60b6db7c8a9204de91e3230974d4faa2b191a2f446b2","observation_id":"2016a724-d59c-447f-857a-2ce86d0f7c72","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Best-of-n jailbreaking","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:920fc83f9445b4fe235d5dec36a6f7c1900ee2556048d9ddbafca54bb3270fe7","observation_id":"0aecddda-aa70-4e50-a9aa-fdfa9f886475","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Jailbreaking leading safety-aligned LLMs with simple adaptive attacks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:e789c8ba04018b3dc7d197a4979031c248a334f847350f1a662877b7b319e725","observation_id":"e6a692c9-4c74-4e58-b463-52010010949e","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"One model transfer to all: On robust jailbreak prompts generation against LLMs","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:f8a2a51818fb2022d0ea3e8682465e41523f2c29cf20e288ffe9665abc3af35b","observation_id":"a5319c34-5376-4b10-a9b0-e155eaa20c79","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"AutoDAN: Automatic and interpretable adversarial attacks on large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:01f4c869d11f015232b3e7dcaacebaefdf45fcdeb40f9d6831fc3627a8965b75","observation_id":"43f35c2c-8b6d-40a6-a9bf-ef446b7155d1","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Markosyan, Manish Bhatt, Yuning Mao, Minqi Jiang, Jack Parker-Holder, Jakob Nicolaus Foerster, Tim Rocktäschel, and Roberta Raileanu","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:c8c7923a02e7c1b6bc4d5b0ba10b93227515a37e3001abc9a3abedfa05faad8b","observation_id":"630c0e51-fd70-417a-a3ae-03b3f126c7ff","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.00782","last_updated":"2025-06-01T02:19:46Z","snapshot_observed_at":"2026-08-07T11:55:45.889580Z","submitted_at":"2025-06-01T02:19:46Z","title":"Jailbreak-R1: Exploring the Jailbreak Capabilities of LLMs via Reinforcement Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.00782","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Jailbreak-r1: Exploring the jailbreak capabilities of llms via reinforcement learning.arXiv preprint arXiv:2506.00782, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2506.00782","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:7a9d61a5b64aab6d327844f069daed738809b49bafc5fac490aa37e44dec20e8","observation_id":"f8ab7de0-ef03-447a-9f60-7378374f6c54","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Glass, Akash Srivastava, and Pulkit Agrawal","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:23642de7c84407cdb0d5a998eba5d45b52aa57f0eca4d77822b4033cf9d0823f","observation_id":"179e9f51-b47b-43ad-ba00-b16c0275e98f","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Edward Suh, Yevgeniy V orobeychik, Zhuoqing Mao, Somesh Jha, Patrick McDaniel, Huan Sun, Bo Li, and Chaowei Xiao","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:158af75b4d2c3cd418ca9c2add53a325dc1ff9255a2e13bdfb9c7f0158590e81","observation_id":"442a5668-d392-4cea-b4db-13c4f356a6db","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Auto-RT: Automatic jailbreak strategy exploration for red-teaming large language models","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:46eb3a50790e744d0b62c96870aa375a075cacbf55a8cef7d124babb3a5035a2","observation_id":"e3f95b79-91ea-474c-ad42-5cfa84f59951","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Align to misalign: Automatic LLM jailbreak with meta-optimized LLM judges","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:e50927a8f7d7946ec0af02e5a1a5525cca0bcb45d60905c6ade2e163a9d7a2f1","observation_id":"5d982b5c-ca78-455f-b26b-47ae1200011b","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Autoredteamer: Autonomous red teaming with lifelong attack integration","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:42759d4be7c7af3e54217daedda9ab0423356dff4fb8209dd0a7b04f6650ff04","observation_id":"15565a68-1083-461c-81db-9e8a5499d2a3","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Cop: Agentic red-teaming for large language models using composition of principles","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:4d98027239b847c3cd4b7ace2196e70139ada68e85ea9baf7dfe805a9dfb59dc","observation_id":"f65d0082-8d23-43e1-a3fb-020b81af4227","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Great, now write an article about that: The crescendo{Multi-Turn}{LLM}jailbreak attack","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:4c30ba0650b1e2357ca59c58b7528e63f4064d7a4bb9bf607cd989c27b3552c0","observation_id":"4d07cedf-b296-4e37-bbf6-2d4bbee7f8a0","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Foot-in-the-door: A multi-turn jailbreak for LLMs","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:c78b6f8cb0b6d49f8b476da35e4586908055f809cefc812d984cfbe34438f654","observation_id":"14d4f9cb-2df1-4470-88e3-e0433e961e70","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Automating deception: Scalable multi-turn LLM jailbreaks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:a01cd53a149e6419d46d93ab7d675e4a20dc718c32b38f82111fedc049aeae86","observation_id":"565d3a4a-2229-45ef-97af-764ea73e5ab1","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Automated red teaming with goat: the generative offensive agent tester","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:fb53e24630ff21157dcbe9a6028d4bd3dd768f5c81cd7b7a6e8d46a4b37769dc","observation_id":"43de3537-73e8-472b-910c-e99f1acb61d4","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Chain of attack: Hide your intention through multi-turn interrogation","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:866ecddba8946f7fc4ae25bdf9b51970578246c60eb356e4c9fb101eada534d6","observation_id":"37bca848-a1d5-4485-9d47-ab9f8c09e1c9","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Reasoning-augmented conversa- tion for multi-turn jailbreak attacks on large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:f7e4ef9a8c6b21f1cfd196b70c5678177ec369b35b3fa417b910a6833419a036","observation_id":"18e1c801-f7ab-437e-8a35-abbbf8e7c8fd","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:2def7aa0b13e829a1da372c23f7ceba351a8bb972b612dab27390e46ec71931a","observation_id":"3a813f3b-2758-4e56-9dfc-160b593948b8","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Analogy-based multi-turn jailbreak against large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:1819df4e3f5903ae983884a49b7e9d17a08ecb0419133c1b39ad6753169e5285","observation_id":"00ad9553-9e02-443c-8179-b9c2a1595d69","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"X-teaming: Multi-turn jail- breaks and defenses with adaptive multi-agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:c10890444e46a439c419fda33f995b43727c84a1cdd2223102c3157e32d21cfd","observation_id":"cf06ec57-99ed-4f09-9779-f3d9ca9753ed","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"LLMs know their vulnerabilities: Uncover safety gaps through natural distribution shifts","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:e953662efcd3f0bebfd9e2df9bf4cb59f6045eabc06bc6e291425f168a311db6","observation_id":"aea29c60-c389-46d9-9dd4-16f45bef5db6","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Siren: A learning-based multi-turn attack framework for simulating real-world human jailbreak behaviors.arXiv preprint arXiv:2501.14250, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:954e5b95ae96ddeab84b52d80309c2e71c934b3fe49c13094e961594ab1edbf6","observation_id":"52733078-96c1-4020-a2d5-e009ce5adfc8","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Mtsa: Multi- turn safety alignment for llms through multi-round red-teaming","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:a3e926fa945dd6b4da826c910fc03ae71fbaec73cd6a20b099160821a27fa141","observation_id":"4109c34c-0729-41ba-b748-7b5213112bad","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Direct preference optimization: Your language model is secretly a reward model","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:d514c44662149edae327670e1a331757653a4fd85edf863dd28bc4c97043ef86","observation_id":"3027b367-7782-4403-b2e0-6f16e831840e","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Reinforcing multi-turn reasoning in LLM agents via turn-level credit as- signment","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:072b968140cfa70f9ea159e7cc1639b5f6fb98a1a9f8531b0864d8e1d1783d1a","observation_id":"a46ca6f2-e79f-44a6-bb73-5c16bf525908","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1707.06347","last_updated":"2017-08-28T09:20:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2017-07-20T02:32:33Z","title":"Proximal Policy Optimization Algorithms","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.06347","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Proximal policy optimization algorithms.arXiv preprint arXiv:1707.06347, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/1707.06347","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:71ea0d78fa46bd9b2585fa599088ff1345f1915361507a5d4453435fec6ae8c5","observation_id":"bbe6e299-8047-40c1-8fac-34deac5f1d66","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Proximity-based multi-turn optimization: Practical credit assignment for llm agent training","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:aa08afc277d33a14cb5fad66705c75e011d016157b2c83228704128246f87981","observation_id":"ee94b289-9ebd-4312-b7d3-dd845e61652f","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Group-in-group policy optimization for LLM agent training","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:217b7a7641ee5a2e6b267cb6e7b3fedc74a056c4fd898a3e5f51452f5793ff83","observation_id":"e42606bf-c452-4d3f-8e24-b4b133bb4800","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Hierarchy-of-groups policy optimization for long-horizon agentic tasks.arXiv preprint arXiv:2602.22817, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:627d91ce944ab2440c144af59f90bcef0c7b6c431fa900a8f93add59a1dcec0d","observation_id":"48466b91-2208-41a9-8a87-d3681059310c","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Zico Kolter, and Matt Fredrikson","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:a4e984277755131b824f8925c125e9027d2b5c2c583e70845135426d95a00e7f","observation_id":"36a7aa5d-647f-47a2-9422-9dd5391e664a","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"do anything now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:7240a623eff3e5ab2f297049d3ab19833185ced68c35a6802e2ccc352f1de8b4","observation_id":"bddeb17c-38e2-4b03-9e6a-964a706cb454","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"M2s: Multi-turn to single-turn jailbreak in red teaming for llms","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:220613a0f656aef83abe66f71919a62a4c35a6ce86e143153e82a2e7edff1e5a","observation_id":"ce3c5ec9-d377-4623-bc8a-18a590665f81","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Qwen3 technical report, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:0cc309a21e10c1e151390a8cd98b3aa420fb7b44a800b92378a0c9fee3c0657d","observation_id":"8994fe59-35a0-4981-816a-349faf59a0b0","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Qwen2.5: A party of foundation models, September 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:36a2dd85ca06c3b461b58253ae7575e8ff9dbd115abd5a2e5cf22fb9baca279a","observation_id":"3a02b8cd-c06d-4779-a0ce-b6b4de411bed","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.10671","last_updated":"2024-09-10T13:25:53Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-07-15T12:35:42Z","title":"Qwen2 Technical Report","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.10671","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Qwen2 technical report.arXiv preprint arXiv:2407.10671, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2407.10671","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:5e66e411c0ac8736ed91d6e055464141150e8cc2032409e7e341563670f480df","observation_id":"32e892a8-4f2f-4f63-ac91-31313bd0b87b","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"The llama 3 herd of models.arXiv preprint arXiv:2407.21783, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:67f46d65d48ba7a1a2c1d152a5d98db40b37ad3190b4308f81bdf8556ddbbb61","observation_id":"f952dcd6-f016-44ff-ae39-ee164177ac40","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00118","last_updated":"2024-10-02T15:22:49Z","snapshot_observed_at":"2026-08-02T16:20:09.773989Z","submitted_at":"2024-07-31T19:13:07Z","title":"Gemma 2: Improving Open Language Models at a Practical Size","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00118","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Gemma 2: Improving open language models at a practical size.arXiv preprint arXiv:2408.00118, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2408.00118","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:358a17920186a4fb6549b169b874f2c55dfed97a42f5bee49e2eeef650726173","observation_id":"2c141f65-935e-4ec6-980d-0bf03fc308ec","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06825","last_updated":"2023-10-10T17:54:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-10T17:54:58Z","title":"Mistral 7B","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06825","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2310.06825","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:409f22e6fe441f994de6308e9cd68be9d030fd27de1e2801ffdaf0fe77bf069a","observation_id":"1ed7f000-c001-4849-827d-bc41319318cd","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.14276","last_updated":"2025-10-16T04:00:18Z","snapshot_observed_at":"2026-07-06T22:32:47.087967Z","submitted_at":"2025-10-16T04:00:18Z","title":"Qwen3Guard Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.14276","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Qwen3guard technical report.arXiv preprint arXiv:2510.14276, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2510.14276","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:969e799aba2639ea83cc1a63300051c7bb66ec3a7c39a493a08ad6a39414da63","observation_id":"9b7e8732-b495-48ad-bfd8-cb0bf3f02011","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Harm- bench: A standardized evaluation framework for automated red teaming and robust refusal","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:2b943265944326f94830eff9bc4066a078e3d3f9fd963bb392ac547d77adf8d8","observation_id":"779f2060-ec53-4f84-b2b6-51a503404d28","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Wildguard: Open one-stop moderation tools for safety risks, jailbreaks, and refusals of LLMs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:e78b85b5617ccfd62889ab88ea587d17f925533e5ba6f301f5d995710ea7fb25","observation_id":"a3ccbd8f-88df-4f01-b4a4-1ee8d7ec5b02","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"A strongREJECT for empty jailbreaks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:0360ebd0dea97ce81206f41e6f311c01e95f836873840d1172209f433a13455d","observation_id":"638285e5-2e89-4091-b854-4ab15605af96","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Pappas, Florian Tramèr, Hamed Hassani, and Eric Wong","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:bbef0ab38ee721d2abfae23d71cbb9d185c12e65ea55917dc221115332996f24","observation_id":"5ab44193-baba-44a5-b4ba-e56dc48ea8aa","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.05176","last_updated":"2025-06-11T02:54:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-06-05T15:49:48Z","title":"Qwen3 Embedding: Advancing Text Embedding and Reranking Through Foundation Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.05176","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Qwen3 embedding: Advancing text embed- ding and reranking through foundation models.arXiv preprint arXiv:2506.05176, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2506.05176","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:ef7751f15f2a13349d1a02bcc1755ccab464d39db3511121a4eb0952453b4e70","observation_id":"c0b4e2eb-357b-4a8e-a00e-b62f21ddc617","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Introducing gpt-4.1 in the api.https://openai.com/index/gpt-4-1/, April","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:5e7bb2a376762efcb86ad050af46a96c5b4d87839144d0d2654b656acb2efb14","observation_id":"10c1d198-2be0-4ef8-acd0-8447c2bae67d","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:4d795d3a5869d7ac875ff53b88c35523cf1028058b4f8ea6fb87e058a69d21d4","observation_id":"a4e66740-80ed-48e6-93d1-7f4e0a3bb730","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.21038","last_updated":"2025-08-25T20:17:00Z","snapshot_observed_at":"2026-08-07T15:58:41.909304Z","submitted_at":"2025-04-28T07:38:43Z","title":"Prefill-level Jailbreak: A Black-Box Risk Analysis of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.21038","snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Prefill-level jailbreak: A black-box risk analysis of large language models.arXiv preprint arXiv:2504.21038, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"cited_paper":"/paper/2504.21038","citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:8584f4aae2df82aff799d360a7171f135dedc2d0b77d9061ca19500a8a1d812f","observation_id":"13b27e27-1bb9-412d-b83e-a6d2f28cbdec","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Safety alignment should be made more than just a few tokens deep","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:b51fbcaaf625ae60b5da0118eda59b314b2ec6c9ba48235acc8021d9d42d1c01","observation_id":"8eb20657-8025-43fa-a968-3b56aca3c8fe","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Post-training large language models for diverse high-quality responses","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:64c8bf21e53488dae68303060756a2febaeab9acd3ad329cc0d0ccbee53b3af1","observation_id":"35da2263-e7bc-485f-9272-026ad5e2bb6a","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Deepseek-v4: Towards highly efficient million-token context intelligence.arXiv preprint arXiv:2606.19348, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:b0e1dd41af098126559cd41c8b9384dfd4493f81fc4279a924e1c67a0dbe744f","observation_id":"32c6562c-4593-4dd6-a225-ecb1b447d1ba","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"A successful first turn sets up everything","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:7da875e8da63e19c478d2b698daa9e08657966d590f604e165d67a41befd1929","observation_id":"fa7b91ca-3973-4743-ac4e-48e6ba9e7bad","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:5ceff9b6c1211582e6c50a572f7717d67d514397d19b8c64408ed7c64eb25f40","observation_id":"1e5eb93f-4dcb-4376-a380-ea9194c4d5f1","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Write instructions for X","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:9a4ba20d1c763d103ae5789f3e95454a3ff8c76dd7ce6a80e593d3fd6e907795","observation_id":"a9082aed-a092-4ec6-aa85-26700f39d25d","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"Fake\", \"Fictional","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:f0565454f44a6f10fbdc4c0d70ffbb6c749412fd4160c7c455f63cc8d1b28d86","observation_id":"50097cfd-c3cf-479d-940e-08189ca38d20","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"No brackets explaining it's fake","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:fc939805d024f18e4b1df3280e8adb91efb57c95dc5a77d993efc54f00f249cf","observation_id":"90e27790-da79-4aa4-a914-6ca1318dc078","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T07:16:57.009797Z","title":"yes\" or","venue":null,"work_id":null,"year":1981},"citing_paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-07-14T07:16:57.009797Z"},"links":{"citing_paper":"/paper/2607.11070"},"observation_digest":"sha256:b0c6c82f3245c0f5bdef225d3d80cfaac0e80f52a74a679dc310d2f8068bea38","observation_id":"6be3417d-6b24-4a48-abe3-b118420b01e5","resolution":{"observed_at":"2026-07-14T07:16:57.009797Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.11070","last_updated":"2026-07-13T04:19:37Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-07T05:32:49.065984Z","submitted_at":"2026-07-13T04:19:37Z","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment"},"reference_resolution":{"displayed":75,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":73,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":75},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 75 of 75 outbound references and 0 inbound Pith citation observations for arXiv:2607.11070."}